Principal Information Security Engineer - ITS5

To qualify, candidates must clearly show all of the following qualifications in their resume. Resume tips available here (https://mn.gov/mnit/about-mnit/careers/hiringprocess.jsp) :

This position requires a minimum of five (5) years of information security engineering that demonstrates:

• Experience in information security, cybersecurity, or information technology, including enterprise security engineering, security architecture, risk management, or security operations.
• Experience developing, implementing, or maintaining enterprise information security controls, security policies, standards, risk assessments, or governance processes using recognized security frameworks such as NIST, ISO 27001, COBIT, or similar industry standards.
• Experience interpreting and applying information security or privacy regulations (e.g., HIPAA, CJIS, PCI DSS, or IRS FTI) and preparing security documentation, risk assessments, policies, or technical reports.
• Experience leading or coordinating information security projects and providing technical guidance or consultation to IT staff, project teams, or business stakeholders.
• Demonstrated ability to communicate clearly and effectively in a manner that facilitates mutual understanding.
• Customer-focused approach grounded in active listening, empathy, and solution-oriented problem-solving to deliver positive user experiences.

Education in Information Technology (IT) or an IT related field may substitute for experience as follows: a master’s degree for eighteen (18) months of experience; a bachelor’s degree for one (1) year; and an associate’s degree for six (6) months.

Preferred Qualifications

• Experience mentoring technical staff, leading cross-functional security initiatives, and providing subject matter expertise on enterprise security technologies, incident response, vulnerability management, or security governance.

Strongly Preferred Qualifications

• Demonstrated experience using Azure security tools such as Defender for Cloud, Entra ID, and Key Vault.
• Professional certifications and credentials in information security or information technology, such as CISSP, GSEC, CEH, CCE, ENCE, GSFI, ITIL, or a comparable industry-recognized credential.

Additional Requirements

It is the policy of Minnesota IT Services that a successful candidate must pass all legally required checks prior to employment which may consist of the following:

SEMA4 Records Check (applies to current and past state employees only)

Criminal History Check

Reference Check

Social Security and Address Verification

Education Verification

CJIS Background Check

Other legally required checks

Minnesota IT Services does not participate in the federal E-Verify program. Minnesota IT Services is unable to sponsor applicants for work visas, including F-1 STEM OPT extensions, and cannot complete Form I-9 or any other documentation requiring employer participation in E-Verify. All applicants must be legally authorized to work in the United States at the time of application.

• Designated in Connect 700 Program for Applicants with Disabilities (https://mn.gov/mmb/careers/diverse-workforce/people-with-disabilities/connect700/) : Yes

The work you’ll do is more than just a job.

At the State of Minnesota, employees play a critical role in developing policies, providing essential services, and working to improve the well-being and quality of life for all Minnesotans. The State of Minnesota is committed to equity and inclusion, and invests in employees by providing benefits, support resources, and training and development opportunities.

Join the 2,800+ professionals of Minnesota IT Services (https://mn.gov/mnit/about-mnit/careers/) (MNIT) who connect Minnesotans to services that will improve their lives. This position will be part of the Enterprise Services team, which delivers a full suite of services to state agencies, boards, councils, and commissions, and many central services to local government partners.

The Principal Information Security Engineer (PISE) is a senior cybersecurity position responsible for designing, implementing, and maintaining enterprise-wide information security programs that protect State information assets from internal and external threats. This role provides technical leadership across multiple security domains-including governance, risk management, security architecture, network and application security, incident response, business continuity, compliance-and ensures alignment with broader IT systems and organizational objectives. The PISE develops and recommends security policies, standards, and best practices, leads security risk assessments and reporting; guides the integration of security controls into new and existing systems; and supports training, certification, and project management initiatives. Within Minnesota Health and Human Services, the PISE serves as a lead engineer for establishing and maintaining the cybersecurity framework, helping government entities manage risk, strengthen security posture, and meet enterprise security requirements.

This position requires an employee to work onsite at 600 Robert St N, St Paul, Minnesota at least 50% [or more or less if space limitations remain] of the time, with limited telework available. Telework (https://mn.gov/mmb-stat/policies/1422-telework.pdf) eligibility depends on residence:

• Candidates living in Minnesota or within 50 miles of the worksite in a bordering state (Iowa, North Dakota, South Dakota, and Wisconsin) may telework up to 50%.
• Minnesota residents living more than 50 miles from the worksite may be eligible to telework more than 50%.
• Candidates living 50 miles or more from the worksite in a bordering state may work onsite 100% or may be telework eligible if relocating within 50 miles.