Principal Engineer, IT Infrastructure & Security

Verus Mortgage Capital; BLOOMINGTON (MN); Hybrid; USD 160,000 - 175,000; Full time

Benefits offered by this job

Competitive compensation package

401(k) company match

Comprehensive health coverage

Job summary

Verus Mortgage Capital seeks an hands-on infrastructure and security leader to architect, secure, and operate a hybrid enterprise environment in Bloomington, MN. You will own a defense-in-depth security model across identity, devices, network, applications, and data, with direct oversight of the Network & Systems Administrator.

Responsibilities span enterprise architecture, network security, cloud and identity (Azure, Entra ID), endpoint security, monitoring, and governance frameworks (NIST,

Qualifications

• Bachelor's degree in computer science, information systems, cybersecurity, engineering, or a related field.
• 7+ years of progressive experience in network engineering, cloud infrastructure, or cybersecurity with hands-on ownership of enterprise-scale environments.
• Strong, hands-on expertise across enterprise networking/firewalls, Microsoft Azure architecture, and modern EDR/XDR tooling.
• Working knowledge of Zero Trust principles, hybrid identity (Azure AD/Entra ID), and endpoint/MDM management.
• Experience supporting regulatory or compliance frameworks common in financial services (e.g., NIST, FFIEC, ISO 27001).
• Comfortable scripting and automating routine operations (PowerShell, Bash, or similar).

Responsibilities

• Architect and secure a hybrid enterprise environment with a defense-in-depth security model.
• Own identity, devices, network, applications, and data security across the stack.
• Provide oversight of Network & Systems Administrator and drive automation (IaC).
• Lead Enterprise firewall management, network segmentation, 802.1X, and SIEM integration.
• Implement Azure infrastructure (VMs, VNets, load balancers) and hybrid connectivity.
• Lead incident response, forensics, disaster recovery, and business continuity testing.
• Ensure compliance with NIST, CIS, ISO 27001, FFIEC and related controls.

Skills

Zero Trust

Azure

EDR/XDR

Network Security

Firewall Management

IAM / Entra ID

PowerShell

Bash scripting

Incident Response

Forensics

Disaster Recovery

Compliance / Governance

Education

Bachelor's degree in CS/InfoSec/Engineering

Tools

PowerShell

Bash

SIEM

Terraform / IaC

VPN/ExpressRoute

Job description

Location: Bloomington, MN

Compensation: $160,000 - $175,000 / year

Department: Information Technology - Data & Reporting

Location: Bloomington, MN

Compensation: $160,000 - $175,000 / year

Description

We're looking for a hands-on infrastructure and security leader to architect, secure, and operate our hybrid enterprise environment. You'll own our defense-in-depth security model and Zero Trust strategy across identity, devices, network, applications, and data. You'll be the one building and running it, not just directing it. This role also has direct oversight of our Network & Systems Administrator.

Responsibilities and Duties

Enterprise Architecture & Zero Trust —

• Identity-driven access, device trust enforcement, and network micro-segmentation
• Defense-in-depth strategy spanning perimeter, endpoint, identity, and data layers

Network & Security Engineering —

• Enterprise firewall management, including advanced threat protection and application control
• Network segmentation, access control, and authentication (RADIUS/802.1X)
• Traffic analysis and anomaly detection, integrated into centralized logging/SIEM

Cloud & Identity (Azure)

• Azure infrastructure: VMs, VNets, load balancers, and hybrid connectivity (VPN/ExpressRoute)
• Hybrid identity via Entra ID, including conditional access, MFA, and privileged identity management
• Infrastructure-as-code and automation of cloud provisioning

Endpoint & Data Security —

• Device lifecycle management and MDM/MAM policy enforcement
• EDR/XDR deployment, tuning, and threat hunting
• Data classification, encryption, and loss prevention

Monitoring & Incident Response —

• Centralized monitoring, alerting, and performance baselining
• Incident response, digital forensics, and root cause analysis
• Disaster recovery and business continuity planning and testing
• Provide after-hours support for critical UIT issues and service disruptions when necessary.

Compliance & Governance —

• NIST, CIS, ISO 27001, and FFIEC alignment
• Audit support, risk assessments, and architecture/control documentation

Automation & Leadership —

• Scripting and automation (PowerShell, Bash, or similar) across routine operations
• Technical escalation points and mentor to engineering staff
• Direct oversight of the Network & Systems Administrator

Education and Experience

• Bachelor’s degree in computer science, information systems, cybersecurity, engineering, or a related field — or equivalent experience/certifications
• 7+ years of progressive experience in network engineering, cloud infrastructure, or cybersecurity, with hands-on ownership of enterprise-scale environments
• Strong, hands-on expertise across enterprise networking/firewalls, Microsoft Azure architecture, and modern EDR/XDR tooling
• Working knowledge of Zero Trust principles, hybrid identity (Azure AD/Entra ID), and endpoint/MDM management
• Experience supporting regulatory or compliance frameworks common in financial services (e.g., NIST, FFIEC, ISO 27001)
• Comfortable scripting and automating routine operations (PowerShell, Bash, or similar)

Key Competencies

• Enterprise Architecture Leadership: Designs secure, scalable infrastructure aligned with business and security objectives
• Cybersecurity Expertise: Implements advanced security frameworks and defense-in-depth strategies
• Cloud & Network Engineering: Demonstrates deep expertise across hybrid infrastructure and enterprise networking
• Technical Leadership: Serves as a trusted technical authority and mentor across the organization
• Automation & Innovation: Continuously improves operational efficiency through automation and modern engineering practices

How This Role Demonstrates Our Values

• Integrity: Protects company systems, data, and infrastructure through disciplined security and governance practices
• Collaboration: Partners across IT, Security, and business teams to deliver secure and scalable solutions
• Excellence: Maintains high standards for infrastructure reliability, performance, and operational maturity
• Critical Curiosity: Evaluates emerging technologies and continuously improves enterprise architecture and security posture

Benefits

• Competitive compensation package, including base salary and performance-based bonus opportunities
• 401(k) plan with 100% company match up to 4%
• Comprehensive health coverage: medical, dental, vision, HSA, and FSA options
• Generous paid time off: 20 days PTO, company holidays, and sick time
• Paid parental leave
• Company-paid life insurance and disability coverage
• Employee Assistance Program (EAP): mental health, financial, and wellness support
• Professional development: tuition reimbursement and growth opportunities
• Commuter and transit benefits

Successful applicants will exemplify strong ethics, integrity, respect for others, accountability for decisions and actions, and good citizenship.

Maintaining a reliable, uninterrupted high speed internet connection is a requirement of hybrid or remote positions.

All job duties and responsibilities must be performed within the guidelines of the Verus Residential Mortgage Employee Handbook and established company policies and procedures. It is the responsibility of each employee to maintain confidentiality of the company, its clients and to follow applicable laws and regulations in the performance of duties.

Verus Mortgage Capital is an equal opportunity employer. All qualified applicants are welcomed to apply and will receive consideration for employment without unlawful discrimination because of a person’s race, religious creed, color, national origin, citizenship status, ancestry, marital status, sex, age, or sexual orientation, or because of a person’s disability or medical condition.