Director, Senior Security Engineer

Trimont; Charlotte (NC); On-site; USD 120,000 - 150,000; Full time

Job summary

Trimont is seeking a Senior Security Engineer to design, implement, and continuously improve security across the enterprise. This hands-on role focuses on identity security, cloud security, infrastructure hardening, and governance.

You will work with Infrastructure, Cloud, Networking, DevOps, and App Engineering teams to enable secure business objectives. The successful candidate will be a senior technical resource, guiding security compliance, engineering, and operational initiatives while

Qualifications

• Bachelor's degree in Cybersecurity or related field.
• 7+ years of cybersecurity or security engineering experience.
• 7+ years securing Microsoft enterprise environments.
• Experience with Microsoft Entra ID, AD, and hybrid identity.
• Experience implementing MFA and identity governance controls.
• Experience securing Azure cloud environments.
• Strong communication skills; ability to translate security requirements.
• Financial services or regulated industry experience preferred.

Responsibilities

• Design, implement, and improve security capabilities across the enterprise.
• Partner with Infrastructure, Cloud, Networking, DevOps, and App Engineering teams.
• Lead security compliance, engineering, and operational security initiatives.
• Secure identity governance, cloud identities, workloads, and networks.
• Develop security standards, procedures, and documentation.

Skills

Communication skills

Education

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field

Tools

Microsoft Entra ID

Active Directory

Azure

MFA

Conditional Access

Job description

Overview

Founded in 1988, Trimont (www.trimont.com) is a specialized global commercial real estate loan services provider and partner for lenders and investors seeking the infrastructure and capabilities needed to help them scale their business and make informed, effective decisions related to the deployment, management and administration of commercial real estate secured credit. As the largest master servicer of commercial real estate loans in the United States, Trimont manages securitizations with meticulous oversight and coordination—protecting cash flows, mitigating risk, and ensuring portfolio performance.

We do this with a team of 1100+ extraordinary team members who serve a global client base from offices in Atlanta (headquarters), Bengaluru, Charlotte, Dallas, Hyderabad, Kansas City, London, New York and Sydney. We empower our people with advanced technology, industry-leading knowledge, and a culture centered on our core values. This approach enables our teams to deliver exceptional client service, build lasting relationships and take pride in the high-quality work they perform.

Trimont is an innovative firm where visionary professionals come to learn, grow, and thrive with colleagues driven by curiosity and collaboration.

Learn: We believe ongoing learning is critical and are focused on providing a work environment where all team members can take ownership of their careers.

Grow: We work alongside the largest institutional lenders in the world, overseeing the most significant projects in the industry. This unique opportunity allows us to broaden our skillset and develop our abilities by tackling some of the industry's most challenging and exciting endeavors.

Thrive: Our firm is a place where ethics and excellence meet to create an experience that matches our capabilities. There are no limits to what we as team members and as an organization, can achieve together.

Where people, purpose, and progress come together every day.

Job Summary

Trimont is seeking a Senior Security Engineer who will serve as a hands‑on individual contributor responsible for designing, implementing, and continuously improving security capabilities across the enterprise. This role focuses on identity security, cloud security, infrastructure hardening, and security governance.

The Senior Security Engineer partners closely with Infrastructure, Cloud, Networking, DevOps, and Application Engineering teams to implement practical security solutions that protect enterprise systems and data while enabling business objectives. This position serves as a senior technical resource and subject matter expert for security compliance, engineering, and operational security initiatives.

Responsibilities

• Secure and manage Microsoft Entra ID, authentication, and identity governance solutions.
• Implement Conditional Access, MFA, PIM, and PAM controls to protect enterprise access.
• Conduct access reviews, identity risk assessments, and support Zero Trust initiatives.
• Secure and harden hybrid Active Directory, Windows Server, and endpoint environments.
• Protect privileged accounts, domain controllers, and enterprise infrastructure.
• Identify vulnerabilities and lead remediation and system-hardening efforts.
• Design and implement security controls across Microsoft Azure environments.
• Secure cloud identities, workloads, networks, storage, and platform services.
• Assess security risks, support cloud initiatives, and respond to security incidents.
• Develop security standards, procedures, and technical documentation.
• Support regulatory compliance, audits, and security framework adoption.
• Provide security guidance and risk-based recommendations to technology and business leaders.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field.
• 7+ years of cybersecurity, infrastructure security, or security engineering experience.
• 7+ years of experience securing Microsoft enterprise environments.
• Experience with Microsoft Entra ID, Active Directory, and hybrid identity solutions.
• Experience implementing MFA, Conditional Access Policy, and identity governance controls.
• Experience securing Azure cloud environments.
• Experience with infrastructure hardening, vulnerability management, and security operations.
• Security Risk Assessment
• Ability to translate security requirements into practical engineering solutions.
• Strong written and verbal communication skills.
• Financial services or other regulated industry experience preferred.
• Zero Trust implementation experience preferred.

Certifications Preferred

• CISSP (Certified Information Systems Security Professional)
• CCSP (Certified Cloud Security Professional)
• Microsoft Identity and Access Administrator (SC-300)
• Microsoft Azure Security Engineer Associate (AZ-500)

Trimont is an equal opportunity employer, and we’re proud to support and celebrate diversity in the workplace. If you have a disability and need accommodation or assistance with the application process and/or using our website, please contact us. We are proud to maintain a drug-free policy, ensuring that our community is a secure and productive space for all our team members.