Controls Engineer Visa Sponsorship Jobs in Idaho
Idaho's controls engineer jobs are concentrated in the Boise metro, where manufacturers like Lamb Weston, Micron Technology, and ON Semiconductor run complex automated production lines. Twin Falls and Nampa also have active hiring in food processing and semiconductor facilities. Most sponsoring employers file H-1B visa or TN visa petitions for qualified international candidates with automation and PLC experience.
Find Controls Engineer JobsOverview
Showing 5 of 102+ Controls Engineer Jobs in Idaho with Visa Sponsorship
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all 102+ Controls Engineer Jobs in Idaho with Visa Sponsorship
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Controls Engineer Jobs in Idaho with Visa Sponsorship.
Get Access To All JobsDescription
Position Overview
The Senior Security Controls Engineer designs, implements, and continuously improves technical security controls that reduce risk across on‑premises, cloud, and endpoint environments. This role specializes in hardening, benchmark compliance, configuration risk reduction, compensating controls for non‑patchable vulnerabilities, and control automation at scale. The engineer partners with IT operations, platform teams, and risk/compliance to ensure controls are effective, measurable, and audit‑ready.
Job Details
Reports to
Director of Information Security
Location
Boise, ID - Onsite
Employment Type
Full‑time
Travel
0–10% (as needed for site visits, projects, or audits)
On‑Call
May participate in a rotating on‑call schedule for security engineering support
Key Responsibilities
- Engineer and maintain preventive and detective controls across endpoints, servers, network, identity, and cloud services (Azure/AWS).
- Lead configuration hardening initiatives using industry benchmarks (e.g., CIS) and establish secure configuration baselines for common platforms (Windows, Linux, network devices, cloud services).
- Design compensating controls for vulnerabilities that cannot be remediated through patching (e.g., configuration changes, isolation, access controls, WAF rules, EDR policy tuning, segmentation).
- Own the technical control lifecycle: control requirements design implementation testing/validation monitoring continuous improvement.
- Develop and maintain control-as-code and automation (PowerShell/Python/Terraform/CI-CD) to deploy and enforce configurations consistently.
- Implement configuration compliance monitoring, drift detection, and remediation workflows; integrate with ticketing/ITSM for exception handling.
- Partner with Vulnerability Management to translate findings into durable mitigations (hardening, compensating controls, secure defaults) and reduce recurring exposure.
- Collaborate with SOC/IR to improve detections and containment policies aligned to threats and incidents; tune controls based on lessons learned.
- Produce audit-ready evidence: control narratives, diagrams, test results, screenshots/exports, and KPI dashboards.
- Maintain standards, procedures, and runbooks for control engineering; mentor junior engineers and provide technical leadership to cross-functional teams.
Typical Deliverables
- Secure configuration baselines and reference architectures for key platforms.
- Benchmark compliance reporting (coverage, drift, exceptions) with remediation plans.
- Compensating control designs and validation artifacts for non-patchable risk.
- Automation modules/scripts (policy-as-code) to deploy or enforce controls at scale.
- Control test plans, operational metrics, and audit evidence packages.
Required Qualifications
- 7+ years in security engineering, systems engineering, or infrastructure engineering with a strong focus on security controls and hardening.
- Hands-on expertise with Windows and Linux hardening, identity controls, and endpoint security control configuration.
- Experience implementing benchmark-based configuration standards (e.g., CIS) and managing exceptions/risk acceptances.
- Strong understanding of networking fundamentals (segmentation, firewalls, proxies, routing) and how to apply compensating controls.
- Cloud security controls experience in Azure and/or AWS (IAM, network controls, logging, security services).
- Proficiency in scripting/automation (PowerShell and/or Python); familiarity with infrastructure as code (e.g., Terraform) preferred.
- Ability to translate risk into technical control requirements and document controls for audit and compliance purposes.
- Excellent written and verbal communication; ability to work across infrastructure, application, and governance teams.
Preferred Qualifications
- Experience with configuration management and compliance platforms (e.g., Intune, Group Policy, SCCM/MECM, Ansible, Chef, Puppet).
- Experience with vulnerability scanning and exposure management tools (e.g., Tenable, Qualys, Rapid7) and mitigation engineering workflows.
- Experience tuning EDR policies and implementing detection/response guardrails (e.g., Microsoft Defender for Endpoint, SentinelOne, CrowdStrike).
- Experience with SIEM/SOAR integration for control telemetry and automated response.
- Security certifications (one or more): CISSP, GIAC (GSEC/GCED/GCIA), CCSP, AZ-500, AWS Security Specialty, or equivalent.
- Prior work in regulated industries (financial services, healthcare) with control evidence expectations (SOC 2, PCI DSS, GLBA).
Core Competencies
- Control engineering mindset: designs controls that are measurable, testable, and durable.
- Risk-based prioritization: focuses effort where likelihood and impact are highest.
- Systems thinking: understands dependencies and minimizes operational disruption.
- Automation-first: reduces manual work by codifying and scaling controls.
- Stakeholder partnership: collaborates with IT and product teams to drive adoption.
Success Measures (KPIs)
- Reduction in recurring high/critical findings attributable to configuration or control gaps.
- Benchmark compliance coverage (%) and drift rate over time across in-scope assets.
- Mean time to mitigate (MTTM) for non-patchable vulnerabilities using compensating controls.
- Control effectiveness test pass rate and audit evidence readiness (time to produce evidence).
- Automation impact: number of controls deployed/enforced via code and reduction in manual effort.
Working Conditions
This role requires the ability to work effectively with production systems and coordinate maintenance windows, change control, and emergency response activities when required.
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.
EEO Statement
ACA provides equal employment opportunities (EEO) to all applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. ACA complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.
California Privacy Notice
As an employer of California residents, we are dedicated to protecting your privacy rights. Any personal information you provide during the application process will be used solely for permitted internal purposes and will be handled in accordance with applicable privacy laws. By applying to this position, you consent to the collection, use, and disclosure of your personal information as described in our Employee Privacy Notice.
Description
Position Overview
The Senior Security Controls Engineer designs, implements, and continuously improves technical security controls that reduce risk across on‑premises, cloud, and endpoint environments. This role specializes in hardening, benchmark compliance, configuration risk reduction, compensating controls for non‑patchable vulnerabilities, and control automation at scale. The engineer partners with IT operations, platform teams, and risk/compliance to ensure controls are effective, measurable, and audit‑ready.
Job Details
Reports to
Director of Information Security
Location
Boise, ID - Onsite
Employment Type
Full‑time
Travel
0–10% (as needed for site visits, projects, or audits)
On‑Call
May participate in a rotating on‑call schedule for security engineering support
Key Responsibilities
- Engineer and maintain preventive and detective controls across endpoints, servers, network, identity, and cloud services (Azure/AWS).
- Lead configuration hardening initiatives using industry benchmarks (e.g., CIS) and establish secure configuration baselines for common platforms (Windows, Linux, network devices, cloud services).
- Design compensating controls for vulnerabilities that cannot be remediated through patching (e.g., configuration changes, isolation, access controls, WAF rules, EDR policy tuning, segmentation).
- Own the technical control lifecycle: control requirements design implementation testing/validation monitoring continuous improvement.
- Develop and maintain control-as-code and automation (PowerShell/Python/Terraform/CI-CD) to deploy and enforce configurations consistently.
- Implement configuration compliance monitoring, drift detection, and remediation workflows; integrate with ticketing/ITSM for exception handling.
- Partner with Vulnerability Management to translate findings into durable mitigations (hardening, compensating controls, secure defaults) and reduce recurring exposure.
- Collaborate with SOC/IR to improve detections and containment policies aligned to threats and incidents; tune controls based on lessons learned.
- Produce audit-ready evidence: control narratives, diagrams, test results, screenshots/exports, and KPI dashboards.
- Maintain standards, procedures, and runbooks for control engineering; mentor junior engineers and provide technical leadership to cross-functional teams.
Typical Deliverables
- Secure configuration baselines and reference architectures for key platforms.
- Benchmark compliance reporting (coverage, drift, exceptions) with remediation plans.
- Compensating control designs and validation artifacts for non-patchable risk.
- Automation modules/scripts (policy-as-code) to deploy or enforce controls at scale.
- Control test plans, operational metrics, and audit evidence packages.
Required Qualifications
- 7+ years in security engineering, systems engineering, or infrastructure engineering with a strong focus on security controls and hardening.
- Hands-on expertise with Windows and Linux hardening, identity controls, and endpoint security control configuration.
- Experience implementing benchmark-based configuration standards (e.g., CIS) and managing exceptions/risk acceptances.
- Strong understanding of networking fundamentals (segmentation, firewalls, proxies, routing) and how to apply compensating controls.
- Cloud security controls experience in Azure and/or AWS (IAM, network controls, logging, security services).
- Proficiency in scripting/automation (PowerShell and/or Python); familiarity with infrastructure as code (e.g., Terraform) preferred.
- Ability to translate risk into technical control requirements and document controls for audit and compliance purposes.
- Excellent written and verbal communication; ability to work across infrastructure, application, and governance teams.
Preferred Qualifications
- Experience with configuration management and compliance platforms (e.g., Intune, Group Policy, SCCM/MECM, Ansible, Chef, Puppet).
- Experience with vulnerability scanning and exposure management tools (e.g., Tenable, Qualys, Rapid7) and mitigation engineering workflows.
- Experience tuning EDR policies and implementing detection/response guardrails (e.g., Microsoft Defender for Endpoint, SentinelOne, CrowdStrike).
- Experience with SIEM/SOAR integration for control telemetry and automated response.
- Security certifications (one or more): CISSP, GIAC (GSEC/GCED/GCIA), CCSP, AZ-500, AWS Security Specialty, or equivalent.
- Prior work in regulated industries (financial services, healthcare) with control evidence expectations (SOC 2, PCI DSS, GLBA).
Core Competencies
- Control engineering mindset: designs controls that are measurable, testable, and durable.
- Risk-based prioritization: focuses effort where likelihood and impact are highest.
- Systems thinking: understands dependencies and minimizes operational disruption.
- Automation-first: reduces manual work by codifying and scaling controls.
- Stakeholder partnership: collaborates with IT and product teams to drive adoption.
Success Measures (KPIs)
- Reduction in recurring high/critical findings attributable to configuration or control gaps.
- Benchmark compliance coverage (%) and drift rate over time across in-scope assets.
- Mean time to mitigate (MTTM) for non-patchable vulnerabilities using compensating controls.
- Control effectiveness test pass rate and audit evidence readiness (time to produce evidence).
- Automation impact: number of controls deployed/enforced via code and reduction in manual effort.
Working Conditions
This role requires the ability to work effectively with production systems and coordinate maintenance windows, change control, and emergency response activities when required.
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities and activities may change at any time with or without notice.
EEO Statement
ACA provides equal employment opportunities (EEO) to all applicants for employment without regard to race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, disability, genetic information, marital status, amnesty, or status as a covered veteran in accordance with applicable federal, state and local laws. ACA complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities.
California Privacy Notice
As an employer of California residents, we are dedicated to protecting your privacy rights. Any personal information you provide during the application process will be used solely for permitted internal purposes and will be handled in accordance with applicable privacy laws. By applying to this position, you consent to the collection, use, and disclosure of your personal information as described in our Employee Privacy Notice.
Controls Engineer Job Roles in Idaho
See all 102+ Controls Engineer Jobs in Idaho
Sign up for free to filter by visa type, set job alerts, and find employers with verified sponsorship history.
Search Controls Engineer Jobs in IdahoControls Engineer Jobs in Idaho: Frequently Asked Questions
Which companies sponsor visas for controls engineers in Idaho?
Micron Technology in Boise is one of Idaho's most active H-1B sponsors and regularly hires controls and automation engineers for its semiconductor fabrication operations. Food processing companies like Lamb Weston and Glanbia also sponsor visas for controls engineers supporting their highly automated plants. Smaller industrial automation contractors and systems integrators in the Treasure Valley occasionally sponsor as well, though less consistently than larger manufacturers.
Which visa types are most common for controls engineer roles in Idaho?
The H-1B is the most common visa for controls engineers in Idaho, as the role typically requires a bachelor's degree in electrical, mechanical, or systems engineering, satisfying the specialty occupation requirement. Canadian and Mexican nationals with qualifying engineering degrees frequently use the TN visa, which has no annual cap and can be obtained at the border. Australian citizens may qualify for the E-3 visa, which follows a similar process to the H-1B but with a separate annual allocation.
Which cities in Idaho have the most controls engineer sponsorship jobs?
Boise and the surrounding Treasure Valley cities of Nampa and Caldwell account for the majority of controls engineer sponsorship opportunities in Idaho, driven by semiconductor manufacturing at Micron and food and beverage processing facilities. Twin Falls is a secondary hub due to its concentration of large food processing plants that rely heavily on automated equipment and PLC-based control systems. Outside these areas, controls engineering openings with visa sponsorship are relatively limited.
How to find controls engineer visa sponsorship jobs in Idaho?
Migrate Mate filters job listings specifically by visa sponsorship availability, making it straightforward to find controls engineer roles in Idaho without sorting through positions that don't support international candidates. You can search by location and role type to focus on Boise-area manufacturers, semiconductor facilities, and food processing companies that have a documented history of sponsoring engineering visas. Setting up alerts on Migrate Mate for Idaho controls engineer postings helps you respond quickly when new sponsored roles appear.
Are there any Idaho-specific considerations for controls engineers seeking visa sponsorship?
Idaho's prevailing wage requirements under the H-1B program are generally lower than coastal tech markets, which can make sponsorship more accessible for employers operating on tighter margins, particularly in food processing and regional manufacturing. Boise State University and the University of Idaho produce electrical and mechanical engineering graduates, so some local employers have established pipelines that make them more familiar with sponsoring international engineers. Controls engineers with experience in food safety automation standards or semiconductor fabrication equipment tend to be most competitive with Idaho-based sponsors.
What is the prevailing wage for sponsored controls engineer jobs in Idaho?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.