> Markdown version of [/jobs/ext/2347544-principal-engineer-it-infrastructure-security](https://www.wearedevelopers.com/jobs/ext/2347544-principal-engineer-it-infrastructure-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Principal Engineer, IT Infrastructure & Security - **Company:** Verus Mortgage Capital - **Location:** Bloomington, MN, United States (Remote available) - **Experience:** Expert - **Salary:** $160,000.0 - $175,000.0 - **Contract:** Permanent contract - **Skills:** IEEE 802.1X, User Authentication, Microsoft Azure, Bash Shell, Cloud Computing, Cyber Security, Information Systems, Data Security, Digital Forensics, Disaster Recovery, Identity and Access Management, Intrusion Detection and Prevention, Virtual Private Networks (VPN), Network Security, Network Segmentation, Performance Tuning, Windows PowerShell, Azure Active Directory, Zero Trust Network Access, Security Information and Event Management, Traffic Analysis, Data Logging, Load Balancing, Data Classification, Data Layers, Information Technology, Cybercrime - **Published:** August 5, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=7d98781753c1c72a ## About the Role * Bachelor's degree in computer science, information systems, cybersecurity, engineering, or a related field - or equivalent experience/certifications * 7+ years of progressive experience in network engineering, cloud infrastructure, or cybersecurity, with hands-on ownership of enterprise-scale environments * Strong, hands-on expertise across enterprise networking/firewalls, Microsoft Azure architecture, and modern EDR/XDR tooling * Working knowledge of Zero Trust principles, hybrid identity (Azure AD/Entra ID), and endpoint/MDM management * Experience supporting regulatory or compliance frameworks common in financial services (e.g., NIST, FFIEC, ISO 27001) * Comfortable scripting and automating routine operations (PowerShell, Bash, or similar) ## Description We're looking for a hands-on infrastructure and security leader to architect, secure, and operate our hybrid enterprise environment. You'll own our defense-in-depth security model and Zero Trust strategy across identity, devices, network, applications, and data. You'll be the one building and running it, not just directing it. This role also has direct oversight of our Network & Systems Administrator., Enterprise Architecture & Zero Trust - Design and implement secure infrastructure across on-prem and Azure environments, applying Zero Trust principles throughout. * Identity-driven access, device trust enforcement, and network micro-segmentation * Defense-in-depth strategy spanning perimeter, endpoint, identity, and data layers Network & Security Engineering - Own enterprise networking and perimeter/internal security, along with threat detection and response. * Enterprise firewall management, including advanced threat protection and application control * Network segmentation, access control, and authentication (RADIUS/802.1X) * Traffic analysis and anomaly detection, integrated into centralized logging/SIEM Cloud & Identity (Azure) Architect our Azure environment and hybrid identity model. * Azure infrastructure: VMs, VNets, load balancers, and hybrid connectivity (VPN/ExpressRoute) * Hybrid identity via Entra ID, including conditional access, MFA, and privileged identity management * Infrastructure-as-code and automation of cloud provisioning Endpoint & Data Security - Manage endpoint security, MDM, and data protection strategy. * Device lifecycle management and MDM/MAM policy enforcement * EDR/XDR deployment, tuning, and threat hunting * Data classification, encryption, and loss prevention Monitoring & Incident Response - Build observability and lead our response to security and infrastructure incidents. * Centralized monitoring, alerting, and performance baselining * Incident response, digital forensics, and root cause analysis * Disaster recovery and business continuity planning and testing * Provide after-hours support for critical UIT issues and service disruptions when necessary. Compliance & Governance - Align infrastructure and controls to relevant regulatory frameworks. * NIST, CIS, ISO 27001, and FFIEC alignment * Audit support, risk assessments, and architecture/control documentation Automation & Leadership - Reduce manual work and serve as a technical authority for the team. * Scripting and automation (PowerShell, Bash, or similar) across routine operations * Technical escalation points and mentor to engineering staff * Direct oversight of the Network & Systems Administrator, * Enterprise Architecture Leadership: Designs secure, scalable infrastructure aligned with business and security objectives * Cybersecurity Expertise: Implements advanced security frameworks and defense-in-depth strategies * Cloud & Network Engineering: Demonstrates deep expertise across hybrid infrastructure and enterprise networking * Technical Leadership: Serves as a trusted technical authority and mentor across the organization * Automation & Innovation: Continuously improves operational efficiency through automation and modern engineering practices How This Role Demonstrates Our Values: * Integrity: Protects company systems, data, and infrastructure through disciplined security and governance practices * Collaboration: Partners across IT, Security, and business teams to deliver secure and scalable solutions * Excellence: Maintains high standards for infrastructure reliability, performance, and operational maturity * Critical Curiosity: Evaluates emerging technologies and continuously improves enterprise architecture and security posture, Maintaining a reliable, uninterrupted high speed internet connection is a requirement of hybrid or remote positions. All job duties and responsibilities must be performed within the guidelines of the Verus Residential Mortgage Employee Handbook and established company policies and procedures. It is the responsibility of each employee to maintain confidentiality of the company, its clients and to follow applicable laws and regulations in the performance of duties. Verus Mortgage Capital is an equal opportunity employer. All qualified applicants are welcomed to apply and will receive consideration for employment without unlawful discrimination because of a person's race, religious creed, color, national origin, citizenship status, ancestry, marital status, sex, age, or sexual orientation, or because of a person's disability or medical condition. About Invictus Capital Partners / Verus Mortgage Capital Verus Mortgage Capital is an independent national mortgage investor. Verus offers its Sellers responsible non-prime and Jumbo prime lending products that fill the credit void in today's market. Verus consistently evaluates today's market and credible borrower financing needs to offer our partners innovative solutions. Verus Mortgage Capital is an affiliate of Invictus Capital Partners please visit our website at https://verusmc.com/. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Old tools, new tricks](https://www.wearedevelopers.com/videos/1916-old-tools-new-tricks) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [Why Your AI Agent Keeps Hallucinating Your Data: Building Deterministic Context Layers](https://www.wearedevelopers.com/videos/2055-why-your-ai-agent-keeps-hallucinating-your-data-building-deterministic-context-layers) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [MCP doesn’t suck — your agent does](https://www.wearedevelopers.com/videos/100202-mcp-doesn-t-suck-your-agent-does) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology)