Infrastructure Software Engineer Jobs in USA with Visa Sponsorship
Infrastructure Software Engineers are strong H-1B visa candidates, the role qualifies as a specialty occupation requiring a bachelor's degree in computer science, computer engineering, or a related field. Employers routinely sponsor both H-1B and L-1 visas for this role, and cap-exempt positions exist at universities and nonprofits. For detailed occupation requirements, see the O*NET profile.
Find Infrastructure Software Engineer JobsOverview
Showing 5 of 247+ Infrastructure Software Engineer jobs
See all 247+ Infrastructure Software Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Infrastructure Software Engineer roles.
Get Access To All JobsAbout WorkOS
WorkOS builds modern developer tools and APIs that make it easy for companies to become Enterprise Ready. Our platform powers authentication, identity, authorization, and other critical infrastructure that developers need to securely scale their products to large organizations.
We recently raised a $100M Series C, valuing the company at $2B, led by Meritech and Sapphire with participation from Greenoaks, Craft, Abstract, and Audacious. WorkOS powers enterprise features for many of the fastest-growing AI companies, including OpenAI, Cursor, and Perplexity, Sierra, and Plaid.
As AI reshapes software, WorkOS is at the frontier of Human and Agent Authentication, Identity, and Access Control helping companies answer a new critical question: who are your agents, and what are they allowed to do? Our fast-growing customer base includes hundreds of modern software companies building the next generation of enterprise-ready products.
About the Security Platform team
The Infrastructure Security team provides and supports the primitives that enable engineering to securely build applications and meet compliance obligations, while abstracting away the underlying complexity for the best possible developer experience.
Our work centers on workload identity and authorization: how internal applications authenticate to each other and to the services they depend on, and how that access is granted and enforced. We're replacing static secrets with short-lived identity credentials, bringing identity-based authentication to the services engineers use every day, and unifying how authorization is managed across the company.
We're a platform engineering team with a security mission. We measure success by the security outcomes we enable and by how much engineers enjoy building on what we ship — the secure path should be the easiest path.
Who we're looking for
- A platform builder. You love building infrastructure that other engineers rely on every day, and you sweat the developer experience details that make adoption effortless.
- Fluent in service-to-service auth. You know authentication and authorization deeply: JWTs, X.509 certificates, and when to reach for each.
- A systems thinker. You reason carefully about bootstrapping, circular dependencies, availability, and failure modes, especially for infrastructure that everything else depends on.
- A pragmatic migrator. You know that shipping the primitive is half the job. You can drive adoption across many teams, meet them where they are, and retire the legacy path.
- A strong partner to engineering. You build trust with engineers by understanding their priorities and making security frictionless.
- Excited about AI. You're embracing AI and automation to scale platform work and reduce toil.
- Curious and humble. You ask the basic questions, enjoy untangling complex systems, and bring others along with you.
Responsibilities
- Build workload identity infrastructure. Make short-lived identity credentials a default part of every application's runtime environment, in partnership with application platform owners.
- Bring identity-based authentication to internal services. Work with the owners of major internal dependencies to support identity certificates, make them the golden path for newly onboarding applications, and drive migration of existing ones.
- Eliminate static secrets. Replace all static passwords and service tokens with short-lived identity credentials, and build identity-authenticated egress proxies and API abstractions that inject and automatically rotate managed secrets for the external dependencies that still require them.
- Unify authorization. Build a single interface and framework through which authorization policies are centrally managed and enforced.
Qualifications
- 5+ years of experience in software engineering, with a focus on security-related platform, infrastructure, or distributed systems.
- Strong working knowledge of secrets management, fine-grained authorization, and workload identity systems.
- Familiarity with the Kubernetes ecosystem and authentication/authorization technologies such as JWTs, X.509 certificates, PKI, cert-manager, SPIFFE/SPIRE, and OPA.
- Experience building and operating production infrastructure that other teams depend on, with attention to availability and failure modes.
- Proven ability to drive cross-team adoption of platform capabilities or lead large-scale migrations.
Benefits and Perks (US Only)
At WorkOS, we offer resources that emphasize personal and familial well-being. We offer healthcare coverage for you and your family, including medical, dental, and vision. We offer parental leave, paid-time off and fully remote working arrangements.
- 401k matching
- Competitive Equity
- Healthcare, dental and vision coverage
- FSA, ST/LT Disability, Voluntary Life
- Carrot fertility benefits
- 20 days paid vacation + 10 holidays + unlimited sick leave
- 12 weeks fully paid parental leave
- Fitness: Monthly stipend for gyms, yoga classes, race registrations or whatever keeps you active
- Wellness: Monthly stipend for a massage, meditations class, therapy, or activities that enhance your well-being
- Commuter benefits for hybrid employees in SF/NYC
- Unlimited token usage!
Please inquire directly with our recruiting team for benefits available to those working outside the US.
Equal Opportunity Employer
WorkOS is an equal opportunity employer, committed to diversity and inclusiveness. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Compensation Range: $175K - $275K
About WorkOS
WorkOS builds modern developer tools and APIs that make it easy for companies to become Enterprise Ready. Our platform powers authentication, identity, authorization, and other critical infrastructure that developers need to securely scale their products to large organizations.
We recently raised a $100M Series C, valuing the company at $2B, led by Meritech and Sapphire with participation from Greenoaks, Craft, Abstract, and Audacious. WorkOS powers enterprise features for many of the fastest-growing AI companies, including OpenAI, Cursor, and Perplexity, Sierra, and Plaid.
As AI reshapes software, WorkOS is at the frontier of Human and Agent Authentication, Identity, and Access Control helping companies answer a new critical question: who are your agents, and what are they allowed to do? Our fast-growing customer base includes hundreds of modern software companies building the next generation of enterprise-ready products.
About the Security Platform team
The Infrastructure Security team provides and supports the primitives that enable engineering to securely build applications and meet compliance obligations, while abstracting away the underlying complexity for the best possible developer experience.
Our work centers on workload identity and authorization: how internal applications authenticate to each other and to the services they depend on, and how that access is granted and enforced. We're replacing static secrets with short-lived identity credentials, bringing identity-based authentication to the services engineers use every day, and unifying how authorization is managed across the company.
We're a platform engineering team with a security mission. We measure success by the security outcomes we enable and by how much engineers enjoy building on what we ship — the secure path should be the easiest path.
Who we're looking for
- A platform builder. You love building infrastructure that other engineers rely on every day, and you sweat the developer experience details that make adoption effortless.
- Fluent in service-to-service auth. You know authentication and authorization deeply: JWTs, X.509 certificates, and when to reach for each.
- A systems thinker. You reason carefully about bootstrapping, circular dependencies, availability, and failure modes, especially for infrastructure that everything else depends on.
- A pragmatic migrator. You know that shipping the primitive is half the job. You can drive adoption across many teams, meet them where they are, and retire the legacy path.
- A strong partner to engineering. You build trust with engineers by understanding their priorities and making security frictionless.
- Excited about AI. You're embracing AI and automation to scale platform work and reduce toil.
- Curious and humble. You ask the basic questions, enjoy untangling complex systems, and bring others along with you.
Responsibilities
- Build workload identity infrastructure. Make short-lived identity credentials a default part of every application's runtime environment, in partnership with application platform owners.
- Bring identity-based authentication to internal services. Work with the owners of major internal dependencies to support identity certificates, make them the golden path for newly onboarding applications, and drive migration of existing ones.
- Eliminate static secrets. Replace all static passwords and service tokens with short-lived identity credentials, and build identity-authenticated egress proxies and API abstractions that inject and automatically rotate managed secrets for the external dependencies that still require them.
- Unify authorization. Build a single interface and framework through which authorization policies are centrally managed and enforced.
Qualifications
- 5+ years of experience in software engineering, with a focus on security-related platform, infrastructure, or distributed systems.
- Strong working knowledge of secrets management, fine-grained authorization, and workload identity systems.
- Familiarity with the Kubernetes ecosystem and authentication/authorization technologies such as JWTs, X.509 certificates, PKI, cert-manager, SPIFFE/SPIRE, and OPA.
- Experience building and operating production infrastructure that other teams depend on, with attention to availability and failure modes.
- Proven ability to drive cross-team adoption of platform capabilities or lead large-scale migrations.
Benefits and Perks (US Only)
At WorkOS, we offer resources that emphasize personal and familial well-being. We offer healthcare coverage for you and your family, including medical, dental, and vision. We offer parental leave, paid-time off and fully remote working arrangements.
- 401k matching
- Competitive Equity
- Healthcare, dental and vision coverage
- FSA, ST/LT Disability, Voluntary Life
- Carrot fertility benefits
- 20 days paid vacation + 10 holidays + unlimited sick leave
- 12 weeks fully paid parental leave
- Fitness: Monthly stipend for gyms, yoga classes, race registrations or whatever keeps you active
- Wellness: Monthly stipend for a massage, meditations class, therapy, or activities that enhance your well-being
- Commuter benefits for hybrid employees in SF/NYC
- Unlimited token usage!
Please inquire directly with our recruiting team for benefits available to those working outside the US.
Equal Opportunity Employer
WorkOS is an equal opportunity employer, committed to diversity and inclusiveness. We will consider all qualified applicants without regard to race, color, nationality, gender, gender identity or expression, sexual orientation, religion, disability or age.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.
Compensation Range: $175K - $275K
See all 247+ Infrastructure Software Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Infrastructure Software Engineer roles.
Get Access To All JobsTips for Finding Visa Sponsorship as an Infrastructure Software Engineer
Target employers with a proven H-1B filing history
Large tech companies, cloud providers, and financial institutions file hundreds of H-1B petitions annually for infrastructure roles. Filtering by employers with consistent filing history reduces the risk of landing at a company that's never navigated the process before.
Emphasize systems-level depth in your resume
USCIS scrutinizes whether a role genuinely requires a specialized degree. Highlighting distributed systems design, kernel-level work, or cloud orchestration makes the specialty occupation argument much harder to challenge during adjudication or an RFE.
Understand the difference between cap-subject and cap-exempt employers
Universities, nonprofit research institutions, and certain government contractors are exempt from the H-1B lottery. Infrastructure roles at these organizations can be filed at any time of year with no lottery risk, which is a meaningful advantage if you're on a tight OPT timeline.
Prepare for technical and visa questions simultaneously
Many infrastructure interviews include a sponsorship conversation alongside systems design rounds. Having a clear, confident explanation of your current status, work authorization timeline, and visa pathway saves time and signals you've done the groundwork employers expect from sponsored candidates.
Consider the L-1B if you're transferring within a multinational
If you've worked for a company abroad for at least one year, the L-1B intracompany transfer visa is a lottery-free alternative to the H-1B. Infrastructure engineers with specialized knowledge of proprietary systems, architecture, or internal platforms often qualify under the specialized knowledge standard.
Line up your OPT STEM extension early if you're on F-1
Infrastructure Software Engineer is a STEM-eligible role, making you eligible for a 24-month OPT extension beyond the initial 12 months. Filing early gives you up to 36 months of work authorization, covering multiple H-1B lottery cycles if needed.
Frequently Asked Questions
Does an Infrastructure Software Engineer role qualify for H-1B sponsorship?
Yes. Infrastructure Software Engineer is a well-established specialty occupation under USCIS criteria. The role requires theoretical and practical application of highly specialized knowledge, typically in distributed systems, networking, or cloud infrastructure, and routinely requires a bachelor's degree or higher in computer science, computer engineering, or a related field. RFE rates for software engineering roles have risen in recent years, so employers should document the degree requirement clearly in the Labor Condition Application and offer letter.
What visa options exist for infrastructure engineers beyond the H-1B?
Several alternatives are worth knowing. The L-1B applies if you've worked for a multinational employer abroad for at least one year and have specialized knowledge of the company's systems. The O-1A is available if you can demonstrate extraordinary ability through publications, patents, or significant industry recognition. Australian citizens can use the E-3 visa, which has no lottery. TN visa status covers Canadians and Mexicans in qualifying engineering roles. Each has different eligibility thresholds and timelines.
Does my degree field matter for H-1B approval as an infrastructure engineer?
It matters more than most candidates expect. USCIS evaluates whether your degree field is directly related to the job duties. Computer science, computer engineering, electrical engineering, and information systems are the strongest fits. A degree in an unrelated field, even with years of relevant experience, can trigger an RFE or denial unless supported by a detailed advisory opinion or a credential evaluation showing the coursework aligns with the role's technical requirements.
How can I find infrastructure engineering jobs that offer visa sponsorship?
Migrate Mate is built specifically for this, the job board filters for roles that sponsor work visas, so you're not spending time applying to positions that will reject you at the sponsorship question. Infrastructure engineering roles from companies with active H-1B visa filing histories are listed, which is a faster signal of sponsorship willingness than anything you'd piece together from a general job search.
Can I switch employers mid-H-1B if I'm working as an infrastructure software engineer?
Yes, H-1B portability allows you to change employers while your new employer's H-1B transfer petition is pending, as long as your current H-1B was approved and you've maintained valid status. For infrastructure roles, the new employer must file a fresh I-129 with an LCA matching the new position's duties and wage level. You can start work as soon as the petition is filed, you don't need to wait for approval.
What is the prevailing wage requirement for sponsored Infrastructure Software Engineer jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.