Senior Azure Cloud Platform Engineer

CACI International Inc; United States; Remote; USD 99,000 - 207,000; Full time

Job summary

CACI International Inc is seeking a Senior Azure Cloud Platform Engineer to architect, automate, and maintain scalable IL5 Azure infrastructure. You will treat governance and security as code, building guardrails, automation pipelines, and IaC solutions to enable DoD mission operations.

The role requires extensive Azure experience, strong IaC skills, and a Secret clearance, with duties spanning policy deployment, identity automation, Zero Trust configurations, and integrated CI/CD processes.

Qualifications

• Active Secret clearance required to start.
• 15+ years of relevant experience or 5 years with a Bachelor’s degree substituted.
• Extensive hands-on Azure infrastructure engineering in enterprise environments.
• Strong IaC skills with Azure Bicep, ARM templates, and/or Terraform.
• Experience with Azure Policy, RBAC, PIM, and Entra ID.

Responsibilities

• Policy-as-Code & drift prevention: deploy Azure Policies and guardrails across IL5 baselines.
• Identity automation: automate PIM workflows and just-in-time RBAC lifecycles.
• Zero Trust platform execution aligned to DoD requirements.
• Continuous monitoring: build dashboards and telemetry automation.
• CI/CD: integrate linting, template validation, and policy testing in Azure DevOps.
• Maintain DoD SCCA boundaries and Cloud SRG alignment.

Skills

Active Secret clearance

Azure

Infrastructure as Code

Powershell

Python

Azure DevOps

Git

Terraform

Azure Bicep/ARM

Education

Bachelor’s Degree in relevant field

Tools

Azure DevOps

Terraform

Azure Bicep/ARM

Git

Job description

Job Title: Senior Azure Cloud Platform Engineer

Job Category: Information Technology

Time Type: Full time

Minimum Clearance Required to Start: Secret

Employee Type: Regular

Percentage of Travel Required: Up to 10%

Type of Travel: Local

The Opportunity

On the EITaaS program, CACI will deliver enhanced capabilities and services to implement and operate an enterprise ITSM solution, enterprise service desk, endpoint management and security solution, as well as CONUS/OCONUS field support and life cycle support for end user devices to enable the DAF to transition focus from IT operations to mission operations.

CACI is looking for a Senior Azure Cloud Platform Engineer who architects, automates, and maintains scalable infrastructure services across our IL5 Azure platform. This role treats governance, identity, and reliability as software problems, building declarative guardrails, automated remediation pipelines, and Infrastructure-as-Code (IaC) solutions.

Responsibilities

• Policy-as-Code & Drift Prevention: Author and deploy custom Azure Policies, Initiatives, and Management Group guardrails to enforce IL5 and Zero Trust baselines automatically across ECS.
• Identity Automation: Automate Privileged Identity Management (PIM) workflows, just-in-time access, and RBAC lifecycles using infrastructure automation.
• Zero Trust Platform Execution: Translate DoD Zero Trust capability targets and TASKORD requirements into operational cloud architectures and network configurations.
• Continuous Monitoring & Telemetry: Build Azure Automation Runbooks, Logic Apps, and live dashboards to automate telemetry collection and eliminate manual audit artifact capture.
• Automated Remediation Pipelines: Streamline triage and remediation workflows for Microsoft Defender for Cloud and Azure Advisor recommendations, managing cloud infrastructure resolution cycles.
• Baseline Architecture & Boundaries: Maintain boundary configurations for DoD SCCA, and Cloud Computing SRG alignment.
• CI/CD Quality Gates: Integrate infrastructure linting, template validation, and automated policy testing into Azure DevOps build and release pipelines.

Qualifications

Required:

• 15+ Years of relevant experience (Bachelor’s Degree in relevant field may be substituted for 5 years of relevant experience).
• Active Secret clearance
• DoD 8570/8140-compliant cybersecurity certification, such as CompTIA Security+ CE or an approved equivalent appropriate.
• Extensive hands-on experience engineering, deploying, and managing Microsoft Azure infrastructure in enterprise environments.
• Strong proficiency with Infrastructure-as-Code (IaC), including Azure Bicep, ARM templates, and/or Terraform.
• Experience implementing Azure Policy, Role-Based Access Control (RBAC), Privileged Identity Management (PIM), and Microsoft Entra ID.
• Experience developing and maintaining CI/CD pipelines using Azure DevOps, Git, and automated deployment processes.
• Working knowledge of cloud networking, including Azure Virtual Networks, Network Security Groups, Azure Firewall, Private Endpoints, DNS, and hybrid connectivity.
• Experience implementing cloud security controls, automated compliance monitoring and remediation using Microsoft Defender for Cloud, Azure Monitor, and Azure Advisor.
• Strong troubleshooting, scripting, and automation skills using PowerShell, Azure CLI, and/or Python.

Desired:

• Experience supporting DoD IL5 cloud environments and implementing security controls aligned with DISA STIGs, DoD Cloud Computing SRG, and Zero Trust requirements.
• Familiarity with DoD Secure Cloud Computing Architecture (SCCA), Risk Management Framework (RMF), and Authority to Operate (ATO) processes.
• Experience implementing enterprise-scale Azure governance using Management Groups, Azure Policy Initiatives, and automated compliance enforcement.
• Microsoft Azure certifications such as Azure Solutions Architect Expert (AZ-305), Azure Administrator Associate (AZ-104), or DevOps Engineer Expert (AZ-400).
• Experience supporting large-scale federal or Department of Defense cloud modernization programs.
• Demonstrated ability to collaborate across cloud engineering, cybersecurity, networking, and application teams to deliver secure,

What You Can Expect

A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer's missions and driven by a higher purpose - to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground - in your career and in our legacy.

Pay Range

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

Since this position can be worked in more than one location, the range shown is the national average for the position.

The proposed salary range for this position is:

$98,500-$206,800

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.