Network Security Engineer Jobs in USA with Visa Sponsorship
Network Security Engineers are in high demand from U.S. employers willing to sponsor H-1B visas, with roles spanning financial services, defense contractors, and cloud infrastructure firms. A bachelor's degree in computer science, cybersecurity, or a related field is the standard requirement. For detailed occupation requirements, see the O*NET profile.
Find Network Security Engineer JobsOverview
Showing 5 of 197+ Network Security Engineer jobs
See all 197+ Network Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Network Security Engineer roles.
Get Access To All JobsINTRODUCTION
Seeking an experienced Senior Network Security Engineer to implement and support the agency's IT network, cloud, and computing infrastructure. The resource will perform day-to-day activities related to securing VDOT's infrastructure and related to securing, documenting, performing research, analysis, design, and implementations of VDOT's network and computing related infrastructure. Additionally:
- Support a hybrid enterprise environment consisting of approximately 300 statewide locations, Palo Alto firewalls, Azure networking, ExpressRoute connectivity, WAF technologies, Splunk SIEM, SD-WAN, and mission critical public-facing applications.
- Partner closely with Infrastructure, Cloud Engineering, and the Information Security Office to maintain the confidentiality, integrity, and availability of VDOT's network infrastructure.
- Ensure network security architecture aligns with operational security standards before and after deployment.
- Lead investigation and containment of network security incidents.
- Review firewall rule requests and ensure compliance with security standards.
- Design and maintain secure hybrid network architecture across on-premises and Azure environments.
- Monitor security events using SIEM technologies and coordinate incident response activities.
- Perform network security assessments and recommend remediation strategies.
- Develop and maintain network security standards, diagrams, and operational documentation.
- Support penetration testing and remediation efforts.
- Participate in on-call support during critical security incidents.
- Responsible for conducting proactive threat hunting and anomaly detection.
- Validates WAF and firewall placement and integration exposure/connectivity. Also leads implementation, review, and management of agency WAF(s).
- Identifies and diagnoses system problems and threats by using system logs, line monitors, SIEM, diagnostic software, and test equipment.
- Identifies, prioritizes, and remediates network security vulnerabilities.
- Must have the ability to provide documentation, network architecture topology diagrams, IP schemes, firewall rules, and access controls when required.
- Must have the ability to work independently on assigned projects.
BASIC QUALIFICATIONS
Skills
Required/Preferred
Years
Candidate Experience
Enterprise Networking
Required
8
Enterprise Security
Required
5
Azure Networking
Required
3
WAF/NGFW
Required
3
Supporting environments with 300+ Network Devices
Required
3
Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor
Required
5+
Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel)
Required
5+
Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def)
Required
5+
Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates
Required
5+
Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles
Required
5+
Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS
Required
5+
Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP
Required
5+
Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages
Required
5+
Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers.
Required
5+
Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700),
Required
5+
BENEFITS
Benefit Package includes:
- Paid Sick Time
- Insurance for Medical, Dental, Vision and Life Available
- 401(k) including Employer Match
- HSA, Short-term & Long-term Disability Available
We are an EEO/Veterans/Disabled employer.
INTRODUCTION
Seeking an experienced Senior Network Security Engineer to implement and support the agency's IT network, cloud, and computing infrastructure. The resource will perform day-to-day activities related to securing VDOT's infrastructure and related to securing, documenting, performing research, analysis, design, and implementations of VDOT's network and computing related infrastructure. Additionally:
- Support a hybrid enterprise environment consisting of approximately 300 statewide locations, Palo Alto firewalls, Azure networking, ExpressRoute connectivity, WAF technologies, Splunk SIEM, SD-WAN, and mission critical public-facing applications.
- Partner closely with Infrastructure, Cloud Engineering, and the Information Security Office to maintain the confidentiality, integrity, and availability of VDOT's network infrastructure.
- Ensure network security architecture aligns with operational security standards before and after deployment.
- Lead investigation and containment of network security incidents.
- Review firewall rule requests and ensure compliance with security standards.
- Design and maintain secure hybrid network architecture across on-premises and Azure environments.
- Monitor security events using SIEM technologies and coordinate incident response activities.
- Perform network security assessments and recommend remediation strategies.
- Develop and maintain network security standards, diagrams, and operational documentation.
- Support penetration testing and remediation efforts.
- Participate in on-call support during critical security incidents.
- Responsible for conducting proactive threat hunting and anomaly detection.
- Validates WAF and firewall placement and integration exposure/connectivity. Also leads implementation, review, and management of agency WAF(s).
- Identifies and diagnoses system problems and threats by using system logs, line monitors, SIEM, diagnostic software, and test equipment.
- Identifies, prioritizes, and remediates network security vulnerabilities.
- Must have the ability to provide documentation, network architecture topology diagrams, IP schemes, firewall rules, and access controls when required.
- Must have the ability to work independently on assigned projects.
BASIC QUALIFICATIONS
Skills
Required/Preferred
Years
Candidate Experience
Enterprise Networking
Required
8
Enterprise Security
Required
5
Azure Networking
Required
3
WAF/NGFW
Required
3
Supporting environments with 300+ Network Devices
Required
3
Candidate must have experience in the following areas: Incident response, Security investigations, Log analysis, Threat intelligence, Security monitor
Required
5+
Candidate must have experience with the SIEM products (e.g. Splunk, Microsoft Sentinel)
Required
5+
Candidate must have experience in vulnerability management and remediation tracking as well as vulnerability scanning tools (e.g. Nessus, Tenable, Def)
Required
5+
Candidate must have experience in the following areas: Active Directory, MFA, Conditional Access, Certificates
Required
5+
Candidate must have experience with; SEC530, CIS Benchmarks, NIST CSF, NIST 800-53, Zero Trust principles
Required
5+
Candidate must have experience with the following: Cisco ISE, NAC, 802.1X, RADIUS, TACACS
Required
5+
Candidate must have experience with the following products: Palo Alto, F5 Distributed Cloud, Azure WAF, Cisco VPN, Global Protect, F5 BIG-IP
Required
5+
Candidate must have experience working in highly regulated environments and leading technical troubleshooting during outages
Required
5+
Candidate must have ability to communicate technical issues to technical and executive audiences and an ability to mentor junior engineers.
Required
5+
Candidate should have achieved or ability to achieve the following certifications: Azure Security Engineer (AZ-500), Azure Network Engineer (AZ-700),
Required
5+
BENEFITS
Benefit Package includes:
- Paid Sick Time
- Insurance for Medical, Dental, Vision and Life Available
- 401(k) including Employer Match
- HSA, Short-term & Long-term Disability Available
We are an EEO/Veterans/Disabled employer.
See all 197+ Network Security Engineer Jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Network Security Engineer roles.
Get Access To All JobsTips for Finding Visa Sponsorship as a Network Security Engineer
Target industries with the highest sponsorship rates
Defense contractors, financial institutions, and cloud infrastructure companies file the most H-1B petitions for Network Security Engineers. Focusing your search on these sectors significantly improves your odds of finding a willing sponsor.
Align your credentials with specialty occupation standards
USCIS requires network security roles to demonstrate a direct relationship between the degree field and job duties. A degree in cybersecurity, computer science, or information systems is the strongest foundation for an approvable H-1B petition.
Pursue certifications that signal employer confidence
CISSP, CISM, and CompTIA Security+ credentials make you a more credible sponsorship candidate. Employers are more willing to absorb H-1B costs when a candidate's qualifications reduce the risk of a USCIS request for evidence.
Understand clearance and sponsorship compatibility
Many U.S. defense and government contractor roles require security clearances unavailable to non-citizens. Focus your sponsorship search on commercial sector employers, cloud providers, and financial firms where clearance is not a hard requirement.
Prepare documentation of specialized technical expertise
Employers strengthening an H-1B petition need evidence your role is genuinely specialized. Document hands-on experience with specific tools such as SIEM platforms, zero-trust architecture, or penetration testing frameworks to support your case.
Browse verified sponsoring employers on Migrate Mate
Migrate Mate lists Network Security Engineer roles from employers who have an active history of H-1B sponsorship. Filtering by verified sponsors saves significant time compared to applying broadly and discovering sponsorship limitations late in the process.
Frequently Asked Questions
Is Network Security Engineer considered a specialty occupation for H-1B purposes?
Yes, Network Security Engineer consistently qualifies as a specialty occupation because the role requires at minimum a bachelor's degree in a specific technical field such as cybersecurity, computer science, or information systems. USCIS looks at whether the degree requirement is standard across the industry for the position. Roles framed around generalist IT support rather than specialized security architecture can face more scrutiny, so the job description and employer letter both matter.
What degree fields are accepted for Network Security Engineer H-1B petitions?
Computer science, cybersecurity, information security, electrical engineering, and information systems are all well-accepted degree fields. A degree in a loosely related field such as general business IT can still work if the employer demonstrates a direct connection between the coursework and the specific security duties involved. Foreign three-year bachelor's degrees are generally accepted if the institution and program are credible, though employers sometimes request a credential evaluation to confirm U.S. equivalency.
Do defense contractors sponsor H-1B visas for Network Security Engineers?
Some do, but many positions at defense contractors require a U.S. security clearance, which is only available to U.S. citizens and permanent residents. This eliminates a large portion of otherwise suitable roles. Commercial defense-adjacent firms that work on unclassified infrastructure or civilian cybersecurity projects do sponsor, so it is worth reviewing each employer's clearance requirements carefully before applying. Migrate Mate surfaces roles by verified sponsorship history, which helps filter out positions with clearance barriers upfront.
How does the H-1B lottery affect Network Security Engineers specifically?
Network Security Engineers face the same lottery odds as all cap-subject H-1B applicants. USCIS received roughly 470,000 registrations for approximately 85,000 available slots in the most recent cycle, producing a selection rate under 20%. The key implication for this role is timing: if you are not selected in the lottery, cap-exempt employers such as universities or nonprofit research institutions can file outside the cap. Some cybersecurity consulting firms also hold cap-exempt status worth checking.
Are there visa alternatives to the H-1B for Network Security Engineers?
Yes. Australian citizens can use the E-3 visa, which has no lottery and a 10,500 annual cap that has never been exhausted. Canadian and Mexican nationals may qualify under the TN visa category if the role aligns with the computer systems analyst classification. O-1A is an option for engineers with documented extraordinary ability, such as published research, conference presentations, or leadership in major incident response efforts. Each path has different employer requirements and processing timelines.
What is the prevailing wage requirement for sponsored Network Security Engineer jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.