Sr Prin Security Engineer

Join Consumers Energy to support critical security initiatives as a senior technical and strategic leader.

Responsibilities

• Architect, implement, operate, and maintain comprehensive security solutions for systems, networks, and applications, improving resilience against emerging threats.
• Lead and participate in complex incident response and problem-solving efforts; coordinate across teams to analyze root causes, mitigate impacts, and drive long-term corrective actions.
• Develop and optimize security controls by implementing technologies and process improvements aligned to business objectives and security requirements.
• Evaluate and deploy security tools and platforms across one or more domains: Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, Vulnerability Management to strengthen visibility, detection, and response.
• Provide leadership, guidance, and mentorship to other cybersecurity professionals, including Associate Engineers and Career Engineers.
• Conduct threat modeling and risk assessments to identify vulnerabilities, recommend mitigation approaches, and design effective security controls.
• Collaborate with cross-functional teams (Development, Information Technology, and business stakeholders) to embed security best practices across the system lifecycle.
• Stay current on emerging threats, vulnerabilities, and technologies and provide strategic recommendations to strengthen the organization’s security posture.
• Automate security processes using scripting languages and SOAR platforms to improve efficiency and consistency in incident response and vulnerability management.
• Lead design, implementation, and continuous improvement of enterprise Identity and Access Management (IAM) capabilities, including authentication, authorization, provisioning, and identity lifecycle management.
• Act as a subject matter expert for IAM platforms, governance processes, access controls, and identity security best practices.
• Lead complex IAM initiatives including system integrations, platform enhancements, automation efforts, and identity governance improvements.
• Perform other non-essential duties as assigned based on business needs.

Requirements

• Excellent written and verbal communication skills; ability to influence technical and non-technical stakeholders.
• Strong leadership and mentoring capabilities focused on team development and organizational success.
• Demonstrated collaboration skills and professional standards described as humble, hungry, and people-smart.
• Expert-level knowledge of security architectures, technologies, and defensive strategies.
• Subject matter expertise in at least two domains: Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, Vulnerability Management.
• Advanced troubleshooting and analytical abilities to navigate complex systems and resolve critical issues efficiently.
• Strong strategic thinking and decision-making, particularly in high-pressure, fast-changing environments.
• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field, plus 10+ years hands-on experience in IT, cybersecurity, computer networking, or systems engineering.
• Practical experience (4–7 years) with technologies including: AAA Services, Active Directory, Application Control, Asset Discovery and Inventory Management, Azure Active Directory (Azure AD), CI/CD platforms, DDoS protection, Data Loss Prevention (DLP), Dynamic Application Security Testing (DAST), Email Security, Endpoint Detection and Response (EDR), Firewalls, Infrastructure-as-Code (IaC) Security, Logging and Monitoring Solutions, and Multi-Factor Authentication (MFA).
• OR Associate degree in the related fields with 12+ years of experience as outlined above.
• OR High school diploma or GED with 14+ years of experience as outlined above.

Technologies

• AAA Services
• Active Directory
• Application Control
• Asset Discovery and Inventory Management
• Azure Active Directory (Azure AD)
• CI/CD platforms
• DDoS protection
• Data Loss Prevention (DLP)
• Dynamic Application Security Testing (DAST)
• Email Security
• Endpoint Detection and Response (EDR)
• Firewalls
• Infrastructure-as-Code (IaC) Security
• Logging and Monitoring Solutions
• Multi-Factor Authentication (MFA) Technologies
• Network Access Control (NAC)
• Networking Protocols
• Scripting Languages
• Security Orchestration, Automation, and Response (SOAR) platforms
• Software Composition Analysis (SCA)
• Secure Development Practices
• Security Assessment and Testing
• Security Configuration Assessment
• Single Sign-On (SSO)
• Static Application Security Testing (SAST)
• Threat Intelligence
• Vulnerability Management
• Virtual Private Networks (VPNs)
• Web Proxy technologies

Benefits

• Competitive compensation packages
• Medical, Dental and Vision
• 401k with company match
• Paid parental leave
• Up to 13 paid Holidays
• Paid time off
• Educational Assistance Program

Location

• Hybrid (virtual/onsite) role with required onsite days on Monday, Tuesday, and Thursday at One Energy Plaza in Jackson, MI.
• Candidate must be within commuting distance or willing to relocate (relocation package available for those that qualify).

Immigration Sponsorship

• This position is not eligible for immigration sponsorship (e.g., H-1B, TN, etc.).
• Do not apply if you will need immigration sponsorship for a work visa now or in the future, including H-1B or TN.
• Unable to hire individuals with CPT, OPT, or STEM OPT for this position, as it is not eligible for H-1B lottery participation and is not eligible for current or future immigration sponsorship.

Diversity, Equity & Inclusion

• CMS Energy values Diversity, Equity, and Inclusion and treats employees with respect and fairness.
• Employee Resource Groups include Women in Energy (WE), Minority Advisory Panel (MAP), Pride Alliance of Consumers Energy (PACE), GENERGY (Different Generations), capable (Different Abilities), Interfaith, People Planet Partners, and Veterans Advisory Panel (VAP).
• Company culture values: Caring, Empowered, Deliberate, Agility, Ownership.

Job Segment

• Computer Science, Developer, Testing, Equity, Systems Engineer, Technology, Finance, Engineering