Sr Prin Security Engineer

Consumers Energy•Jackson, MI

4d•Hybrid

About The Position

The Senior Principal Security Engineer supports the organization’s most critical security initiatives as a technical expert and strategic leader. The role architects, implements, and operates secure systems; designs scalable security defenses; and leads response efforts to mitigate threats and risks. The ideal candidate has expert-level proficiency in one or more security domains, including infrastructure security, network security, identity and access management, business stakeholder engagement, and incident response. The position also mentors cybersecurity professionals and helps shape the organization’s cybersecurity strategy. The role leads the design, implementation, and continuous improvement of enterprise Identity and Access Management (IAM) capabilities, including authentication, authorization, provisioning, and identity lifecycle management. It serves as a subject matter expert on IAM platforms, governance processes, access controls, and identity security best practices, and leads complex IAM initiatives such as integrations, platform enhancements, automation, and identity governance improvements. This is a hybrid position with required onsite work on Monday, Tuesday, and Thursday at One Energy Plaza in Jackson, Michigan. The selected candidate must live within commuting distance or be willing to relocate; a relocation package is available to those who qualify. The role is not eligible for immigration sponsorship, including for H-1B or TN visas, and is not open to candidates working under CPT, OPT, or STEM OPT.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field and at least 10 years of hands-on experience in IT, cybersecurity, computer networking, or systems engineering; or an associate degree in a related field and at least 12 years of experience; or a high school diploma or GED and at least 14 years of experience.
Four to seven years of practical experience with relevant technologies, including AAA Services, Active Directory, Application Control, asset discovery and inventory management, Azure AD, CI/CD platforms, DDoS protection, DLP, DAST, email security, EDR, firewalls, IaC security, logging and monitoring solutions, MFA, NAC, networking protocols, scripting languages, SCA, secure development practices, security assessment and testing, security configuration assessment, SOAR, SSO, SAST, threat intelligence, vulnerability management, VPNs, and web proxy technologies.
Expert-level knowledge of security architectures, technologies, and defensive strategies.
Subject matter expertise in at least two of the following domains: Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, and Vulnerability Management.
Excellent written and verbal communication skills and ability to influence technical and non-technical stakeholders.
Strong leadership and mentoring capabilities, with a focus on team development and organizational success.
Ability to work collaboratively and embody professional standards described as humble, hungry, and people-smart.
Advanced troubleshooting and analytical skills, including the ability to navigate complex systems and resolve critical issues efficiently.
Strong strategic thinking and decision-making, particularly in high-pressure and rapidly evolving environments.
Must not require current or future immigration sponsorship for a work visa; candidates with CPT, OPT, or STEM OPT are not eligible.
Must be within commuting distance of the Jackson, Michigan worksite or willing to relocate.

Responsibilities

Architect, implement, operate, and maintain security solutions for systems, networks, and applications to protect against emerging threats.
Lead and participate in complex incident response and problem-solving, coordinating teams to identify root causes, mitigate impacts, and implement long-term corrective actions.
Develop and optimize security controls through technology implementations and process improvements that align business objectives with security requirements.
Evaluate and deploy security tools and platforms in one or more domains: Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, and Vulnerability Management.
Provide leadership, guidance, and mentorship to cybersecurity professionals, including Associate Engineers and Career Engineers.
Conduct threat modeling and risk assessments, identify vulnerabilities, recommend mitigations, and design security controls.
Collaborate with Development, Information Technology, and business stakeholders to embed security best practices throughout the system lifecycle.
Monitor emerging threats, vulnerabilities, and technologies, and provide strategic recommendations to strengthen security posture.
Automate security processes using scripting languages and SOAR platforms to improve incident response and vulnerability management.
Lead the design, implementation, and continuous improvement of enterprise IAM capabilities, including authentication, authorization, provisioning, and identity lifecycle management.
Serve as a subject matter expert for IAM platforms, governance processes, access controls, and identity security best practices.
Lead complex IAM initiatives, including system integrations, platform enhancements, automation, and identity governance improvements.
Perform other non-essential duties as assigned or as business needs require.