I think this is a bit of an academic discussion because there is no NAFTA category for these jobs, the closest is systems analyst but the field manual warns against allowing programmers to enter in that category.
The regs say for systems analyst a four year degree or "post-secondary diploma" which means a two-year degree essentially. And because they use the OOH definition the degree needs to be something related (at least vaguely) to the occupation.
Without a bachelor's degree (or higher) and a job offer that requires it, it's usually very tricky to get work authorization in the US, the main exception being an intracompany transfer.

