Principal Information Security Engineer

Lead enterprise security planning and delivery for Minnesota Health and Human Services within the statewide Enterprise Security team.

• Plan, design, implement, and maintain enterprise-wide information security programs to protect State information assets from internal and external threats
• Provide technical leadership across multiple security domains, including risk management, governance, network and application security, security architecture, incident response, business continuity, and compliance
• Recommend security policies, standards, and best practices
• Lead security risk assessments and reporting
• Ensure appropriate security controls are built into new systems
• Support training, certification, and project management initiatives
• Serve as a lead engineer for establishing and maintaining the cybersecurity framework within Minnesota Health and Human Services, supporting government entities in managing risk, strengthening security posture, and meeting enterprise security requirements
• Ensure security work integrates with broader IT systems and processes

• Minimum five (5) years of experience performing IT business analysis functions
• Experience in information security, cybersecurity, or information technology, including enterprise security engineering, security architecture, risk management, or security operations
• Experience developing, implementing, or maintaining enterprise information security controls, security policies, standards, risk assessments, or governance processes using recognized security frameworks such as NIST
  , ISO 27001
  , COBIT
  , or similar industry standards
• Experience interpreting and applying information security or privacy regulations (e.g.,
  HIPAA
  , CJIS
  , PCI DSS
  , or IRS FTI
  ) and preparing security documentation, risk assessments, policies, or technical reports
• Experience leading or coordinating information security projects and providing technical guidance or consultation to IT staff, project teams, or business stakeholders
• Demonstrated ability to communicate clearly and effectively to facilitate mutual understanding
• Customer-focused approach grounded in active listening, empathy, and solution-oriented problem-solving to deliver positive user experiences

• NIST
• ISO 27001
• COBIT
• HIPAA
• CJIS
• PCI DSS
• IRS FTI
• CISSP
• GSEC
• CEH
• CCE
• ENCE
• GSFI
• ITIL

• Paid vacation and sick leave
• 12 paid holidays each year
• Low-cost medical, dental, vision, and prescription drug plans
• 6 weeks paid leave for parents of newborn or newly adopted children
• Pension plan that provides income when you retire (after working at least three years)
• Employer paid life insurance
• Short-term and long-term disability insurance
• Tax-free expense accounts for health, dental, and dependent care
• Resources that support physical, emotional, social, and financial well-being

• Working onsite at 540 Cedar Street, St. Paul, MN at least 50% of the time
• Limited telework available
• Telework eligibility depends on residence
  • Candidates living in Minnesota or within 50 miles of the worksite in a bordering state (Iowa, North Dakota, South Dakota, Wisconsin) may telework up to 50%
  • Minnesota residents living more than 50 miles from the worksite may be eligible to telework more than 50%
  • Candidates living 50 miles or more from the worksite in a bordering state may work onsite 100% or may be telework eligible if relocating within 50 miles

• Working Title:
  
  METS Principal Information Security Engineer
• Job Class:
  Information Technology Specialist 5
• Agency:
  Minnesota IT Services
• Division/Unit:
  Enterprise Security
• Job :
  97269
• Location:
  
  St. Paul, MN (#LI-Hybrid)
• Full/Part Time:
  Full-Time
• Regular/Temporary:
  Unlimited
• Who May Apply:
  Open to all qualified job seekers
• Date Posted:
  09/25/2026
• Closing Date:
  10/08/2026
• Work Shift/
  
  Work Hours:
  
  Day Shift
• Days of Work:
  Monday
  - Friday
• Travel Required:
  
  No
• Salary Range: $40.43 - $69.11 / hourly
  ; $84,417 - $144,301 / annually
• Job Class Option:
  Information Security
• Classified Status:
  Classified
• Bargaining Unit/Union:
  214 - MN Assoc of Professional Empl/MAPE
• FLSA Status:
  Exempt
  - Professional
• Designated in Connect 700 Program for Applicants with Disabilities:
  Yes

• Professional certification in information security or information technology, such as CISSP
  , GSEC
  , CEH
  , CCE
  , ENCE
  , GSFI
  , ITIL
  , or a comparable industry-recognized credential
• Experience mentoring technical staff
• Experience leading or coordinating cross-functional security initiatives
• Experience serving as a subject matter expert on enterprise security…