Director, Senior Security Engineer

About the Company

Founded in 1988, Trimont is a specialized global commercial real estate loan services provider and partner for lenders and investors. As the largest master servicer of commercial real estate loans in the United States, Trimont manages securitizations with meticulous oversight and coordination—protecting cash flows, mitigating risk, and ensuring portfolio performance. With a team of 1100+ team members, Trimont serves a global client base from offices in Atlanta (headquarters), Bengaluru, Charlotte, Dallas, Hyderabad, Kansas City, London, New York, and Sydney.

We empower our people with advanced technology, industry-leading knowledge, and a culture centered on core values. Our approach enables teams to deliver exceptional client service, build lasting relationships, and take pride in high-quality work. Trimont is an innovative firm where visionary professionals learn, grow, and thrive through curiosity and collaboration.

• Learn: We provide a work environment where team members can take ownership of their careers and engage in ongoing learning.
• Grow: We work alongside the largest institutional lenders, overseeing significant industry projects to broaden skills and tackle challenging endeavors.
• Thrive: Our firm combines ethics and excellence, creating an experience that matches our capabilities with no limits to what we can achieve together.

About the Role

The Senior Security Engineer will serve as a hands-on individual contributor responsible for designing, implementing, and continuously improving security capabilities across the enterprise. This role focuses on identity security, cloud security, infrastructure hardening, and security governance. The Senior Security Engineer partners closely with Infrastructure, Cloud, Networking, DevOps, and Application Engineering teams to implement practical security solutions that protect enterprise systems and data while enabling business objectives. This position serves as a senior technical resource and subject matter expert for security compliance, engineering, and operational security initiatives.

Responsibilities

• Secure and manage Microsoft Entra ID, authentication, and identity governance solutions.
• Implement Conditional Access, MFA, PIM, and PAM controls to protect enterprise access.
• Conduct access reviews, identity risk assessments, and support Zero Trust initiatives.
• Secure and harden hybrid Active Directory, Windows Server, and endpoint environments.
• Protect privileged accounts, domain controllers, and enterprise infrastructure.
• Identify vulnerabilities and lead remediation and system-hardening efforts.
• Design and implement security controls across Microsoft Azure environments.
• Secure cloud identities, workloads, networks, storage, and platform services.
• Assess security risks, support cloud initiatives, and respond to security incidents.
• Develop security standards, procedures, and technical documentation.
• Support regulatory compliance, audits, and security framework adoption.
• Provide security guidance and risk-based recommendations to technology and business leaders.

Requirements

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field.
• 7+ years of cybersecurity, infrastructure security, or security engineering experience.
• 7+ years of experience securing Microsoft enterprise environments.
• Experience with Microsoft Entra ID, Active Directory, and hybrid identity solutions.
• Experience implementing MFA, Conditional Access Policy, and identity governance controls.
• Experience securing Azure cloud environments.
• Experience with infrastructure hardening, vulnerability management, and security operations.
• Ability to translate security requirements into practical engineering solutions.
• Strong written and verbal communication skills.

Qualifications

• Financial services or other regulated industry experience preferred.
• Zero Trust implementation experience preferred.

Skills

• Security Risk Assessment

Preferred Certifications

• CISSP (Certified Information Systems Security Professional)
• CCSP (Certified Cloud Security Professional)
• Microsoft Identity and Access Administrator (SC-300)
• Microsoft Azure Security Engineer Associate (AZ-500)