Job Summary: Trimont is seeking a Senior Security Engineer who will serve as a hands-on individual contributor responsible for designing, implementing, and continuously improving security capabilities across the enterprise. This role focuses on identity security, cloud security, infrastructure hardening, and security governance.
The Senior Security Engineer partners closely with Infrastructure, Cloud, Networking, DevOps, and Application Engineering teams to implement practical security solutions that protect enterprise systems and data while enabling business objectives. This position serves as a senior technical resource and subject matter expert for security compliance, engineering, and operational security initiatives.
Responsibilities:- Secure and manage Microsoft Entra ID, authentication, and identity governance solutions.
- Implement Conditional Access, MFA, PIM, and PAM controls to protect enterprise access.
- Conduct access reviews, identity risk assessments, and support Zero Trust initiatives.
- Secure and harden hybrid Active Directory, Windows Server, and endpoint environments.
- Protect privileged accounts, domain controllers, and enterprise infrastructure.
- Identify vulnerabilities and lead remediation and system-hardening efforts.
- Design and implement security controls across Microsoft Azure environments.
- Secure cloud identities, workloads, networks, storage, and platform services.
- Assess security risks, support cloud initiatives, and respond to security incidents.
- Develop security standards, procedures, and technical documentation.
- Support regulatory compliance, audits, and security framework adoption.
- Provide security guidance and risk-based recommendations to technology and business leaders.
Required Qualifications:- Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field.
- 7+ years of cybersecurity, infrastructure security, or security engineering experience.
- 7+ years of experience securing Microsoft enterprise environments.
- Experience with Microsoft Entra ID, Active Directory, and hybrid identity solutions.
- Experience implementing MFA, Conditional Access Policy, and identity governance controls.
- Experience securing Azure cloud environments.
- Experience with infrastructure hardening, vulnerability management, and security operations.
- Security Risk Assessment
- Ability to translate security requirements into practical engineering solutions.
- Strong written and verbal communication skills.
- Financial services or other regulated industry experience preferred.
- Zero Trust implementation experience preferred.
Certifications preferred- CISSP (Certified Information Systems Security Professional)
- CCSP (Certified Cloud Security Professional)
- Microsoft Identity and Access Administrator (SC-300)
- Microsoft Azure Security Engineer Associate (AZ-500)
