Job Description

Overview:

Founded in 1988 and headquartered in Atlanta, Georgia Trimont (www.trimont.com) is a specialized global commercial real estate loan services provider and partner for lenders seeking the infrastructure and capabilities needed to make informed, effective decisions related to the deployment, management and administration of commercial real estate secured credit.

We do this with a team of 1100+ extraordinary Team Members who serve a global client base from offices in Atlanta, Bengaluru, Charlotte, Dallas, Hyderabad, Kansas City, London, New York and Sydney. We empower our skilled global teams by equipping them with the necessary knowledge and advanced technology, as well as fostering a culture driven by values. This approach helps our teams excel and build meaningful client relationships, while providing the highest quality service and feeling proud of the work they do.

Trimont is an innovative firm where visionary professionals come to learn, grow, and thrive with colleagues driven by curiosity and collaboration.

Learn: We believe ongoing learning is critical and are focused on providing a work environment where all team members can take ownership of their careers.

Grow: We work alongside the largest institutional lenders in the world, overseeing the most significant projects in the industry. This unique opportunity allows us to broaden our skillset and develop our abilities by tackling some of the industry's most challenging and exciting endeavors.

Thrive: Our firm is a place where ethics and excellence meet to create an experience that matches our capabilities. There are no limits to what we as team members as an organization, can achieve together.

Job Summary

We are seeking an experienced Azure Cloud Administrator to manage, secure, and optimize our Microsoft Azure environment. You will be the go-to expert for Azure identity and access management, virtual networking, and application hosting across the complete Microsoft stack. This role is pivotal in ensuring our cloud infrastructure is resilient, compliant, and aligned with business growth.

Key Responsibilities

Identity & Access Management

• Administer Azure Active Directory (Entra ID) including users, groups, service principals, and managed identities
• Configure and manage Role-Based Access Control (RBAC) across subscriptions, resource groups, and individual resources
• Implement and enforce Conditional Access policies, MFA, and Privileged Identity Management (PIM)
• Manage Azure AD B2B and B2C integrations for partner and customer access scenarios
• Conduct regular access reviews and enforce least-privilege principles across the organization
• Manage App Registrations and enterprise application permissions including OAuth scopes and API access grants

Networking & Connectivity

• Design, deploy, and manage Azure Virtual Networks (VNets), subnets, Network Security Groups (NSGs), and route tables
• Configure and maintain Azure VPN Gateways, ExpressRoute circuits, and Private Endpoints
• Manage Azure DNS zones (both public and private), Traffic Manager, and Azure Front Door configurations
• Implement and monitor Azure Firewall, DDoS Protection, and Web Application Firewall (WAF) policies
• Oversee VNet peering, hub-and-spoke topology, and cross-region network connectivity
• Troubleshoot complex network issues using Network Watcher, connection monitors, and packet capture

Infrastructure & Platform Operations

• Manage Azure subscriptions, resource groups, management groups, and tagging strategies
• Administer Azure SQL, Terraform, and storage accounts including access keys, firewalls, and backup policies
• Monitor platform health using Azure Monitor, Log Analytics workspaces, and Application Insights
• Configure alerts, dashboards, and workbooks for proactive infrastructure visibility
• Perform cost analysis, implement budget alerts, and optimize resource utilization using Azure Advisor
• Maintain Azure Policy definitions and initiatives to enforce compliance and governance standards

Security & Compliance

• Administer Microsoft Defender for Cloud and remediate security recommendations
• Manage Azure Key Vault for secrets, certificates, and encryption key lifecycle
• Implement and review Azure Security Center policies and secure score improvements
• Coordinate with security teams on vulnerability assessments and penetration test remediations

Invoice Management.

• Upload all technology-related invoices to the SAP Concur system for processing and payment.
• Follow up with vendors regarding missing or delayed invoices to ensure timely processing.

Required Qualifications

• 6+ years of hands-on experience in Azure cloud administration and infrastructure management
• Strong Knowledge of both Windows and Linux environments as Azure hosts a significant amount of Windows workloads along with Unix .
• Strong expertise in Azure Active Directory / Microsoft Entra ID including RBAC, PIM, and Conditional Access
• Deep knowledge of Azure networking: VNets, NSGs, VPN Gateway, ExpressRoute, Private Link, DNS, and Firewall
• Experience hosting and managing applications on Azure App Service, AKS, and Azure Functions
• Proficiency with Azure CLI, PowerShell, and ARM/Bicep templates for infrastructure automation
• Familiarity with Azure DevOps pipelines and GitHub Actions for CI/CD and IaC deployments
• Experience with Azure Monitor, Log Analytics, and Application Insights for observability
• Strong understanding of cloud security principles and Azure security services
• Bachelor's degree in Computer Science, Information Technology, or equivalent experience

Technical Skills

• Azure Active Directory / Microsoft Entra ID
• App Registrations, Service Principals, Managed Identities
• Azure AD, SSO, SAML, OAuth 2.0, OpenID Connect
• Azure VPN Gateway,Azure Firewall, Traffic Manager
• Azure DNS (public & private), Load Balancer, Application Gateway
• Azure App Service, Function Apps,
• Azure API Management, Logic Apps, Service Bus
• Azure DevOps (Pipelines, Repos, Artifacts), GitHub Actions,Terraform
• Azure Key Vault, Managed Disks, Azure Backup
• Azure Monitor, Log Analytics, Application Insights, Network Watcher

Trimont is an equal opportunity employer, and we’re proud to support and celebrate diversity in the workplace. If you have a disability and need an accommodation or assistance with the application process and/or using our website, please contact us. We are proud to maintain a drug-free policy, ensuring that our community is a secure and productive space for all our team members