Cloud Security Engineer

Trinity Capital Inc. (Nasdaq: TRIN) is an internally managed alternative asset manager that seeks to deliver consistent returns for investors through access to private credit markets. We are looking for an experienced Cloud Security professional to join our world-class team as a Cloud Security Engineer in Phoenix, Arizona. This is a high-impact role within a publicly traded organization, reporting to the Information Technology Manager and partnering with IT and business leadership to own and execute the firm’s cloud security strategy.

The Cloud Security Engineer will help build and maintain Trinity’s security posture across Microsoft Azure, AWS, and multi-cloud environments while carrying meaningful ownership of data protection, AI governance, and regulatory compliance as a BDC subject to SEC oversight.

The Cloud Security Engineer is a critical member of Trinity Capital’s Information Technology team, responsible for designing, implementing, and maintaining the security posture of the company’s cloud and hybrid infrastructure. This role owns cloud security across Microsoft Azure, AWS, and multi-cloud environments – protecting corporate data, financial systems, and regulated workloads from evolving cyber threats.

A key responsibility of this position is partnering with IT and business leadership on company-wide security strategy, including the governance and secure deployment of AI and large language model (LLM) tools across the organization. The Cloud Security Engineer will ensure that all AI platform usage meets Trinity’s data protection standards and regulatory obligations as a publicly traded Business Development Company (BDC) subject to SEC oversight.

This full-time, exempt position reports to the Information Technology Manager and is based on-site at Trinity’s headquarters in downtown Phoenix, AZ.

• Design, deploy, and manage cloud security controls across Microsoft Azure, AWS, and multi-cloud environments, following a zero-trust architecture model
• Administer and optimize Microsoft Entra  (Azure AD), Conditional Access policies, Privileged Identity Management (PIM), and Defender for Cloud
• Manage cloud-native security services including Microsoft Sentinel (SIEM/SOAR), Defender for Endpoint, Defender for Cloud Apps, and Azure Security Center
• Maintain secure network architecture including virtual networks, NSGs, firewall rules, VPN gateways, and private endpoints across cloud environments
• Oversee identity and access management (IAM) across Azure and AWS, enforcing least-privilege and just-in-time access principles
• Monitor cloud workloads for misconfigurations, anomalous behavior, and threats using CSPM and CWPP tooling
• Manage data loss prevention (DLP) policies across Microsoft 365, SharePoint, One Drive, Teams, and connected SaaS platforms
• Ensure cloud backups and disaster recovery configurations are operational and tested per business continuity requirements

• Serve as a primary driver of Trinity’s enterprise-wide security posture, partnering with IT leadership to develop and maintain security strategy, roadmaps, and policies
• Conduct regular security risk assessments, vulnerability scans, and penetration testing; prioritize remediation and report findings to IT management
• Simulate cyberattacks and adversarial scenarios to identify gaps in existing defenses; develop and execute remediation and incident response plans
• Own endpoint security across Windows and macOS devices managed via Microsoft Intune, including MAM/MDM policy enforcement for mobile platforms
• Manage email security controls, anti-phishing policies, DKIM/DMARC/SPF, and Microsoft Defender for Office 365
• Oversee security operations for SaaS platforms
• Develop and maintain security documentation including blueprints, runbooks, incident response playbooks, and standard operating procedures
• Administer identity security across all systems, including monitoring for credential exposure, lateral movement, and privilege escalation
• Evaluate and recommend security vendors and tools; manage relationships and implement solutions in collaboration with external partners
• Provide security…