Pci Dss

Pci Dss Engineer Jobs

3 jobs found

2d ago

Principal Information Security Engineer

State of Minnesota - Minnesota IT Services St. Paul, MN

St. Paul, MN

2d ago

$40 - $69/hr Full time CISSP Cobit HIPAA

Apply Now

Job Description

Lead enterprise security planning and execution for statewide protection of Minnesota information assets as part of the Enterprise Security team.

Responsibilities

Plan, design, implement, and maintain enterprise-wide information security programs to protect State information assets from internal and external threats.
Provide technical leadership across multiple security domains, including:
- Risk management
- Governance
- Network and application security
- Security architecture
- Incident response
- Business continuity
- Compliance
Ensure security efforts integrate with broader IT systems and processes.
Develop and recommend information security policies, standards, and best practices.
Lead security risk assessments and reporting.
Ensure appropriate security controls are included in new systems.
Support training, certification, and project management initiatives.
Serve as a lead engineer to establish and maintain the cybersecurity framework within Minnesota Health and Human Services, helping government entities manage risk, strengthen security posture, and meet enterprise security requirements.

Requirements

Minimum of five (5) years of experience performing IT business analysis functions.
Experience in information security, cybersecurity, or information technology, including enterprise security engineering, security architecture, risk management, or security operations.
Experience developing, implementing, or maintaining enterprise information security controls, security policies, standards, risk assessments, or governance processes using recognized security frameworks such as:
- NIST
- ISO 27001
- COBIT
- Similar industry standards
Experience interpreting and applying information security or privacy regulations, including examples such as HIPAA, CJIS, PCI DSS, or IRS FTI, and preparing security documentation, risk assessments, policies, or technical reports.
Experience leading or coordinating information security projects and providing technical guidance or consultation to IT staff, project teams, or business stakeholders.
Demonstrated ability to communicate clearly and effectively to facilitate mutual understanding.
Customer-focused approach grounded in active listening, empathy, and solution-oriented problem-solving to deliver positive user experiences.

Technologies

NIST
ISO 27001
COBIT
HIPAA
CJIS
PCI DSS
IRS FTI
CISSP
GSEC
CEH
CCE
ENCE
GSFI
ITIL

Benefits

Paid vacation and sick leave
12 paid holidays each year
Low-cost medical, dental, vision, and prescription drug plans
6 weeks paid leave for parents of newborn or newly adopted children
Pension plan that provides income when you retire (after working at least three years)
Employer paid life insurance
Short-term and long-term disability insurance
Tax-free expense accounts for health, dental, and dependent care
Resources that provide support and promote physical, emotional, social, and financial well-being

Job Details

Working Title: METS Principal Information Security Engineer
Job Class: Information Technology Specialist 5
Agency: Minnesota IT Services
Job ID: 97269
Location: St. Paul, MN (hybrid)
Telework Eligible: Yes
Full/Part Time: Full-Time
Regular/Temporary: Unlimited
Who May Apply: Open to all qualified job seekers
Date Posted: 09/25/2026
Closing Date: 10/08/2026
Hiring Agency/Seniority Unit: Minnesota IT Services
Division/Unit: Enterprise Security
Work Shift/Work Hours: Day Shift
Days of Work: Monday - Friday
Travel Required: No
Salary Range: $40.43 - $69.11 / hourly; $84,417 - $144,301 / annually
Job Class Option: Information Security
Classified Status: Classified
Bargaining Unit/Union: 214 - MN Assoc of Professional Empl/MAPE
FLSA Status: Exempt - Professional
Connect 700 Program for Applicants with Disabilities: Yes

Work Location and Telework

Onsite requirement: work onsite at 540 Cedar Street, St. Paul, MN, at least 50% of the time, with limited telework available.
Telework eligibility depends on residence:
- Candidates living in Minnesota or within 50 miles of the worksite in a bordering state (Iowa, North Dakota, South Dakota, and Wisconsin) may telework up to 50%.
- Minnesota residents living more than 50 miles from the worksite may be eligible to telework more than 50%.
- Candidates living 50 miles or more from the worksite in a bordering state may work onsite 100% or may be telework eligible if relocating within 50 miles.

Preferred Qualifications

Professional certification in information security or information technology, such as CISSP, GSEC, CEH, CCE, ENCE, GSFI, ITIL, or comparable industry-recognized credentials.
Experience mentoring technical staff, leading or coordinating cross-functional security initiatives, and serving as a subject matter expert on:
- Enterprise security technologies
- Incident management
- Vulnerability management
- Security risk management
- Security governance

Additional Requirements

Successful candidate must pass legally required checks prior to employment, which may include:
- SEMA4 Records Check (applies to current and past state employees only)
- Criminal History Check
- Reference Check
- Social Security and Address Verification
- Education Verification
- CJIS Background Check
- Other legally required checks
Minnesota IT Services does not participate in the federal E-Verify program.
Minnesota IT Services is unable to sponsor work visas, including F-1 STEM OPT extensions, and cannot complete Form I-9 or documentation requiring employer participation in E-Verify.
All applicants must be legally authorized to work in the United States at the time of application.

Application Details

How to Apply: Select “Apply for Job” at the top of the page.
Questions about applying: Careers Help Desk at 651-259-3637 or email careers@state.mn.us.
Contact for position questions: Human Resources at workwithmnit@state.mn.us.

Connect 700 Program

To receive consideration as a Connect 700 Program applicant, apply online and email the Job ID #, Working Title, and your valid Proof of Eligibility Certificate by the closing date to workwithmnit@state.mn.us.

Veterans

To be considered for Veteran’s Status, indicate this on the application.
Recently Separated Veterans (RSV): top five RSV applicants who apply and meet qualifications for a vacancy shall be granted an interview (effective July 1, 2009).
Must meet all Minimum Qualifications, meet all RSV criteria, and submit a copy of DD-214 by the closing date to workwithmnit@state.mn.us.
Certain Disabled Veterans: agencies may appoint certain disabled veterans on a noncompetitive basis if service requirements are met with a verified service-connected disability rating of at least 30%, qualifying documentation is provided, all Minimum Qualifications are met, and documentation is submitted by the closing date to workwithmnit@state.mn.us.

Current State Employees

Bidders: vacancy is open for bids and all qualified applicants simultaneously; filled per applicable union contract provisions; current Minnesota IT Services employees in an Information Technology Specialist 5/Information Security position who are eligible to bid and apply within the seven (7) day bidding period will be considered before filling via other means.
Current State Employees: employment provisions (including seniority and leave accrual) vary among the three branches of Minnesota State government.

View full job page →

4d ago

Security Engineer (Linux Systems Engineer)

Navy Federal Credit Union Pensacola, FL

Pensacola, FL

4d ago

$99k - $156k/yr Full time Ai Security Ansible Application Security

Apply Now

Job Description

The Security Engineer (Linux Systems Engineer) role supports Navy Federal Credit Union’s Advanced Cyber Initiatives team, with a focus on Linux systems engineering and enterprise cybersecurity applications. The position involves secure deployment and maintenance, vulnerability remediation, audit and hardening support, and close collaboration with Information Security teams.

Location and Schedule

Onsite: Pensacola, FL

Work schedule: Monday through Friday, with flexible hours within core office hours of 7:00AM–6:00PM ET.

Key Responsibilities

Maintain IT and enterprise-class security applications and systems for Navy Federal Credit Union
Troubleshoot Linux and/or Windows server operating systems and the enterprise applications hosted on those servers
Deploy, optimize, and maintain enterprise security applications across on-prem, SaaS, and IaaS environments
Remediate vulnerabilities on Windows and/or Linux systems, ensuring stability through monitoring, maintenance, patching, and administration
Deploy and configure SaaS enterprise applications
Contribute to deployment of AI, agentic solutions, and ML/LLM-based solutions to address modern security threats
Contribute to and maintain internal engineering documentation such as tool documentation, lessons learned, procedures, and status updates
Renew and update TLS certificates on appliances and enterprise applications
Respond to audit and enterprise hardening requests
Update stories and subtasks work in flight
Update and present information during Daily Operations briefings
Monitor the daily ticket queue for incidents, ingestion, and assignment as required
Complete quarterly access reviews
Participate in on-call and after-hours rotation
Perform other duties as assigned

Required Qualifications

Bachelor’s Degree in Computer Science, Information Technology, Engineering, or related discipline, or an equivalent combination of education and experience
Extensive hands-on experience automating or scripting server configurations and deployments
Extensive hands-on experience patching and upgrading Linux and Windows operating systems, packages, and applications
Extensive hands-on experience in enterprise high-security systems engineering or a similar role, including understanding of enterprise security and hardening best practices with a focus on PCI-DSS and NCUA
Experience with AI, agentic solutions, and ML/LLM technologies in practice and/or deployment
Experience scripting in Ansible, Python, Bash, PowerShell, Ruby, or similar tools to automate routine tasks
Experience and thorough understanding of SSO/SAML/OAuth integration for enterprise applications
Strong ability to troubleshoot common Linux operating systems (such as Centos, Red Hat, Ubuntu) and/or Cisco derivative operating systems, or alternatively strong understanding of Windows server operating systems
Experience working in environments using infrastructure management processes such as change management, problem management, configuration management, and project management
Hands-on Agile experience specifically using a Kanban workflow
Experience using and integrating tools with SIEMs
Experience in large enterprise processes, including working in a siloed environment with strict ticketing, coordination, and detailed change management controls
Knowledge of core networking concepts including firewall, routing, switching, load balancing, and proxy principles, with troubleshooting from a server deployment and maintenance perspective

Technologies

Linux, Windows
TLS certificates
AI, Agentic solutions, ML/LLM’s
Ansible, Python, Bash, PowerShell, Ruby
SSO, SAML, OAUTH
Centos, Red hat, Ubuntu, Cisco derivative OS’s
SIEM’s
Agile, Kanban, Jira/Confluence
PCI-DSS, NCUA

Desired Qualifications

Experience with cybersecurity applications
Experience with Linux-based Java/Tomcat COTS web applications in a clustered environment
Experience with Windows .net-based IIS COTS applications in a clustered environment
Experience with physical or virtual appliances with limited Linux-based OS CLI interfaces
Ability to read and understand packet captures
Experience using Jira/Confluence

Work Authorization

Navy Federal Credit Union currently does not provide sponsorship for this role. Applicants must be authorized to work in the United States without the need for current or future sponsorship.

View full job page →

1mo ago

Sr Infrastructure & Security Engineer

VizyPay Waukee, IA

Waukee, IA

1mo ago Closed

$80k - $100k/yr Full time Azure DevOps CI/CD Cloud Infrastructure

This position is no longer accepting applications (closed Sep 15, 2026).

Job Description

Build, secure, and keep connected VizyPay’s cloud infrastructure, enterprise network, security posture, and operational reliability. In this onsite role in Waukee, IA, you will own the infrastructure foundation beneath VEXIS and support the business systems that keep payments operations protected and audit-ready.

Reporting directly to the CIO, this senior, hands-on individual-contributor position unifies cloud and platform engineering, networking, site reliability engineering, security engineering, and end-user support under one mandate. You will be a core contributor to the annual PCI DSS assessment and to the enterprise BCP/DR programs, including resilience planning and disaster-recovery exercises.

Responsibilities

Architect, build, and operate secure, scalable cloud infrastructure across Microsoft Azure, AWS, and DigitalOcean, including compute, virtual networking, storage, and managed data services supporting VEXIS and enterprise systems.
Make infrastructure-as-code (for example Terraform) and GitOps automation the default provisioning path, including policy-as-code and IaC security scanning; build CI/CD pipelines (for example GitHub Actions, Azure DevOps) with automated testing and controlled promotion.
Manage infrastructure cost and capacity through rightsizing, reserved-capacity strategy, usage monitoring, and performance optimization, with spend reported against approved budget and capacity ahead of business growth.
Provide technical leadership across InfraSec and partner with Software Engineering through engineering standards, architecture and design reviews, and mentorship while remaining a hands-on IC.
Administer and support the enterprise network, including firewalls, SD-WAN, switches, wireless access points, and network infrastructure lifecycle management.
Own network segmentation enforcement, TLS 1.2+ everywhere, and secure connectivity (site-to-site and remote-access VPN, DNS, load balancing, and WAF/CDN such as Cloudflare) aligned with least privilege.
Maintain network documentation, configuration baselines, and audit-ready change records; manage network capacity, performance, and availability.
Own and manage security platforms and services including IAM, endpoint security, MDM, password management, security monitoring, and Microsoft 365 security posture with email security controls (anti-phishing, DMARC, DKIM, SPF), including administration, policy integration, and continuous improvement.
Lead security monitoring and detection engineering across SIEM, EDR, and file integrity monitoring (FIM) platforms, including log-source onboarding, detection content, alert tuning, and response runbooks.
Operate vulnerability management (coverage, risk-based prioritization, remediation SLAs), patch management cadence, and asset/configuration inventory; own identity lifecycle management (joiner/mover/leaver), conditional-access administration, and privileged access management (PAM); enforce vault-based secrets management and MFA-inclusive authentication; lead threat modeling and security-by-design with Software Engineering and Product.
Define and operate SLOs, error budgets, and availability/performance monitoring; own the observability stack end to end (metrics, structured logging, distributed tracing, alert design) and drive automation-first operations to reduce toil.
Own incident response across infrastructure and security, including detection, escalation, mitigation, and blameless postmortems with tracked corrective actions; participate in on-call rotation and execute production changes under formal change management.
Serve as Tier 2/3 escalation for end-user support in partnership with the InfraSec Help Desk, covering endpoint engineering and lifecycle management and Microsoft 365 administration and troubleshooting, plus automation of support workflows with measured service quality.
Participate in annual PCI DSS assessment and audit processes, including evidence collection, remediation activities, control validation, coordination of external penetration testing, and year-round audit-ready evidence (standards, access reviews, segmentation validation, monitoring coverage, and recovery-test results).
Design and validate resilience aligned with RTO/RPO, backups, recovery, failover architecture, graceful degradation, and disaster-recovery exercises consistent with enterprise BCP/DR standards.
Contribute to security policy, standards, risk assessments, and employee security-awareness enablement with the CIO, aligning controls with PCI DSS and financial-industry obligations.

Requirements

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent).
7+ years of professional experience across infrastructure, cloud, network, security, or site reliability engineering, including 4+ years operating production infrastructure and security controls at scale with accountability for availability, cost, risk, and outcomes.
Ability to operate with a high degree of autonomy, owning infrastructure and security strategy, priorities, and execution while reporting directly to executive leadership.
Experience in security- or compliance-constrained environments (for example PCI DSS or financial services regulation), including direct participation in compliance assessments and audit evidence collection with delivery under formal SDLC and change management.
Demonstrated incident-response ownership across infrastructure and security, including on-call participation, incident command or mitigation leadership, and postmortem-driven improvement.
Ability to translate infrastructure, security, and reliability tradeoffs into clear recommendations for technical and executive stakeholders.
Production engineering experience on Microsoft Azure, AWS, or DigitalOcean, including compute, virtual networking, IAM, storage, and managed database services.
Infrastructure automation experience with Terraform (or equivalent), GitOps workflows, configuration management, and CI/CD engineering (for example GitHub Actions, Azure DevOps) with security scanning and progressive delivery; operational tooling in Python, PowerShell, and/or Bash with strong Git fluency.
Expertise in containers and orchestration (for example Docker and Kubernetes such as AKS, EKS, or DigitalOcean Kubernetes) or managed container services, plus serverless/edge compute (for example AWS Lambda, Cloudflare Workers).
Understanding of operating systems and directory services: Windows Server, Linux, and Active Directory/Microsoft Entra hybrid identity, plus Microsoft 365 administration.
Skilled in enterprise network infrastructure and troubleshooting (firewalls, SD-WAN, switching, wireless), with routing and switching fundamentals including VLANs, routing protocols, and QoS, plus VPN experience.
Knowledge in network and cloud security including segmentation, firewall policy management, DNS, TLS certificate management, WAF/CDN such as Cloudflare, encryption in transit and at rest, and CSPM.
Experience with security monitoring, detection, and vulnerability management using enterprise SIEM/log analytics, EDR, and FIM, including detection content development, alert tuning, and remediation workflows.
Knowledge of identity, endpoint, and end-user platforms, including least-privilege RBAC, MFA-inclusive authentication, identity lifecycle and PAM, directory and identity platforms (such as Microsoft Entra ID, AWS IAM), endpoint security, MDM, password management, and vault-based secrets management.
Reliability engineering skills including SLO/error-budget practice, observability tooling, database backup and recovery, replication, and point-in-time restore (for example PostgreSQL, SQL Server, MySQL).
Track record of technical leadership through mentoring, architecture or design reviews, or ownership of engineering standards.

Technologies

Microsoft Azure, AWS, DigitalOcean, Terraform, GitOps, policy-as-code, IaC security scanning, GitHub Actions, Azure DevOps, Microsoft 365, IAM, MDM, DMARC, DKIM, SPF, SIEM, EDR, file integrity monitoring (FIM), Prometheus, Grafana, CloudWatch, Azure Monitor, SLOs, PCI DSS, RTO/RPO, TLS 1.2+, SD-WAN, Cloudflare, VPN, DNS, WAF, SIEM/log analytics, privileged access management (PAM), vault-based secrets management, MFA-inclusive authentication, Active Directory, Microsoft Entra, Microsoft Entra ID, AWS IAM, Docker, Kubernetes, AKS, EKS, AWS Lambda, Cloudflare Workers, Windows Server, Linux, VLANs, QoS, CSPM, RBAC, Python, PowerShell, Bash, Git, CI/CD, distributed tracing, structured logging, PostgreSQL, SQL Server, MySQL

Benefits

401(k)
401(k) matching
Dental insurance
Flexible spending account
Health insurance
Health savings account
Paid time off
Retirement plan
Vision insurance

Compensation: USD 80,000 - 100,000 per year.

View full job page →

Pci Dss Engineer Jobs

Principal Information Security Engineer

Security Engineer (Linux Systems Engineer)

Sr Infrastructure & Security Engineer

Get Pci Dss Engineer Jobs alerts