Systems Security Engineer Jobs in USA with Visa Sponsorship
Systems Security Engineers are among the most consistently sponsored roles in the U.S. tech sector. Employers routinely file H-1B, O-1, and EB-2/EB-3 petitions for qualified candidates, and specialty occupation approval rates for security engineering are strong given the clear degree-to-role alignment. For detailed occupation requirements, see the O*NET profile.
See All Systems Security Engineer JobsOverview
Showing 5 of 935+ Systems Security Engineer jobs
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
Have you applied for this role?
See all 935+ Systems Security Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Systems Security Engineer roles.
Get Access To All JobsINTRODUCTION
The New York City Department of Investigation (DOI) is one of the oldest law enforcement agencies in the country; its mission is to combat municipal corruption. DOI serves the people of New York City by acting as an independent and nonpartisan watchdog for New York City government, City agencies, and City employees, vendors with City contracts, individuals and entities that receive City funds. The Information Technology Unit of the NYC Department of Investigation is currently seeking a highly skilled, motivated and hands-on System Security Engineer to manage and secure our environment, including Active Directory, Windows Servers, Exchange (on-prem and Online), Microsoft 365, AirWatch MDM, and file shares. This role supports system stability and cybersecurity readiness, emphasizing automation, practical risk management, prioritization, and collaboration, ensuring our core systems remain secure, efficient, and compliant within a small but capable IT team.
ROLE AND RESPONSIBILITIES
Key Responsibilities
- Active Directory Administration: Manage user accounts, permissions, and Group Policy Objects (GPOs); secure and monitor domain controllers.
- Exchange Management: Administer Exchange on-premises and Exchange Online hybrid environments, managing mail flow, mailbox provisioning, spam filtering, and secure mail routing.
- Security & Compliance: Apply Microsoft and CIS hardening baselines; enforce consistent GPO and Exchange security configurations; monitor logs for anomalies.
- Patch & Configuration Management: Implement and manage regular patching schedules for Windows Servers, Exchange systems, and related components.
- Monitoring & Response: Leverage Proofpoint, Varonis, Adaudit, SIEM, Endpoint Manager, and AirWatch MDM to monitor user activity, device compliance, system configurations, and mail flow. Investigate alerts and anomalies related to AD, Exchange, and endpoints to detect and respond promptly to potential security incidents.
- File Share Management: Maintain secure access controls and auditing for on-prem file shares; monitor for data access anomalies using Varonis.
- Certificates & PKI: Manage digital certificates, renewals, and certificate authorities (CAs) for servers, internal services, and authentication.
- Backup & Recovery: Ensure reliable backups for AD, Exchange, file shares, and critical servers; test restoration procedures regularly.
- Automation & Documentation: Develop PowerShell scripts to automate patching, mailbox management, and security reporting; maintain accurate operational documentation.
- Collaboration: Work cross-functionally with IT support and network teams to maintain a secure, resilient infrastructure.
If selected, the candidate will be fingerprinted and undergo a background investigation. In addition, because the position has a law enforcement and/or investigative function, the candidate's consumer credit history will be reviewed during the background investigation, as permitted by NYC Administrative Code 8-107(24)(b)(2)(A).
MINIMUM QUALIFICATIONS
- A baccalaureate degree from an accredited college, including or supplemented by twenty-four (24) semester credits in computer science or a related computer field and two (2) years of satisfactory full-time software experience in designing, programming, debugging, maintaining, implementing, and enhancing computer software applications, systems programming, systems analysis and design, data communication software, or database design and programming, including one year in a project leader capacity or as a major contributor on a complex project; or
- A four-year high school diploma or its educational equivalent and six (6) years of full-time satisfactory software experience as described in “1" above, including one year in a project leader capacity or as a major contributor on a complex project; or
- A satisfactory combination of education and experience that is equivalent to (1) or (2) above. College education may be substituted for up to two years of the required experience in (2) above on the basis that sixty (60) semester credits from an accredited college is equated to one year of experience. A master's degree in computer science or a related computer field may be substituted for one year of the required experience in (1) or (2) above. However, all candidates must have a four year high school diploma or its educational equivalent, plus at least one (1) year of satisfactory full-time software experience in a project leader capacity or as a major contributor on a complex project.
PREFERRED QUALIFICATIONS
- Experience managing Active Directory, Exchange (on-prem and Online), and Microsoft 365 environments.
- Strong skills in Windows Server administration, patch management, and system hardening.
- Working knowledge of Proofpoint, Varonis, Ad Audit, SIEM, Endpoint Manager, and Workspace One MDM.
- Proficiency in PowerShell scripting for automation and auditing.
- Familiarity with certificate management (PKI) and file share security.
- Experience with VMware or Hyper-V virtualization platforms.
- Focus: A practical, security-focused administrator ensuring uptime, resilience, and protection across identity, messaging, and data-sharing systems within a lean operational model.
COMPENSATION
- Salary: $52,426.00 – $117,295.00
Public Service Loan Forgiveness
As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education’s website at https://studentaid.gov/pslf/
Residency Requirement
New York City residency is generally required within 90 days of appointment. However, City Employees in certain titles who have worked for the City for two continuous years may also be eligible to reside in Nassau, Suffolk, Putnam, Westchester, Rockland, or Orange County. To determine if the residency requirement applies to you, please discuss with the agency representative at the time of the interview.
Additional Information
The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.
INTRODUCTION
The New York City Department of Investigation (DOI) is one of the oldest law enforcement agencies in the country; its mission is to combat municipal corruption. DOI serves the people of New York City by acting as an independent and nonpartisan watchdog for New York City government, City agencies, and City employees, vendors with City contracts, individuals and entities that receive City funds. The Information Technology Unit of the NYC Department of Investigation is currently seeking a highly skilled, motivated and hands-on System Security Engineer to manage and secure our environment, including Active Directory, Windows Servers, Exchange (on-prem and Online), Microsoft 365, AirWatch MDM, and file shares. This role supports system stability and cybersecurity readiness, emphasizing automation, practical risk management, prioritization, and collaboration, ensuring our core systems remain secure, efficient, and compliant within a small but capable IT team.
ROLE AND RESPONSIBILITIES
Key Responsibilities
- Active Directory Administration: Manage user accounts, permissions, and Group Policy Objects (GPOs); secure and monitor domain controllers.
- Exchange Management: Administer Exchange on-premises and Exchange Online hybrid environments, managing mail flow, mailbox provisioning, spam filtering, and secure mail routing.
- Security & Compliance: Apply Microsoft and CIS hardening baselines; enforce consistent GPO and Exchange security configurations; monitor logs for anomalies.
- Patch & Configuration Management: Implement and manage regular patching schedules for Windows Servers, Exchange systems, and related components.
- Monitoring & Response: Leverage Proofpoint, Varonis, Adaudit, SIEM, Endpoint Manager, and AirWatch MDM to monitor user activity, device compliance, system configurations, and mail flow. Investigate alerts and anomalies related to AD, Exchange, and endpoints to detect and respond promptly to potential security incidents.
- File Share Management: Maintain secure access controls and auditing for on-prem file shares; monitor for data access anomalies using Varonis.
- Certificates & PKI: Manage digital certificates, renewals, and certificate authorities (CAs) for servers, internal services, and authentication.
- Backup & Recovery: Ensure reliable backups for AD, Exchange, file shares, and critical servers; test restoration procedures regularly.
- Automation & Documentation: Develop PowerShell scripts to automate patching, mailbox management, and security reporting; maintain accurate operational documentation.
- Collaboration: Work cross-functionally with IT support and network teams to maintain a secure, resilient infrastructure.
If selected, the candidate will be fingerprinted and undergo a background investigation. In addition, because the position has a law enforcement and/or investigative function, the candidate's consumer credit history will be reviewed during the background investigation, as permitted by NYC Administrative Code 8-107(24)(b)(2)(A).
MINIMUM QUALIFICATIONS
- A baccalaureate degree from an accredited college, including or supplemented by twenty-four (24) semester credits in computer science or a related computer field and two (2) years of satisfactory full-time software experience in designing, programming, debugging, maintaining, implementing, and enhancing computer software applications, systems programming, systems analysis and design, data communication software, or database design and programming, including one year in a project leader capacity or as a major contributor on a complex project; or
- A four-year high school diploma or its educational equivalent and six (6) years of full-time satisfactory software experience as described in “1" above, including one year in a project leader capacity or as a major contributor on a complex project; or
- A satisfactory combination of education and experience that is equivalent to (1) or (2) above. College education may be substituted for up to two years of the required experience in (2) above on the basis that sixty (60) semester credits from an accredited college is equated to one year of experience. A master's degree in computer science or a related computer field may be substituted for one year of the required experience in (1) or (2) above. However, all candidates must have a four year high school diploma or its educational equivalent, plus at least one (1) year of satisfactory full-time software experience in a project leader capacity or as a major contributor on a complex project.
PREFERRED QUALIFICATIONS
- Experience managing Active Directory, Exchange (on-prem and Online), and Microsoft 365 environments.
- Strong skills in Windows Server administration, patch management, and system hardening.
- Working knowledge of Proofpoint, Varonis, Ad Audit, SIEM, Endpoint Manager, and Workspace One MDM.
- Proficiency in PowerShell scripting for automation and auditing.
- Familiarity with certificate management (PKI) and file share security.
- Experience with VMware or Hyper-V virtualization platforms.
- Focus: A practical, security-focused administrator ensuring uptime, resilience, and protection across identity, messaging, and data-sharing systems within a lean operational model.
COMPENSATION
- Salary: $52,426.00 – $117,295.00
Public Service Loan Forgiveness
As a prospective employee of the City of New York, you may be eligible for federal loan forgiveness programs and state repayment assistance programs. For more information, please visit the U.S. Department of Education’s website at https://studentaid.gov/pslf/
Residency Requirement
New York City residency is generally required within 90 days of appointment. However, City Employees in certain titles who have worked for the City for two continuous years may also be eligible to reside in Nassau, Suffolk, Putnam, Westchester, Rockland, or Orange County. To determine if the residency requirement applies to you, please discuss with the agency representative at the time of the interview.
Additional Information
The City of New York is an inclusive equal opportunity employer committed to recruiting and retaining a diverse workforce and providing a work environment that is free from discrimination and harassment based upon any legally protected status or protected characteristic, including but not limited to an individual's sex, race, color, ethnicity, national origin, age, religion, disability, sexual orientation, veteran status, gender identity, or pregnancy.
How to Get Visa Sponsorship as a Systems Security Engineer
Lead with your security domain specialization
Generalist security experience is harder to sponsor than deep specialization. Emphasize a specific domain, cloud security, penetration testing, identity and access management, or SIEM, so employers can map your background directly to a specialty occupation petition.
Target employers with active security clearance programs
Defense contractors, federal agencies, and large financial institutions file the most security engineering sponsorships. These employers have established immigration infrastructure and routinely sponsor H-1B and EB petitions for systems security roles with predictable processes.
Align your degree field to the job description
USCIS scrutinizes specialty occupation filings closely. A degree in computer science, information security, or electrical engineering aligns cleanly. If your degree is in a tangential field, gather documentation showing how your coursework directly maps to systems security engineering.
Highlight certifications alongside your degree
CISSP, CISM, CEH, and CompTIA Security+ strengthen your petition by demonstrating industry-recognized expertise. While certifications alone don't satisfy the degree requirement, they signal to both employers and USCIS adjudicators that this is a genuine specialized role.
Understand the timeline before you accept an offer
H-1B cap-subject petitions require lottery selection in March for an October 1 start. If you're not already on H-1B or OPT, confirm whether the employer is cap-exempt or willing to use premium processing to navigate the gap between offer and authorization.
Browse sponsoring employers on Migrate Mate before applying broadly
Not every company that posts security engineering roles will sponsor visas. Searching on Migrate Mate filters to employers with verified sponsorship history, saving you from investing heavily in applications with companies that will ultimately decline to file.
Systems Security Engineer jobs are hiring across the US. Find yours.
Find Systems Security Engineer JobsSee all 935+ Systems Security Engineer jobs
Sign up for free to unlock all listings, filter by visa type, and get alerts for new Systems Security Engineer roles.
Get Access To All JobsFrequently Asked Questions
Is Systems Security Engineer considered a specialty occupation for H-1B purposes?
Yes. Systems Security Engineer consistently qualifies as a specialty occupation because the role theoretically and practically requires at minimum a bachelor's degree in computer science, information security, cybersecurity, or a closely related field. USCIS has a well-established record of approving H-1B petitions for this title. The key is ensuring the job description explicitly reflects degree-level knowledge requirements rather than general IT troubleshooting.
Does my degree need to be specifically in cybersecurity to qualify?
No, but it needs to be closely related. Computer science, information technology, electrical engineering, and mathematics degrees are routinely accepted when paired with a security-focused job description. If your degree is in a less directly related field, a credential evaluation and documentation of relevant coursework or certifications can help USCIS adjudicators establish the connection to the specialty occupation.
How do security clearance requirements affect visa sponsorship?
Roles requiring active U.S. security clearances are almost always restricted to U.S. citizens or permanent residents, since clearances cannot be granted to most nonimmigrant visa holders. However, many private-sector systems security roles, particularly in financial services, healthcare, and commercial tech, do not require clearances and sponsor H-1B and O-1 petitions routinely. Focus your search on non-clearance roles when you're still on a work visa.
Can I qualify for an O-1A visa as a Systems Security Engineer?
Yes, if you've reached a recognized level of distinction in the field. Published security research, CVE disclosures, conference presentations at DEF CON or Black Hat, significant open-source contributions, or awards from industry bodies can support an O-1A petition. The standard is high but achievable for engineers with an established public profile. O-1A also has no lottery and no annual cap, making it attractive if you qualify.
Where can I find employers who actually sponsor visas for this role?
Migrate Mate is built specifically for this, every listing on the platform is filtered to employers with a demonstrated history of visa sponsorship. General job boards mix sponsored and non-sponsored roles with no way to distinguish them, which wastes significant time. Searching on Migrate Mate lets you focus your applications on systems security engineering roles at companies that have already committed to sponsoring foreign workers.
What is the prevailing wage requirement for sponsored Systems Security Engineer jobs?
U.S. employers sponsoring a visa must pay at least the prevailing wage, which is what workers in the same role, area, and experience level typically earn. The Department of Labor sets this rate to make sure companies aren't hiring foreign workers simply because they'd accept lower pay than a U.S. worker. It varies by job title, location, and experience. You can look up current prevailing wage rates for any occupation and location using the OFLC Wage Search page.
See which Systems Security Engineer employers are hiring and sponsoring visas right now.
Search Systems Security Engineer Jobs