Principal Information Security Engineer

Join the 2,800+ professionals of Minnesota IT Services (MNIT) who connect Minnesotans to services that will improve their lives. This position will be part of the Enterprise Security team, which embeds security protection statewide.

The Principal Information Security Engineer (PISE) is a senior cybersecurity position responsible for designing, implementing, and maintaining enterprise-wide information security programs that protect State information assets from internal and external threats. This role provides technical leadership across multiple security domains—including governance, risk management, security architecture, network and application security, incident response, business continuity, compliance—and ensures alignment with broader IT systems and organizational objectives.

The PISE develops and recommends security policies, standards, and best practices, leads security risk assessments and reporting; guides the integration of security controls into new and existing systems; and supports training, certification, and project management initiatives. Within Minnesota Health and Human Services, the PISE serves as a lead engineer for establishing and maintaining the cybersecurity framework, helping government entities manage risk, strengthen security posture, and meet enterprise security requirements.

This position requires an employee to work onsite at 540 Cedar Street, St. Paul,, Minnesota at least 50% of the time, with limited telework available. Telework eligibility depends on residence:

• Candidates living in Minnesota or within 50 miles of the worksite in a bordering state (Iowa, North Dakota, South Dakota, and Wisconsin) may telework up to 50%.
• Minnesota residents living more than 50 miles from the worksite may be eligible to telework more than 50%.
• Candidates living 50 miles or more from the worksite in a bordering state are not eligible for hire unless relocating within 50 miles.

• Experience in information security, cybersecurity, or information technology, including enterprise security engineering, security architecture, risk management, or security operations.
• Experience developing, implementing, or maintaining enterprise information security controls, security policies, standards, risk assessments, or governance processes using recognized security frameworks such as NIST, ISO 27001, COBIT, or similar industry standards.
• Experience interpreting and applying information security or privacy regulations (e.g., HIPAA, CJIS, PCI DSS, or IRS FTI) and preparing security documentation, risk assessments, policies, or technical reports.
• Experience leading or coordinating information security projects and providing technical guidance or consultation to IT staff, project teams, or business stakeholders.
• Demonstrated ability to communicate clearly and effectively in a manner that facilitates mutual understanding.
• Customer-focused approach grounded in active listening, empathy, and solution-oriented problem-solving to deliver positive user experiences.

Education in Information Technology (IT) or an IT related field may substitute for experience as follows: a master’s degree for eighteen (18) months of experience; a bachelor’s degree for one (1) year; and an associate’s degree for six (6) months.

It is the policy of Minnesota IT Services that a successful candidate must pass all legally required checks prior to employment which may consist of the following:

• SEMA4 Records Check (applies to current and past state employees only)
• Criminal History Check
• Reference Check
• Social Security and Address Verification
• CJIS Background Check
• Other legally required checks

Minnesota IT Services does not participate in the federal E-Verify program. Minnesota IT Services is unable to sponsor applicants for work visas, including F-1 STEM OPT extensions, and cannot complete Form I-9 or any other documentation requiring employer participation in E-Verify. All applicants must be legally authorized to work in the United States at the time of application.