Director, Senior Security Engineer

Trimont LLC; Charlotte (NC); On-site; USD 120,000 - 170,000; Full time

Job summary

Trimont LLC seeks a Senior Security Engineer to design, implement, and continuously improve security across the enterprise. You will specialize in identity security, cloud security, infrastructure hardening, and security governance.

You will partner with Infrastructure, Cloud, Networking, DevOps, and App Engineering teams to deploy practical security solutions that enable business objectives. This role serves as a senior technical SME for compliance, engineering, and operations.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field.
• 7+ years of cybersecurity, infrastructure security, or security engineering experience.
• 7+ years of experience securing Microsoft enterprise environments.
• Experience with Microsoft Entra ID, Active Directory, and hybrid identity solutions.
• Experience implementing MFA, Conditional Access Policy, and identity governance controls.
• Experience securing Azure cloud environments.
• Experience with infrastructure hardening, vulnerability management, and security operations.
• Security Risk Assessment
• Strong written and verbal communication skills.
• Financial services or other regulated industry experience preferred.
• Zero Trust implementation experience preferred.
• CISSP (Certified Information Systems Security Professional)
• CCSP (Certified Cloud Security Professional)
• Microsoft Identity and Access Administrator (SC-300)
• Microsoft Azure Security Engineer Associate (AZ-500)

Responsibilities

• Design, implement, and continuously improve security capabilities across the enterprise.
• Partner with Infrastructure, Cloud, Networking, DevOps, and Application Engineering teams to implement practical security solutions.
• Serve as a senior technical resource and SME for security compliance, engineering, and operational security initiatives.
• Secure and manage Microsoft Entra ID, authentication, and identity governance solutions.
• Implement Conditional Access, MFA, PIM, and PAM controls to protect enterprise access.
• Conduct access reviews, identity risk assessments, and support Zero Trust initiatives.
• Secure and harden hybrid Active Directory, Windows Server, and endpoint environments.
• Protect privileged accounts, domain controllers, and enterprise infrastructure.
• Identify vulnerabilities and lead remediation and system-hardening efforts.
• Design and implement security controls across Microsoft Azure environments.
• Secure cloud identities, workloads, networks, storage, and platform services.
• Assess security risks, support cloud initiatives, and respond to security incidents.
• Develop security standards, procedures, and technical documentation.
• Support regulatory compliance, audits, and security framework adoption.
• Provide security guidance and risk-based recommendations to technology and business leaders.

Skills

Cybersecurity

Security engineering

Infrastructure security

Communication skills

Regulated industry experience

Zero Trust

Risk assessment

Education

Bachelor's degree in Cybersecurity / IT / CS / IS

Tools

Microsoft Entra ID

Active Directory

Hybrid identity

Azure

MFA

Conditional Access

Job description

Founded in 1988, Trimont (www.trimont.com ) is a specialized global commercial real estate loan services provider and partner for lenders and investors seeking the infrastructure and capabilities needed to help them scale their business and make informed, effective decisions related to the deployment, management and administration of commercial real estate secured credit. As the largest master servicer of commercial real estate loans in the United States, Trimont manages securitizations with meticulous oversight and coordination—protecting cash flows, mitigating risk, and ensuring portfolio performance.

We do this with a team of 1100+ extraordinary team members who serve a global client base from offices in Atlanta (headquarters), Bengaluru, Charlotte, Dallas, Hyderabad, Kansas City, London, New York and Sydney. We empower our people with advanced technology, industry-leading knowledge, and a culture centered on our core values. This approach enables our teams to deliver exceptional client service, build lasting relationships and take pride in the high-quality work they perform.

Trimont is an innovative firm where visionary professionals come to learn, grow, and thrive with colleagues driven by curiosity and collaboration.

Learn: We believe ongoing learning is critical and are focused on providing a work environment where all team members can take ownership of their careers.

Grow: We work alongside the largest institutional lenders in the world, overseeing the most significant projects in the industry. This unique opportunity allows us to broaden our skillset and develop our abilities by tackling some of the industry's most challenging and exciting endeavors.

Thrive: Our firm is a place where ethics and excellence meet to create an experience that matches our capabilities. There are no limits to what we as team members and as an organization, can achieve together.

Where people, purpose, and progress come together every day.

Job Summary:

Trimont is seeking a Senior Security Engineer who will serve as a hands-on individual contributor responsible for designing, implementing, and continuously improving security capabilities across the enterprise. This role focuses on identity security, cloud security, infrastructure hardening, and security governance.

The Senior Security Engineer partners closely with Infrastructure, Cloud, Networking, DevOps, and Application Engineering teams to implement practical security solutions that protect enterprise systems and data while enabling business objectives. This position serves as a senior technical resource and subject matter expert for security compliance, engineering, and operational security initiatives.

Responsibilities:

• Secure and manage Microsoft Entra ID, authentication, and identity governance solutions.
• Implement Conditional Access, MFA, PIM, and PAM controls to protect enterprise access.
• Conduct access reviews, identity risk assessments, and support Zero Trust initiatives.
• Secure and harden hybrid Active Directory, Windows Server, and endpoint environments.
• Protect privileged accounts, domain controllers, and enterprise infrastructure.
• Identify vulnerabilities and lead remediation and system-hardening efforts.
• Design and implement security controls across Microsoft Azure environments.
• Secure cloud identities, workloads, networks, storage, and platform services.
• Assess security risks, support cloud initiatives, and respond to security incidents.
• Develop security standards, procedures, and technical documentation.
• Support regulatory compliance, audits, and security framework adoption.
• Provide security guidance and risk-based recommendations to technology and business leaders.

Required Qualifications:

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field.
• 7+ years of cybersecurity, infrastructure security, or security engineering experience.
• 7+ years of experience securing Microsoft enterprise environments.
• Experience with Microsoft Entra ID, Active Directory, and hybrid identity solutions.
• Experience implementing MFA, Conditional Access Policy, and identity governance controls.
• Experience securing Azure cloud environments.
• Experience with infrastructure hardening, vulnerability management, and security operations.
• Security Risk Assessment
• Ability to translate security requirements into practical engineering solutions.
• Strong written and verbal communication skills.
• Financial services or other regulated industry experience preferred.
• Zero Trust implementation experience preferred.
• CISSP (Certified Information Systems Security Professional)
• CCSP (Certified Cloud Security Professional)
• Microsoft Identity and Access Administrator (SC-300)
• Microsoft Azure Security Engineer Associate (AZ-500)

Trimont is an equal opportunity employer, and we’re proud to support and celebrate diversity in the workplace. If you have a disability and need accommodation or assistance with the application process and/or using our website, please contact us. We are proud to maintain a drug-free policy, ensuring that our community is a secure and productive space for all our team members.

Equal Opportunity Employer
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.