Senior Security Engineer - Identity

Xcel Energy•Canton, MI

About The Position

Are you looking for an exciting job where you can put your skills and talents to work at a company you can feel proud to be a part of? Do you want a workplace that will challenge you and offer you opportunities to learn and grow? A position at Xcel Energy could be just what you’re looking for. Position Summary The Senior Security Engineer is responsible for creation, coordination, implementation and execution of cyber security solutions and providing security governance and oversight in support of Xcel Energy's strategy and consistent with the IT Security & Risk Management Program Strategy. This position works closely with key business partners, internal technology teams and external vendors to detect future trends and ongoing activity, and to provide oversight and governance to projects and changes within the environment to ensure consistent implementation and effectiveness of security technology and controls. Provide security solutions and governance that protects and effectively mitigates threats to the environment. Participate in and contribute to other areas within the department as needed, and develop, maintain & implement processes for security for all platforms and ensures compliance with requirements from agencies such as FERC, NERC, and Department of Homeland Security (such as CIP, HIPAA, SOX, PCI).

Requirements

Bachelor's degree with a concentration in computer science, technology, accounting or business or equivalent combination of education and experience.
Minimum of 8 years' experience in IT including 5 years direct experience in IT engineering and cyber security.
Demonstrated verbal/written communication and presentation skills.
Demonstrated leadership skills.
Proven problem solving and business risk analysis skills.
Ability to excel in a team environment.
Strong investigative, conflict resolution and negotiation skills.
Must possess a broad knowledge relating to IT infrastructures and have in-depth and up-to-date experience with multiple operating systems and desk side integration.

Nice To Haves

Subject matter expertise with technologies supporting Privileged Access Management, Identity Governance, Public Key Infrastructure, Multi-Factor Authentication, Access Certification and Role/Policy based access control systems.
Work closely with cross-functional teams—such as security, compliance, and application groups—to facilitate smooth integration and ensure solutions are aligned with organizational objectives.
Experience in security protocols and products: Understanding of Active Directory, Azure/Entra, Kerberos, LDAP, SAML, OAuth, and OIDC.
Experience integrating identity governance platforms with systems such as ServiceNow, Workday, Oracle, and cloud platforms, including AWS and Azure.
Ability to partner with other technology teams such as data center, incident management, change control, and infrastructure teams to accomplish IAM upgrades and perform capital project work.
Fluency and specialization with at least one modern language such as Java, Go, or Python.
Leadership and coordination ability to pull teams together towards shared objectives.
Ability to manage professional services/consulting resources on specific tasks to completion.
Build resilient and scalable architecture, driving innovation and cost efficiency.

Responsibilities

Engineer and implement security solutions in support of the overall security objectives of Xcel Energy and in alignment with the IT Security & Risk Management Strategic Plan.
Provide technical leadership, governance and oversight for the design of information technology systems, projects and changes within the XE environment with a core focus on security to ensure systems reliability, accessibility and compliance.
Drive and educate on the Security architecture discipline, processes, concepts and best practices. Works with others to ensure that proper security disciplines are understood and applied.
Performs the role of internal consultant to help utilize Xcel Energy's security capabilities. Acts as a resource to educate customers and associates on strategic security choices in available technologies.
Performs technical security research, analysis and evaluation of new technology tools and provides strategic direction. Maintains current on relevant technology trends. Partners with the Enterprise Architecture group regarding future technology and business needs.
Develop and maintain a working relationship with 3rd Party service providers responsible for providing technology consulting. Work with business unit executives and service providers to introduce required Cyber Security functionalities into the environment.