Cloud Security Engineer

Trinity Capital Inc.; Phoenix (AZ); On-site; USD 140,000 - 190,000; Full time

Job summary

Trinity Capital Inc. in Phoenix, AZ, is seeking a Cloud Security Engineer to secure our Azure, AWS, and multi-cloud environments and shape the company-wide security strategy.

This on-site, exempt role reports to the Information Technology Manager and requires 7+ years in information security with a focus on cloud security. You will design zero-trust controls, govern AI tool usage, manage IAM, and oversee incident response, audits, and data protection across Microsoft 365 and SaaS.

Qualifications

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 7+ years of information security experience, with at least 3 years in cloud security (Azure and/or AWS).
• Hands-on expertise with Azure security services (Entra ID, Defender for Cloud, Sentinel) and securing Microsoft 365.
• Strong knowledge of IAM, zero-trust, and infrastructure-as-code security (Terraform).
• Experience supporting SOX ITGC audits and SEC-regulated environments.

Responsibilities

• Design and manage cloud security controls across Azure, AWS, and multi-cloud using a zero-trust model.
• Administer identity and access across Azure and AWS, enforcing least-privilege and just-in-time access.
• Build infrastructure-as-code security controls and policy-as-code (Terraform, AWS Config, Azure Policy, OPA).
• Operate cloud-native security tooling and harden container and Kubernetes workloads.
• Manage data loss prevention, backups, and disaster recovery testing.

Job description

Trinity Capital Inc. (NYSE: TRIN) is an international alternative asset manager that seeks to deliver consistent returns for investors through access to private credit markets. Trinity Capital sources and structures investments in well-capitalized growth-oriented companies. With five distinct business verticals - Tech Lending, Equipment Finance, Healthcare & Life Sciences, Sponsor Finance, and Asset Based Lending - Trinity Capital stands as a long-term trusted partner for innovative companies seeking tailored debt solutions. Headquartered in Phoenix, Arizona, Trinity Capital's dedicated team is strategically located across the United States and in Europe. For more information on Trinity Capital, please visit trinitycapital.com and stay connected to the latest activity via LinkedIn .

Job Description

The Cloud Security Engineer secures Trinity Capital's cloud and hybrid infrastructure across Azure, AWS, and multi-cloud environments, protecting corporate data, financial systems, and regulated workloads.

The role also shapes company-wide security strategy, including governance of AI and LLM tools, ensuring AI use meets Trinity's data protection standards and SEC obligations as a public BDC.

This full-time, exempt position reports to the Information Technology Manager and is based on-site at Trinity's headquarters in downtown Phoenix, AZ.

Responsibilities

• Design and manage cloud security controls across Azure, AWS, and multi-cloud using a zero-trust model
• Administer identity and access across Azure and AWS, enforcing least-privilege and just-in-time access
• Build infrastructure-as-code security controls and enforce policy-as-code (Terraform, AWS Config, Azure Policy, OPA)
• Operate cloud-native security tooling (Sentinel, Microsoft Defender, CSPM/CWPP) and harden container and Kubernetes workloads
• Manage data loss prevention across Microsoft 365 and SaaS, and keep backups and disaster recovery tested

Company-Wide Security Program

• Drive Trinity's enterprise security strategy, roadmaps, and policies with IT leadership
• Run risk assessments, vulnerability scans, and penetration tests; lead remediation and incident response
• Review cloud architecture designs and own endpoint and email security (MAM/MDM, anti-phishing, DKIM/DMARC/SPF)
• Maintain security documentation and serve as internal security subject matter expert

AI Platform Security & Governance

• Own the security framework for Trinity's AI and LLM deployments
• Set data classification and handling rules for AI tools, and build an AI governance program with Compliance (acceptable use, training)
• Vet third-party AI tools for data residency, retention, and API security, and sign off on new AI use cases

Compliance & Regulatory Requirements

• Support SOX ITGC compliance with evidence over access, change management, and system availability
• Uphold SEC obligations as a public BDC - data protection, records retention, and incident disclosure
• Maintain controls and audit evidence aligned with NIST CSF and ISO 27001

Characteristics

• Analytical, risk-based approach that balances security rigor against business agility
• Clear communicator able to explain complex security concepts to non-technical stakeholders
• Collaborative across Finance, Legal, Compliance, and Operations
• Adaptable and ownership-driven in a fast-paced financial services environment

Experience

• Bachelor's degree in Computer Science, Information Security, or a related field
• 7+ years of experience in information security, with at least 3 years focused on cloud security in Azure and/or AWS environments
• Hands-on expertise with Microsoft Azure security services (Entra ID, Defender for Cloud, Sentinel, Purview, Intune, Conditional Access) and securing Microsoft 365
• Solid AWS security fundamentals (IAM, Security Hub, GuardDuty, CloudTrail, SCPs), network security (firewalls, VPNs, NSGs, DNS, ZTNA), and infrastructure-as-code security (Terraform, policy-as-code)
• Experience supporting SOX ITGC audits and/or operating within SEC-regulated environments; familiarity with NIST CSF and ISO 27001
• Proven vulnerability assessment, penetration testing, and remediation, plus experience governing third-party SaaS and AI platforms
• Excellent communication skills, with a track record of translating security risk into business terms for leadership

Physical Requirements

• Able to work at a computer and read screens for extended periods, with repetitive keyboard/mouse motion
• Reliable transportation; able to travel locally and nationally as needed; and lift up to 20 lbs

Other

Minimal travel required (approximately 10%)

Trinity is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status, sexual orientation, gender expression, gender identity, or any other characteristic protected by law.

We strive to create a positive and collaborative work environment where creativity and innovationcan thrive.