Prin Security Engineer (Identity Platforms)

Consumers Energy is Michigan’s largest energy provider, providing natural gas and/or electricity to 6.8 million of the state’s 10 million residents in all 68 Lower Peninsula counties. Consumers Energy knows job number one is to keep the lights on for customers. We are committed to delivering reliable, clean, and affordable energy to our customers 24/7. 

Location : This is a hybrid (virtual/onsite) position with required onsite days on Monday, Tuesday and Thursday assigned to One Energy Plaza located in Jackson, MI. The selected candidate must be within a commutable distance or willing to relocate (relocation package is available for those that qualify).

General Summary of Job Responsibilities

The Principal Security Engineer plays a critical role in supporting the organization’s key security initiatives by serving as both a technical expert and strategic leader. This position is responsible for architecting, implementing, and operating secure systems, designing scalable defenses, and leading incident response efforts to mitigate threats and risks. The ideal candidate will demonstrate deep expertise in one or more security domains—including infrastructure, network, identity, business partner communications, and incident response—while mentoring teams and helping shape the future of the organization’s security strategy.

Essential Duties and Responsibilities

• Conduct threat modeling and risk assessments to identify vulnerabilities, recommend mitigations, and design effective controls
• Lead and participate in complex incident response and problem-solving efforts, coordinating across teams to analyze root causes, mitigate impacts, and implement long-term solutions
• Develop and optimize security controls by implementing technologies and process improvements that align with business objectives and security requirements
• Architect, implement, operate, and maintain comprehensive security solutions for systems, networks, and applications, ensuring resilience against emerging threats
• Evaluate and deploy security tools and platforms in one or more of the following domains: Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, Vulnerability Management—to enhance visibility, detection, and response capabilities
• Mentor and lead other security team members, including associate and career-level engineers
• Collaborate with cross-functional teams—including development, IT, and business units—to embed security best practices throughout the system lifecycle
• Stay current with emerging threats, vulnerabilities, and technologies, and provide strategic recommendations to strengthen the organization’s security posture
• Automate security processes using scripting and SOAR platforms to improve efficiency and consistency in incident response and vulnerability management
• Perform other duties as assigned or required

Knowledge/Skills/Abilities

• Excellent written and verbal communication skills, with the ability to influence both technical and non-technical stakeholders
• Strong leadership and mentoring capabilities, with a focus on team development
• Demonstrates strong collaboration skills and embodies the values of humility, drive, and emotional intelligence
• Expert-level knowledge of security architectures and defensive strategies
• Subject matter expertise in at least one of the following domains: Identity Services, Automation, Network Security Services, Security Engineering, Application Security and Penetration Testing, Vulnerability Management
• Advanced troubleshooting skills with the ability to navigate complex systems and resolve critical issues efficiently
• Strategic thinking and sound decision-making abilities, especially in high-pressure scenarios

Education/Experience

• Bachelor's degree in Cyber Security, Computer Science, or Information Technology with 7+ years of hands-on experience in information technology, cybersecurity, computer networks, or systems engineering
  • [OR] Associate's degree in Cyber Security, Computer Science, or Information Technology with 9+ years of hands-on experience in Information Technology, cybersecurity, computer networks, or systems engineering
  • [OR] High school diploma or GED with 11+ years of hands-on experience in Information Technology, cybersecurity, computer networks, or systems engineering

• Minimum of 7+ years of practical experience with technologies such as:

  • AAA Services, Active Directory, Application Control
  • Asset Discovery and Inventory Management
  • Azure AD, CI/CD Platforms, DDoS Protection
  • Data Loss Prevention (DLP), Dynamic Application Security Testing (DAST)
  • Email Security, Endpoint Detection and Response (EDR), Firewalls
  • Infrastructure as Code (IaC) Security, Logging, Multifactor Authentication
  • Network Access Control (NAC), Networking Protocols
  • Scripting Languages, Secure Code Analysis (SCA), Secure Development Practices
  • Security Assessment & Testing, Security Configuration Assessment (SCA)
  • SOAR Tools, Single Sign-On (SSO), Static Application Security Testing (SAST)
  • Threat Intelligence, Vulnerability Management, VPN, Web Proxy

Why should you join our team?

At Consumers Energy, we offer more than just a place to work. We foster a culture that supports career development, growth, and stability, and we take pride in offering our co-workers excellent benefits and compensation packages. We are deliberately creating an inclusive culture that makes our diverse team of co-workers feel valued, supported, and empowered every day. We're a company made up of thousands of people, all with different stories to share and work to do, but we stand united in our company purpose: world class performance delivering hometown service.

What we offer:

• Competitive compensation packages
• Medical, Dental and Vision
• 401k with company match
• Paid parental leave
• Up to 13 paid Holidays
• Paid time off
• Educational Assistance Program

Diversity, Equity & Inclusion:

We, at CMS Energy, value Diversity, Equity, & Inclusion. It is part of our DNA. We treat our employees with respect, we treat each other fairly and we value the opinions of others. We are passionate about building and nurturing an environment where everyone feels included. We don’t discriminate. We seek to learn about each other and better understand our unique differences. Our uniqueness makes us authentic. We create safe spaces where everyone can be who they truly are. We invite difficult conversations and uncomfortable topics. We value diverse perspectives; this is what makes us great together. We harbor an inclusive environment where employees feel empowered to share their backgrounds, experiences, and ideas. Our Employee Resource Groups, Women in Energy (WE), Minority Advisory Panel (MAP), Pride Alliance of Consumers Energy (PACE), GENERGY, capABLE, Interfaith and Veterans Advisory Panel (VAP) are key enablers to living the values of our company culture: Caring, Empowered, Deliberate, Agility, and Ownership.

All qualified applicants will not be discriminated against and will receive consideration for employment without regard to protected veteran status, disability, race, color, religion, sex, age, sexual orientation, gender identity or national origin.