Join the diverse and dynamic team that powers Michigan's largest energy provider and one of the nation's largest gas and electric combination utilities. Consumers Energy services 6.8 million of Michigan's 10 million residents - caring for our friends and neighbors in all 68 Lower Peninsula counties. We embrace a cleaner and leaner utility vision focused on eliminating energy waste and adding renewable energy from sources such as wind and solar.

Location:
The successful candidate will be expected to work in a hybrid status of reporting to One Energy Plaza in Jackson, Michigan every Monday, Tuesday, and Thursday with home office flexibility on Wednesday and Friday.

We are looking for: Senior Security Engineer (Network Engineering)

The Senior Security Engineer is responsible for planning and building effective computing solutions to increase the security posture of Consumers Energy cyber systems by direct and indirect interaction with business partners and implementation of projects. Furthermore, the Security Engineer will consult on the design, development, integration, and analysis of platforms, while working with systems, hardware, software, and variety of technical and non-technical teams to meet the business objectives in a secure manner. Contributes to moderately complex aspects of a project.

• Experience in a security or IT role required
• Understanding of Industrial control systems and/or at least one critical infrastructure standard; or an understanding of security requirements and standards.
• Knowledge of security engineering, operations, and design best practices.
• Knowledge of Information Technology (IT), Operational Technology (OT) or Network systems and designs
• Knowledge of Security Infrastructure designs and best practices
• Excellent communication skills both written and verbal
• Translate security and business requirements to business personnel

We encourage you to apply if you have:

• Associate degree in cyber security, computer science, information technology, or related field with four (4) or more years of applicable experience

• [OR] High School Diploma with eight (8) or more years of applicable experience

• Experience in cyber security, computer networks and/or system engineering.
• Experience working with the following technologies; Firewalls, Proxy's, Network Architecture Design, Privileged Account Management, Endpoint Security Platforms, Cloud Technology AWS/Azure. Experience developing standard work to efficiently and effectively manage technology resources.
• Cisco, Juniper Firewall routing and switching experience required.

Preferred skills:

• Bachelors Degree
• Security certifications (GSEC, GCED, CISSP, CISM, CISA, Security+, etc)
  

In this role, you will:

• Leads business and IT projects to ensure designs are meeting the applicable security standards. Works with Business partners and provides the Interpretation of the security standards. Develop various requirements questionnaires for business partners to ensure programs/applications are properly secured (Encryption, Authentication, etc.). Approve and/or revise recommendations from lower level engineers and team members and, at times, propose mitigations to minimize risk to the Organization if standards can't be met.
• Develops, Selects and Executes the appropriate standard practices, procedures, and workflow for team activities, such as daily operating reviews, technical Implementations, standards development, Lean activities to ensure any gaps noted in processes are shared with the team for remediation. This role is responsible for recommending remediations for process improvements to the Principal Engineer.
• Execute on assigned projects/enhancements by evaluating and developing secure solutions based on already created & approved security standards and architectures. Also responsible for analyzing business impact and exposure based on emerging threats, vulnerabilities and risk. Recommendation shall be brought forward to Principal Engineers and Management.
• Provide consultative support for Security Operations on any Tier 3 support issues OR Functions as the Security SME to regulatory reviews and audits, including NERC CIP, FERC Hydropower, and TSA Pipeline. Using a knowledge of compliance requirements and guidelines, the Security SME assists other stakeholders to design and deploy compliant solutions. They may also provide evidence to prove a solution is compliant.
• Researches, designs, and advocates new security technologies and architectures while consulting with the Principal Engineer.
• Build a strong relationship with internal and external teams by discussing emergent/new technology roll outs, participating in technical review meetings that include cross-functional teams both highly technical and non-technical personnel.
• Other non-essential duties as assigned or may be necessary.