Senior Azure Cloud Platform Engineer

CACI International

2d•$98,500 - $206,800

About The Position

The Senior Azure Cloud Platform Engineer will architect, automate, and maintain scalable infrastructure services across CACI’s IL5 Azure platform for the EITaaS program. The role treats governance, identity, and reliability as software problems, using declarative guardrails, automated remediation pipelines, and Infrastructure-as-Code (IaC) solutions. The EITaaS program delivers and operates enterprise ITSM, service desk, endpoint management and security, field support, and end-user device lifecycle support for the DAF, enabling it to shift focus from IT operations to mission operations. This position supports cloud governance, Zero Trust execution, identity automation, continuous monitoring, security remediation, boundary configuration, and CI/CD quality controls. It requires an active Secret clearance and a DoD 8570/8140-compliant cybersecurity certification. Travel of up to 10% is required.

Requirements

15 or more years of relevant experience; a bachelor’s degree in a relevant field may substitute for five years of relevant experience.
Active Secret clearance.
DoD 8570/8140-compliant cybersecurity certification, such as CompTIA Security+ CE or an approved equivalent.
Extensive hands-on experience engineering, deploying, and managing Microsoft Azure infrastructure in enterprise environments.
Strong proficiency with Infrastructure-as-Code, including Azure Bicep, ARM templates, and/or Terraform.
Experience implementing Azure Policy, Role-Based Access Control (RBAC), Privileged Identity Management (PIM), and Microsoft Entra ID.
Experience developing and maintaining CI/CD pipelines using Azure DevOps, Git, and automated deployment processes.
Working knowledge of cloud networking, including Azure Virtual Networks, Network Security Groups, Azure Firewall, Private Endpoints, DNS, and hybrid connectivity.
Experience implementing cloud security controls, automated compliance monitoring, and remediation using Microsoft Defender for Cloud, Azure Monitor, and Azure Advisor.
Strong troubleshooting, scripting, and automation skills using PowerShell, Azure CLI, and/or Python.

Nice To Haves

Experience supporting DoD IL5 cloud environments and implementing security controls aligned with DISA STIGs, DoD Cloud Computing SRG, and Zero Trust requirements.
Familiarity with DoD Secure Cloud Computing Architecture (SCCA), Risk Management Framework (RMF), and Authority to Operate (ATO) processes.
Experience implementing enterprise-scale Azure governance using Management Groups, Azure Policy Initiatives, and automated compliance enforcement.
Microsoft Azure certifications such as Azure Solutions Architect Expert (AZ-305), Azure Administrator Associate (AZ-104), or DevOps Engineer Expert (AZ-400).
Experience supporting large-scale federal or Department of Defense cloud modernization programs.
Demonstrated ability to collaborate across cloud engineering, cybersecurity, networking, and application teams.

Responsibilities

Author and deploy custom Azure Policies, Initiatives, and Management Group guardrails to automatically enforce IL5 and Zero Trust baselines across ECS.
Automate Privileged Identity Management (PIM) workflows, just-in-time access, and RBAC lifecycles using infrastructure automation.
Translate DoD Zero Trust capability targets and TASKORD requirements into operational cloud architectures and network configurations.
Build Azure Automation Runbooks, Logic Apps, and live dashboards to automate telemetry collection and eliminate manual audit artifact capture.
Streamline triage and remediation workflows for Microsoft Defender for Cloud and Azure Advisor recommendations, managing cloud infrastructure resolution cycles.
Maintain boundary configurations for DoD SCCA and Cloud Computing SRG alignment.
Integrate infrastructure linting, template validation, and automated policy testing into Azure DevOps build and release pipelines.