Sr Prin Security Engineer

Consumers Energy is Michigan’s largest energy provider, providing natural gas and/or electricity to 6.8 million of the state’s 10 million residents in all 68 Lower Peninsula counties. Consumers Energy knows job number one is to keep the lights on for customers. We are committed to delivering reliable, clean, and affordable energy to our customers 24/7.

This position is not eligible for immigration sponsorship, e.g., H-1B, TN, etc. Please do not apply if you will need immigration sponsorship for a work visa now or in the future, including sponsorship for H-1B, TN, etc., now or in the future. We are unable to hire individuals with CPT, OPT, or STEM OPT for this position as the position is not eligible for participation in the H-1B lottery program and is not eligible for current or future immigration sponsorship for a work visa.

Location: This is a hybrid (virtual/onsite) position with required onsite days on Monday, Tuesday and Thursday assigned to One Energy Plaza located in Jackson, MI. The selected candidate must be within a commutable distance or willing to relocate (relocation package is available for those that qualify).

The Senior Principal Security Engineer will support the organization’s most critical security initiatives, serving as both a technical expert and strategic leader. This role is responsible for architecting, implementing, and operating secure systems; designing scalable security defenses; and leading response efforts to mitigate threats and risks. The ideal candidate will demonstrate expert-level proficiency across one or more security domains, including infrastructure security, network security, identity and access management, business stakeholder engagement, and incident response.

Additionally, this individual will mentor team members and help shape the future direction of the organization’s cybersecurity strategy.

• Architect, implement, operate, and maintain comprehensive security solutions for systems, networks, and applications, ensuring resilience against emerging threats.
• Lead and participate in complex incident response and problem-solving efforts, coordinating across teams to analyze root causes, mitigate impacts, and implement long-term corrective actions.
• Develop and optimize security controls through the implementation of technologies and process improvements that align business objectives with security requirements.
• Perform other non-essential duties as assigned or as business needs require.
• Evaluate and deploy security tools and platforms within one or more of the following security domains:
  Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, and Vulnerability Management, to improve visibility, detection, and response capabilities across the organization.
• Provide leadership, guidance, and mentorship to other cybersecurity professionals, including Associate Engineers and Career Engineers.
• Conduct threat modeling and risk assessments to identify vulnerabilities, recommend mitigation strategies, and design effective security controls.
• Collaborate with cross-functional teams, including Development, Information Technology, and business stakeholders, to embed security best practices throughout the system lifecycle.
• Stay informed of emerging threats, vulnerabilities, and technologies, providing strategic recommendations to strengthen the organization’s security posture.
• Automate security processes where appropriate by leveraging scripting languages and Security Orchestration, Automation, and Response (SOAR) platforms to improve efficiency and consistency in incident response and vulnerability management.
• Lead the design, implementation, and continuous improvement of enterprise Identity and Access Management (IAM) capabilities, including authentication, authorization, provisioning, and identity lifecycle management.
• Serve as a subject matter expert for IAM platforms, governance processes, access controls, and identity security best practices.
• Lead complex IAM initiatives, including system integrations, platform enhancements,…