Principal Information Security Engineer

The Principal Information Security Engineer (PISE) serves as a senior technical leader responsible for designing, implementing, and maintaining enterprise-wide information security programs that safeguard State information assets. This hybrid role supports statewide security risk activities, control integration, and technical leadership across multiple security domains.

Responsibilities

• Design, implement, and maintain enterprise-wide information security programs to protect State information assets from internal and external threats.
• Provide technical leadership across multiple security domains, including governance, risk management, security architecture, network and application security, incident response, business continuity, and compliance, ensuring alignment with broader IT systems and organizational objectives.
• Develop and recommend security policies, standards, and best practices.
• Lead security risk assessments and produce associated reporting.
• Guide the integration of security controls into new and existing systems.
• Support training, certification, and project management initiatives.
• Act as a lead engineer for establishing and maintaining the cybersecurity framework within Minnesota Health and Human Services to help government entities manage risk, strengthen security posture, and meet enterprise security requirements.

Minimum Requirements

• Minimum of five (5) years of information security engineering demonstrating experience in information security, cybersecurity, or information technology, including enterprise security engineering, security architecture, risk management, or security operations.
• Experience developing, implementing, or maintaining enterprise information security controls, security policies, standards, risk assessments, or governance processes using recognized security frameworks such as NIST, ISO 27001, COBIT, or similar industry standards.
• Experience interpreting and applying information security or privacy regulations (for example, HIPAA, CJIS, PCI DSS, or IRS FTI) and preparing security documentation, risk assessments, policies, or technical reports.
• Experience leading or coordinating information security projects and providing technical guidance or consultation to IT staff, project teams, or business stakeholders.
• Demonstrated ability to communicate clearly and effectively in a way that facilitates mutual understanding.
• Customer-focused approach grounded in active listening, empathy, and solution-oriented problem-solving to deliver positive user experiences.

Technologies

• NIST
• ISO 27001
• COBIT
• HIPAA
• CJIS
• PCI DSS
• IRS FTI
• Azure security tools
• Defender for Cloud
• Entra ID
• Key Vault
• CISSP
• GSEC
• CEH
• CCE
• ENCE
• GSFI
• ITIL

Preferred Qualifications

• Experience mentoring technical staff, leading cross-functional security initiatives, and providing subject matter expertise on enterprise security technologies, incident response, vulnerability management, or security governance.
• Demonstrated experience using Azure security tools such as Defender for Cloud, Entra ID, and Key Vault.
• Professional certifications and credentials in information security or information technology, such as CISSP, GSEC, CEH, CCE, ENCE, GSFI, ITIL, or a comparable industry-recognized credential.

Compensation and Location

• Location: St. Paul, MN (hybrid)
• Salary: USD 40 - 69 per hourly
• Minimum Experience: 5 years

Telework Eligibility

• Candidates living in Minnesota or within 50 miles of the worksite in a bordering state (Iowa, North Dakota, South Dakota, and Wisconsin) may telework up to 50%.
• Minnesota residents living more than 50 miles from the worksite may be eligible to telework more than 50%.
• Candidates living 50 miles or more from the worksite in a bordering state are not eligible for hire unless relocating within 50 miles.

Benefits

• Paid vacation and sick leave
• 12 paid holidays each year
• Low-cost medical, dental, vision, and prescription drug plans
• 6 weeks paid leave for parents of newborn or newly adopted children
• Pension plan that provides income when you retire (after working at least three years)
• Employer paid life insurance to provide support for your family in the event of death
• Short-term and long-term disability insurance that can provide income if you are unable to work due to illness or injury
• Tax-free expense accounts for health, dental, and dependent care
• Resources that provide support and promote physical, emotional, social, and financial well-being
• Training, classes, and professional development
• Tuition reimbursement
• Federal Public Service Loan Forgiveness Program (some positions may qualify)
• Employee Assistance Program (EAP) for work/life support

Additional Requirements

• It is the policy of Minnesota IT Services that a successful candidate must pass all legally required checks prior to employment, which may consist of: SEMA4 Records Check (applies to current and past state employees only), Criminal History Check, Reference Check, Social Security and Address Verification, Education Verification, CJIS Background Check, and other legally required checks.
• Minnesota IT Services does not participate in the federal E-Verify program.
• Minnesota IT Services is unable to sponsor applicants for work visas, including F-1 STEM OPT extensions, and cannot complete Form I-9 or any other documentation requiring employer participation in E-Verify.
• All applicants must be legally authorized to work in the United States at the time of application.