Sr Prin Security Engineer

Consumers Energy•Jackson, MI

1d•Hybrid

About The Position

Consumers Energy is seeking a senior security engineering professional to support its most critical security initiatives as both a technical expert and strategic leader. The role architects, implements, and operates secure systems; designs scalable defenses; and leads responses to threats and risks. It calls for expert proficiency in one or more security domains, including infrastructure security, network security, identity and access management, stakeholder engagement, and incident response. The position also mentors team members and helps shape the organization’s cybersecurity strategy. This is a hybrid position with required onsite work Monday, Tuesday, and Thursday at One Energy Plaza in Jackson, Michigan. The selected candidate must be within commuting distance or willing to relocate; relocation assistance is available to those who qualify. The position is not eligible for current or future immigration sponsorship, including H-1B, TN, CPT, OPT, or STEM OPT participation. Consumers Energy describes its workplace as inclusive and supportive of career development, growth, and stability. The company’s purpose is world-class performance delivering hometown service.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field and at least 10 years of hands-on experience in IT, cybersecurity, computer networking, or systems engineering; alternatively, an associate degree in one of these fields and at least 12 years of the outlined experience; or a high school diploma or GED and at least 14 years of the outlined experience.
Candidates must also have 4–7 years of practical experience with technologies such as AAA services, Active Directory, application control, asset discovery and inventory management, Azure AD, CI/CD platforms, DDoS protection, DLP, DAST, email security, EDR, firewalls, IaC security, logging and monitoring, MFA, NAC, networking protocols, scripting languages, SCA, secure development practices, security assessment and testing, security configuration assessment, SOAR, SSO, SAST, threat intelligence, vulnerability management, VPNs, and web proxy technologies.
Excellent written and verbal communication skills, including the ability to influence technical and non-technical stakeholders.
Strong leadership and mentoring capabilities focused on team development and organizational success.
Ability to work collaboratively and demonstrate professional standards described as humble, hungry, and people-smart.
Expert-level knowledge of security architectures, technologies, and defensive strategies.
Subject matter expertise in at least two listed security domains: Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, or Vulnerability Management.
Advanced troubleshooting and analytical skills for navigating complex systems and resolving critical issues.
Strong strategic thinking and decision-making, particularly in high-pressure and rapidly evolving environments.
Must be within commuting distance of the Jackson, Michigan worksite or willing to relocate.
Must not require current or future immigration sponsorship for a work visa; CPT, OPT, and STEM OPT candidates are not eligible.

Responsibilities

Architect, implement, operate, and maintain security solutions for systems, networks, and applications to protect them against emerging threats.
Lead and participate in complex incident response and problem-solving, coordinating root-cause analysis, impact mitigation, and long-term corrective actions.
Develop and improve security controls by implementing technologies and process improvements aligned with business objectives and security requirements.
Evaluate and deploy security tools and platforms in one or more domains: Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, and Vulnerability Management.
Provide leadership, guidance, and mentorship to cybersecurity professionals, including Associate Engineers and Career Engineers.
Conduct threat modeling and risk assessments, recommend mitigation strategies, and design security controls.
Collaborate with Development, Information Technology, and business stakeholders to embed security best practices throughout the system lifecycle.
Monitor emerging threats, vulnerabilities, and technologies and provide strategic recommendations to strengthen security.
Automate security processes using scripting languages and SOAR platforms to improve incident-response and vulnerability-management efficiency and consistency.
Lead the design, implementation, and continuous improvement of enterprise IAM capabilities, including authentication, authorization, provisioning, and identity lifecycle management.
Serve as an IAM subject matter expert on platforms, governance processes, access controls, and identity security best practices.
Lead complex IAM initiatives, including integrations, platform enhancements, automation, and identity governance improvements.
Perform other non-essential duties as assigned or as business needs require.