Principal Information Security Engineer

Join the 2,800+ professionals of Minnesota IT Services (MNIT) who connect Minnesotans to services that will improve their lives. This position will be part of the Enterprise Services team, which delivers a full suite of services to state agencies, boards, councils, and commissions, and many central services to local government partners.

Job Summary

The Principal Information Security Engineer (PISE) is a senior cybersecurity position responsible for designing, implementing, and maintaining enterprise-wide information security programs that protect State information assets from internal and external threats. This role provides technical leadership across multiple security domains—including governance, risk management, security architecture, network and application security, incident response, business continuity, compliance—and ensures alignment with broader IT systems and organizational objectives. The PISE develops and recommends security policies, standards, and best practices, leads security risk assessments and reporting; guides the integration of security controls into new and existing systems; and supports training, certification, and project management initiatives. Within Minnesota Health and Human Services, the PISE serves as a lead engineer for establishing and maintaining the cybersecurity framework, helping government entities manage risk, strengthen security posture, and meet enterprise security requirements.

This position requires an employee to work onsite at 600 Robert St N, St Paul, Minnesota at least 50% (or more or less if space limitations remain) of the time, with limited telework available.

Telework eligibility depends on residence:

• Candidates living in Minnesota or within 50 miles of the worksite in a bordering state (Iowa, North Dakota, South Dakota, and Wisconsin) may telework up to 50%.
• Minnesota residents living more than 50 miles from the worksite may be eligible to telework more than 50%.
• Candidates living 50 miles or more from the worksite in a bordering state may work onsite 100% or may be telework eligible if relocating within 50 miles.

Qualifications:

This position requires a minimum of five (5) years of information security engineering that demonstrates:

• Experience in information security, cybersecurity, or information technology, including enterprise security engineering, security architecture, risk management, or security operations.
• Experience developing, implementing, or maintaining enterprise information security controls, security policies, standards, risk assessments, or governance processes using recognized security frameworks such as NIST, ISO 27001, COBIT, or similar industry standards.
• Experience interpreting and applying information security or privacy regulations (e.g., HIPAA, CJIS, PCI DSS, or IRS FTI) and preparing security documentation, risk assessments, policies, or technical reports.
• Experience leading or coordinating information security projects and providing technical guidance or consultation to IT staff, project teams, or business stakeholders.
• Demonstrated ability to communicate clearly and effectively in a manner that facilitates mutual understanding.
• Customer-focused approach grounded in active listening, empathy, and solution-oriented problem-solving to deliver positive user experiences.

Education in Information Technology (IT) or an IT related field may substitute for experience as follows: a master’s degree for eighteen (18) months of experience; a bachelor’s degree for one (1) year; and an associate’s degree for six (6) months.

Minnesota IT Services does not participate in the federal E-Verify program. Minnesota IT Services is unable to sponsor applicants for work visas, including F-1 STEM OPT extensions, and cannot complete Form I-9 or any other documentation requiring employer participation in E-Verify. All applicants must be legally authorized to work in the United States at the time of application.