Associate Director Software Engineering

Trimont-Services-India-Pvt-Ltd; Hyderabad; On-site; INR 2,000,000 - 3,600,000; Full time

Job summary

Trimont is seeking an experienced Azure Cloud Administrator to manage and secure our Microsoft Azure environment. You will own identity, access management, networking, and hosting across the complete stack, enabling scalable growth from our Hyderabad office.

The role requires hands-on skills with Azure AD/Entra ID, RBAC, Conditional Access, VNets, and App Services, plus scripting with Azure CLI/PowerShell and IaC using ARM/Bicep.

Qualifications

• 6+ years of hands-on Azure cloud administration and infra management.
• Strong Windows and Linux experience as Azure hosts.
• Deep knowledge of Azure AD/Entra ID including RBAC, PIM, Conditional Access.
• Experience with Azure networking: VNets, NSGs, VPN, ExpressRoute, DNS, Firewall.
• Experience with App Service, AKS, and Functions on Azure.

Responsibilities

• Administer Azure Active Directory (Entra ID) including users, groups, and app registrations.
• Enforce RBAC across subscriptions and resources with Conditional Access and MFA.
• Manage Azure AD B2B and B2C access and conduct access reviews.
• Design, deploy, and manage VNets, NSGs, VPN Gateways, ExpressRoute, DNS.
• Monitor with Azure Monitor, Application Insights; configure alerts and dashboards.
• Maintain cost governance and tagging, and ensure compliance with policies.

Skills

Azure cloud administration

Windows & Linux

Entra ID RBAC PIM CA

Azure networking

App Service / AKS / Functions

CLI/PowerShell/ARM/Bicep

CI/CD with Azure DevOps

Observability with Monitor/Log Analyt

Cloud security principles

Education

Bachelor's degree in Computer Science/IT or equivalent

Tools

Azure CLI

PowerShell

ARM/Bicep

Azure DevOps

GitHub Actions

Azure Monitor

Log Analytics

Application Insights

Job description

Founded in 1988 and headquartered in Atlanta, Georgia Trimont (www.trimont.com ) is a specialized global commercial real estate loan services provider and partner for lenders seeking the infrastructure and capabilities needed to make informed, effective decisions related to the deployment, management and administration of commercial real estate secured credit.

We do this with a team of 1100+ extraordinary Team Members who serve a global client base from offices in Atlanta, Bengaluru, Charlotte, Dallas, Hyderabad, Kansas City, London, New York and Sydney. We empower our skilled global teams by equipping them with the necessary knowledge and advanced technology, as well as fostering a culture driven by values. This approach helps our teams excel and build meaningful client relationships, while providing the highest quality service and feeling proud of the work they do.

Trimont is an innovative firm where visionary professionals come to learn, grow, and thrive with colleagues driven by curiosity and collaboration.

Learn: We believe ongoing learning is critical and are focused on providing a work environment where all team members can take ownership of their careers.

Grow: We work alongside the largest institutional lenders in the world, overseeing the most significant projects in the industry. This unique opportunity allows us to broaden our skillset and develop our abilities by tackling some of the industry's most challenging and exciting endeavors.

Thrive: Our firm is a place where ethics and excellence meet to create an experience that matches our capabilities. There are no limits to what we as team members as an organization, can achieve together.

Job Summary

We are seeking an experienced Azure Cloud Administrator to manage, secure, and optimize our Microsoft Azure environment. You will be the go-to expert for Azure identity and access management, virtual networking, and application hosting across the complete Microsoft stack. This role is pivotal in ensuring our cloud infrastructure is resilient, compliant, and aligned with business growth.

Key Responsibilities

Identity & Access Management

• Administer Azure Active Directory (Entra ID) including users, groups, service principals, and managed identities
• Configure and manage Role-Based Access Control (RBAC) across subscriptions, resource groups, and individual resources
• Implement and enforce Conditional Access policies, MFA, and Privileged Identity Management (PIM)
• Manage Azure AD B2B and B2C integrations for partner and customer access scenarios
• Conduct regular access reviews and enforce least-privilege principles across the organization
• Manage App Registrations and enterprise application permissions including OAuth scopes and API access grants

Networking & Connectivity

• Design, deploy, and manage Azure Virtual Networks (VNets), subnets, Network Security Groups (NSGs), and route tables
• Configure and maintain Azure VPN Gateways, ExpressRoute circuits, and Private Endpoints
• Manage Azure DNS zones (both public and private), Traffic Manager, and Azure Front Door configurations
• Implement and monitor Azure Firewall, DDoS Protection, and Web Application Firewall (WAF) policies
• Oversee VNet peering, hub-and-spoke topology, and cross-region network connectivity
• Troubleshoot complex network issues using Network Watcher, connection monitors, and packet capture

Infrastructure & Platform Operations

• Manage Azure subscriptions, resource groups, management groups, and tagging strategies
• Administer Azure SQL, Terraform, and storage accounts including access keys, firewalls, and backup policies
• Monitor platform health using Azure Monitor, Log Analytics workspaces, and Application Insights
• Configure alerts, dashboards, and workbooks for proactive infrastructure visibility
• Perform cost analysis, implement budget alerts, and optimize resource utilization using Azure Advisor
• Maintain Azure Policy definitions and initiatives to enforce compliance and governance standards

Security & Compliance

• Administer Microsoft Defender for Cloud and remediate security recommendations
• Manage Azure Key Vault for secrets, certificates, and encryption key lifecycle
• Implement and review Azure Security Center policies and secure score improvements
• Coordinate with security teams on vulnerability assessments and penetration test remediations
• Upload all technology-related invoices to the SAP Concur system for processing and payment.
• Follow up with vendors regarding missing or delayed invoices to ensure timely processing.

Required Qualifications

• 6+ years of hands-on experience in Azure cloud administration and infrastructure management
• Strong Knowledge of both Windows and Linux environments as Azure hosts a significant amount of Windows workloads along with Unix .
• Strong expertise in Azure Active Directory / Microsoft Entra ID including RBAC, PIM, and Conditional Access
• Deep knowledge of Azure networking: VNets, NSGs, VPN Gateway, ExpressRoute, Private Link, DNS, and Firewall
• Experience hosting and managing applications on Azure App Service, AKS, and Azure Functions
• Proficiency with Azure CLI, PowerShell, and ARM/Bicep templates for infrastructure automation
• Familiarity with Azure DevOps pipelines and GitHub Actions for CI/CD and IaC deployments
• Experience with Azure Monitor, Log Analytics, and Application Insights for observability
• Strong understanding of cloud security principles and Azure security services
• Bachelor's degree in Computer Science, Information Technology, or equivalent experience

Technical Skills

• App Registrations, Service Principals, Managed Identities

Trimont is an equal opportunity employer, and we’re proud to support and celebrate diversity in the workplace. If you have a disability and need an accommodation or assistance with the application process and/or using our website, please contact us. We are proud to maintain a drug-free policy, ensuring that our community is a secure and productive space for all our team members