Devsecops Engineer Jobs in USA with Visa Sponsorship
DevSecOps Engineers are strong H-1B visa candidates, the role meets USCIS specialty occupation standards through its required expertise in cloud security, CI/CD pipelines, and infrastructure automation. Employers actively sponsor because qualified candidates are genuinely scarce. For detailed occupation requirements, see the O*NET profile.
Find Devsecops Engineer JobsOverview
Showing 5 of 18,979+ Devsecops Engineer jobs
See all 18,979+ Devsecops Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Devsecops Engineer roles.
Get Access To All JobsRole: Senior Azure DevSecOps Engineer - Compliance & Immutable Cloud Platform
Location: Chicago, IL (Local Candidates Only)
Work Authorization: Genuine consultants only with a valid LinkedIn profile that matches the resume.
Experience: 12+ years of relevant experience in the required technologies.
Position Overview
We are seeking a highly experienced Senior Azure DevSecOps Engineer to design, build, and secure a cloud-native immutable evidencing platform on Microsoft Azure. This platform will ingest compliance artifacts, audit evidence, and control attestations from various enterprise systems via APIs, store them with cryptographic integrity guarantees, and provide secure querying and retrieval capabilities for Governance, Risk, and Compliance (GRC) and audit workflows. The ideal candidate will have deep expertise in Azure cloud services, DevSecOps, Infrastructure as Code (Terraform), event-driven architectures, API Management, and cloud security, with experience supporting regulatory frameworks such as PCI-DSS, SOX, and GLBA.
Required Education
* Bachelor's degree in Computer Science, Information Management, Information Technology, or a related field.
Preferred Certifications (Nice to Have)
Microsoft Certified: Azure Security Engineer Associate
AWS Certified Security - Specialty
CISSP
CCSP
Required Skills & Experience
10+ years of experience designing and deploying enterprise-grade production workloads on Microsoft Azure using API-first and event-driven architectures.
Strong hands-on experience with Azure API Management (APIM), including:
* Inbound/Outbound XML policies
* Backend configuration
* Named Values
* Versioning
* Developer Portal
Experience implementing immutable or append-only storage solutions, including:
* Azure Blob Storage WORM (Write Once Read Many) policies
* Azure Cosmos DB Change Feed auditing
* Equivalent immutable storage architectures
Hands-on experience deploying and managing Azure Cosmos DB and other NoSQL databases.
Strong understanding of envelope encryption using Azure Key Vault, including:
* Customer Managed Keys (CMK)
* Key rotation
* Purge protection
Experience designing secure Zero Trust Azure networking using:
* Private Endpoints
* Virtual Network (VNet) Integration
* NSGs
* UDRs
Strong Terraform expertise, including:
* Modular infrastructure design
* Remote state management
* Azure Provider
* CI/CD integration using GitHub Actions or Azure DevOps
Strong programming experience with Python and Node.js.
Hands-on experience with automated and integrated testing frameworks/tools.
Ability to develop Kusto Query Language (KQL) queries for:
* Operational monitoring
* Alerting
* Audit log analysis
* Experience integrating enterprise applications with third-party APIs, including:
* GRC platforms
* Vulnerability management tools
* Ticketing systems
* Other enterprise SaaS platforms
Key Responsibilities
Design and implement secure API ingestion pipelines using Azure API Management (APIM) with:
* OAuth2/JWT authentication
* Rate limiting
* Schema validation
* API security best practices
Build scalable, event-driven ingestion workflows using:
* Azure Functions
* Durable Functions
* Azure Service Bus
* Fan-out/Fan-in processing patterns
Develop immutable artifact storage solutions using:
* Azure Blob Storage with WORM retention policies
* Azure Cosmos DB for tamper-evident metadata indexing
Architect and implement Azure Redis Cache for high-performance query caching while preserving immutable source-of-truth data.
Implement secure envelope encryption using Azure Key Vault, including customer-managed keys and automated key rotation.
Build and maintain monitoring and telemetry pipelines using Azure Log Analytics Workspace for:
* Ingestion monitoring
* Access auditing
* Integrity verification
* Operational visibility
Develop and maintain Infrastructure as Code (IaC) using Terraform.
Ensure all Azure resources are deployed through automation with Policy-as-Code and eliminate manual ("click-ops") deployments.
Build integrations with third-party systems to securely ingest compliance evidence and audit artifacts via APIs.
Design secure, scalable, and compliant cloud infrastructure aligned with PCI-DSS, SOX, and GLBA requirements.
* Collaborate with security, infrastructure, compliance, and development teams to deliver enterprise-grade cloud solutions.
Required Soft Skills
Excellent verbal and written communication skills.
Strong analytical and problem-solving abilities.
Ability to collaborate effectively with cross-functional technical and business teams.
Self-driven with the ability to work independently in a fast-paced Agile environment.
Role: Senior Azure DevSecOps Engineer - Compliance & Immutable Cloud Platform
Location: Chicago, IL (Local Candidates Only)
Work Authorization: Genuine consultants only with a valid LinkedIn profile that matches the resume.
Experience: 12+ years of relevant experience in the required technologies.
Position Overview
We are seeking a highly experienced Senior Azure DevSecOps Engineer to design, build, and secure a cloud-native immutable evidencing platform on Microsoft Azure. This platform will ingest compliance artifacts, audit evidence, and control attestations from various enterprise systems via APIs, store them with cryptographic integrity guarantees, and provide secure querying and retrieval capabilities for Governance, Risk, and Compliance (GRC) and audit workflows. The ideal candidate will have deep expertise in Azure cloud services, DevSecOps, Infrastructure as Code (Terraform), event-driven architectures, API Management, and cloud security, with experience supporting regulatory frameworks such as PCI-DSS, SOX, and GLBA.
Required Education
* Bachelor's degree in Computer Science, Information Management, Information Technology, or a related field.
Preferred Certifications (Nice to Have)
Microsoft Certified: Azure Security Engineer Associate
AWS Certified Security - Specialty
CISSP
CCSP
Required Skills & Experience
10+ years of experience designing and deploying enterprise-grade production workloads on Microsoft Azure using API-first and event-driven architectures.
Strong hands-on experience with Azure API Management (APIM), including:
* Inbound/Outbound XML policies
* Backend configuration
* Named Values
* Versioning
* Developer Portal
Experience implementing immutable or append-only storage solutions, including:
* Azure Blob Storage WORM (Write Once Read Many) policies
* Azure Cosmos DB Change Feed auditing
* Equivalent immutable storage architectures
Hands-on experience deploying and managing Azure Cosmos DB and other NoSQL databases.
Strong understanding of envelope encryption using Azure Key Vault, including:
* Customer Managed Keys (CMK)
* Key rotation
* Purge protection
Experience designing secure Zero Trust Azure networking using:
* Private Endpoints
* Virtual Network (VNet) Integration
* NSGs
* UDRs
Strong Terraform expertise, including:
* Modular infrastructure design
* Remote state management
* Azure Provider
* CI/CD integration using GitHub Actions or Azure DevOps
Strong programming experience with Python and Node.js.
Hands-on experience with automated and integrated testing frameworks/tools.
Ability to develop Kusto Query Language (KQL) queries for:
* Operational monitoring
* Alerting
* Audit log analysis
* Experience integrating enterprise applications with third-party APIs, including:
* GRC platforms
* Vulnerability management tools
* Ticketing systems
* Other enterprise SaaS platforms
Key Responsibilities
Design and implement secure API ingestion pipelines using Azure API Management (APIM) with:
* OAuth2/JWT authentication
* Rate limiting
* Schema validation
* API security best practices
Build scalable, event-driven ingestion workflows using:
* Azure Functions
* Durable Functions
* Azure Service Bus
* Fan-out/Fan-in processing patterns
Develop immutable artifact storage solutions using:
* Azure Blob Storage with WORM retention policies
* Azure Cosmos DB for tamper-evident metadata indexing
Architect and implement Azure Redis Cache for high-performance query caching while preserving immutable source-of-truth data.
Implement secure envelope encryption using Azure Key Vault, including customer-managed keys and automated key rotation.
Build and maintain monitoring and telemetry pipelines using Azure Log Analytics Workspace for:
* Ingestion monitoring
* Access auditing
* Integrity verification
* Operational visibility
Develop and maintain Infrastructure as Code (IaC) using Terraform.
Ensure all Azure resources are deployed through automation with Policy-as-Code and eliminate manual ("click-ops") deployments.
Build integrations with third-party systems to securely ingest compliance evidence and audit artifacts via APIs.
Design secure, scalable, and compliant cloud infrastructure aligned with PCI-DSS, SOX, and GLBA requirements.
* Collaborate with security, infrastructure, compliance, and development teams to deliver enterprise-grade cloud solutions.
Required Soft Skills
Excellent verbal and written communication skills.
Strong analytical and problem-solving abilities.
Ability to collaborate effectively with cross-functional technical and business teams.
Self-driven with the ability to work independently in a fast-paced Agile environment.
See all 18,979+ Devsecops Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Devsecops Engineer roles.
Get Access To All JobsTips for Finding Visa Sponsorship as a Devsecops Engineer
Frame your skills around the specialty occupation standard
USCIS approves H-1B petitions when the role requires a specific bachelor's degree or higher. Emphasize that your position demands a degree in computer science, cybersecurity, or information systems, not just general IT experience.
Target employers with a proven H-1B track record
Large tech firms, defense contractors, and financial institutions file H-1B petitions for DevSecOps roles regularly. Companies with established immigration programs move faster and make fewer petition errors than first-time sponsors.
Certifications strengthen your petition, not just your resume
CISSP, AWS Security Specialty, and CKS certifications signal specialized knowledge that supports the specialty occupation argument. Include them in your visa documentation, not just your job applications, they reinforce degree equivalency.
Address the security clearance question early
Some DevSecOps roles require U.S. security clearances, which visa holders typically cannot obtain. Clarify clearance requirements before investing time in the application process to avoid late-stage rejections.
Get your job description language right before the LCA is filed
The Labor Condition Application must reflect actual job duties. Vague descriptions like 'supports security operations' are weaker than 'designs and implements automated vulnerability scanning pipelines in Kubernetes environments.' Work with your employer on specificity.
Use Migrate Mate to filter for verified sponsoring employers
Not every job posting that lists DevSecOps duties is from a company willing to sponsor. Migrate Mate surfaces roles from employers who have sponsored visas before, saving you from applying to positions that will stall at the immigration stage.
Frequently Asked Questions
Does DevSecOps qualify as a specialty occupation for H-1B purposes?
Yes, DevSecOps Engineer consistently qualifies as a specialty occupation under USCIS standards. The role requires theoretical and practical application of highly specialized knowledge in security engineering, cloud infrastructure, and software development, and a bachelor's degree or higher in computer science, cybersecurity, or a closely related field is a normal industry requirement for entry into the position.
What degree do I need for an employer to sponsor my H-1B as a DevSecOps Engineer?
A bachelor's degree in computer science, information security, software engineering, or a related technical field is the standard requirement. If your degree is in a different field, substantial coursework in security or systems combined with relevant certifications (CISSP, AWS Security Specialty) may support the petition, but your employer's immigration attorney will need to build that argument carefully.
Are DevSecOps roles harder to sponsor than general software engineering roles?
Not harder, but more scrutinized. USCIS pays close attention to job descriptions that blend operations and development, sometimes questioning whether the role is truly specialized or more of a generalist IT position. A well-drafted petition that details specific security engineering duties, required tools, and degree alignment addresses this directly. Employers who sponsor frequently know how to structure these petitions.
Can I find DevSecOps jobs that explicitly offer visa sponsorship?
Yes. Migrate Mate lists DevSecOps Engineer roles from employers with confirmed H-1B visa sponsorship history, so you're not guessing which postings are realistic. Many DevSecOps openings at cloud-native companies, defense technology firms, and large financial institutions include sponsorship as a standard hiring option given how difficult these roles are to fill domestically.
Do security clearance requirements disqualify visa holders from DevSecOps roles?
For roles requiring active U.S. security clearances (Secret, Top Secret, TS/SCI), visa holders are generally ineligible because clearances require U.S. citizenship or permanent residency. However, many DevSecOps positions at commercial companies, cloud providers, and non-defense contractors have no clearance requirement. Filter your search to clearance-optional roles to avoid wasted applications.
What is the prevailing wage requirement for sponsored Devsecops Engineer jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.