Principal Engineer, IT Infrastructure & Security
Department: Information Technology - Data & Reporting
Employment Type: Full Time
Location: Bloomington, MN
Reporting To: IT Operations Manager
Compensation: $160,000 - $175,000 / year
Description
We're looking for a hands-on infrastructure and security leader to architect, secure, and operate our hybrid enterprise environment. You'll own our defense-in-depth security model and Zero Trust strategy across identity, devices, network, applications, and data. You'll be the one building and running it, not just directing it. This role also has direct oversight of our Network & Systems Administrator.
Responsibilities and Duties:
Enterprise Architecture & Zero Trust - Design and implement secure infrastructure across on-prem and Azure environments, applying Zero Trust principles throughout.
Identity-driven access, device trust enforcement, and network micro-segmentation
Defense-in-depth strategy spanning perimeter, endpoint, identity, and data layers
Network & Security Engineering - Own enterprise networking and perimeter/internal security, along with threat detection and response.
Enterprise firewall management, including advanced threat protection and application control
Network segmentation, access control, and authentication (RADIUS/802.1X)
Traffic analysis and anomaly detection, integrated into centralized logging/SIEM
Cloud & Identity (Azure) Architect our Azure environment and hybrid identity model.
Azure infrastructure: VMs, VNets, load balancers, and hybrid connectivity (VPN/ExpressRoute)
Hybrid identity via Entra ID, including conditional access, MFA, and privileged identity management
Infrastructure-as-code and automation of cloud provisioning
Endpoint & Data Security - Manage endpoint security, MDM, and data protection strategy.
Device lifecycle management and MDM/MAM policy enforcement
EDR/XDR deployment, tuning, and threat hunting
Data classification, encryption, and loss prevention
Monitoring & Incident Response - Build observability and lead our response to security and infrastructure incidents.
Centralized monitoring, alerting, and performance baselining
Incident response, digital forensics, and root cause analysis
Disaster recovery and business continuity planning and testing
Provide after-hours support for critical UIT issues and service disruptions when necessary.
Compliance & Governance - Align infrastructure and controls to relevant regulatory frameworks.
NIST, CIS, ISO 27001, and FFIEC alignment
Audit support, risk assessments, and architecture/control documentation
Automation & Leadership - Reduce manual work and serve as a technical authority for the team.
Scripting and automation (PowerShell, Bash, or similar) across routine operations
Technical escalation points and mentor to engineering staff
Direct oversight of the Network & Systems Administrator
Education and Experience:
Bachelor's degree in computer science, information systems, cybersecurity, engineering, or a related field - or equivalent experience/certifications
7+ years of progressive experience in network engineering, cloud infrastructure, or cybersecurity, with hands-on ownership of enterprise-scale environments
Strong, hands-on expertise across enterprise networking/firewalls, Microsoft Azure architecture, and modern EDR/XDR tooling
Working knowledge of Zero Trust principles, hybrid identity (Azure AD/Entra ID), and endpoint/MDM management
Experience supporting regulatory or compliance frameworks common in financial services (e.g., NIST, FFIEC, ISO 27001)
Comfortable scripting and automating routine operations (PowerShell, Bash, or similar)
Key Competencies:
Enterprise Architecture Leadership: Designs secure, scalable infrastructure aligned with business and security objectives
Cybersecurity Expertise: Implements advanced security frameworks and defense-in-depth strategies
Cloud & Network Engineering: Demonstrates deep expertise across hybrid infrastructure and enterprise networking
Technical Leadership: Serves as a trusted technical authority and mentor across the organization
Automation & Innovation: Continuously improves operational efficiency through automation and modern engineering practices
How This Role Demonstrates Our Values:
Integrity: Protects company systems, data, and infrastructure through disciplined security and governance practices
Collaboration: Partners across IT, Security, and business teams to deliver secure and scalable solutions
Excellence: Maintains high standards for infrastructure reliability, performance, and operational maturity
Critical Curiosity: Evaluates emerging technologies and continuously improves enterprise architecture and security posture
Benefits
Competitive compensation package, including base salary and performance-based bonus opportunities
401(k) plan with 100% company match up to 4%
Comprehensive health coverage: medical, dental, vision, HSA, and FSA options
Generous paid time off: 20 days PTO, company holidays, and sick time
Paid parental leave
Company-paid life insurance and disability coverage
Employee Assistance Program (EAP): mental health, financial, and wellness support
Professional development: tuition reimbursement and growth opportunities
Commuter and transit benefits
Successful applicants will exemplify strong ethics, integrity, respect for others, accountability for decisions and actions, and good citizenship.
Maintaining a reliable, uninterrupted high speed internet connection is a requirement of hybrid or remote positions.
All job duties and responsibilities must be performed within the guidelines of the Verus Residential Mortgage Employee Handbook and established company policies and procedures. It is the responsibility of each employee to maintain confidentiality of the company, its clients and to follow applicable laws and regulations in the performance of duties.
Verus Mortgage Capital is an equal opportunity employer. All qualified applicants are welcomed to apply and will receive consideration for employment without unlawful discrimination because of a person's race, religious creed, color, national origin, citizenship status, ancestry, marital status, sex, age, or sexual orientation, or because of a person's disability or medical condition.
