Prin Security Engineer (Identity Platforms)

Consumers Energy is Michigan’s largest energy provider, providing natural gas and/or electricity to 6.8 million of the state’s 10 million residents in all 68 Lower Peninsula counties. Consumers Energy knows job number one is to keep the lights on for customers. We are committed to delivering reliable, clean, and affordable energy to our customers 24/7.  

 

Location: This is a hybrid (virtual/onsite) position with required onsite days on Monday, Tuesday and Thursday assigned to One Energy Plaza located in Jackson, MI. The selected candidate must be within a commutable distance or willing to relocate (relocation package is available for those that qualify).

General Summary of Job Responsibilities

The Principal Security Engineer plays a critical role in supporting the organization’s key security initiatives by serving as both a technical expert and strategic leader. This position is responsible for architecting, implementing, and operating secure systems, designing scalable defenses, and leading incident response efforts to mitigate threats and risks. The ideal candidate will demonstrate deep expertise in one or more security domains—including infrastructure, network, identity, business partner communications, and incident response—while mentoring teams and helping shape the future of the organization’s security strategy.

Essential Duties and Responsibilities

• Conduct threat modeling and risk assessments to identify vulnerabilities, recommend mitigations, and design effective controls
• Lead and participate in complex incident response and problem-solving efforts, coordinating across teams to analyze root causes, mitigate impacts, and implement long-term solutions
• Develop and optimize security controls by implementing technologies and process improvements that align with business objectives and security requirements
• Architect, implement, operate, and maintain comprehensive security solutions for systems, networks, and applications, ensuring resilience against emerging threats
• Evaluate and deploy security tools and platforms in one or more of the following domains: Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, Vulnerability Management—to enhance visibility, detection, and response capabilities
• Mentor and lead other security team members, including associate and career-level engineers
• Collaborate with cross-functional teams—including development, IT, and business units—to embed security best practices throughout the system lifecycle
• Stay current with emerging threats, vulnerabilities, and technologies, and provide strategic recommendations to strengthen the organization’s security posture
• Automate security processes using scripting and SOAR platforms to improve efficiency and consistency in incident response and vulnerability management
• Perform other duties as assigned or required

Knowledge/Skills/Abilities

• Excellent written and verbal communication skills, with the ability to influence both technical and non-technical stakeholders
• Strong leadership and mentoring capabilities, with a focus on team development
• Demonstrates strong collaboration skills and embodies the values of humility, drive, and emotional intelligence
• Expert-level knowledge of security architectures and defensive strategies
• Subject matter expertise in at least one of the following domains: Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, Vulnerability Management
• Advanced troubleshooting skills with the ability to navigate complex systems and resolve critical issues efficiently
• Strategic thinking and sound decision-making abilities, especially in high-pressure scenarios

Education/Experience

• Bachelor's degree in Cyber Security, Computer Science, or Information Technology with 7+ years of hands-on experience in information technology, cybersecurity, computer networks, or systems engineering  
  • [OR] Associate's degree in Cyber Security, Computer Science, or Information Technology with 9+ years of hands-on experience in Information Technology, cybersecurity, computer networks, or systems engineering
  • [OR] High school diploma or GED with 11+ years of hands-on experience in Information Technology, cybersecurity, computer networks, or systems engineering

•  

• Minimum of 7+ years of practical experience with technologies such as:

  • AAA Services, Active Directory, Application Control
  • Asset Discovery and Inventory Management
  • Azure AD, CI/CD Platforms, DDoS Protection
  • Data Loss Prevention (DLP), Dy