Senior Azure & Microsoft 365 Cloud Security Engineer

CACI International Inc; Arlington (VA); On-site; USD 132,000 - 290,000; Full time

Job summary

CACI International Inc in Arlington, VA seeks a Senior Microsoft Cloud Security Engineer to lead security across Azure, Entra, Defender, Purview, and Microsoft 365. You’ll partner with security engineers, cloud architects, identity teams, and incident responders to keep our tenant resilient and compliant.

Responsibilities include designing CA policies, optimizing Defender suites, implementing Purview, and crafting KQL queries for Sentinel. DHS EOD clearance ability is required or pursued.

Qualifications

• Must have advanced expertise in securing Microsoft cloud platforms (Azure, Entra, Defender, Purview, Office 365, Microsoft 365).
• Deep knowledge of CAPs, Azure AD/Entra, and Zero Trust principles.
• Proven track record with Defender ecosystem and Purview (DLP, labels, eDiscovery).
• Strong ability to write complex KQL queries for detection and response.
• Active MS/ cybersecurity certifications and time-management skills.

Responsibilities

• Secure the Microsoft cloud tenant and advise on architecture, design, and secure implementations.
• Lead development and enforcement of Conditional Access Policies for personas, groups and apps.
• Optimize Defender for Endpoint, Cloud, Identity, and Office 365 integrations.
• Implement Purview data classification, DLP, and eDiscovery workflows.
• Design and run KQL queries for Azure Sentinel and related services.
• Review security controls via assessments, tests, and red/blue engagements.
• Guide teams on governance, policy, and compliance best practices.

Skills

Zero Trust principles

Policy governance

Threat detection

Time management

Written communication

Education

Master's Degree

Bachelor’s degree

Tools

Azure

Entra

Defender

Purview

Office 365

Microsoft 365

KQL

Job description

CACI International Inc in Arlington, VA seeks a Senior Microsoft Cloud Security Engineer to lead security across Azure, Entra, Defender, Purview, and Microsoft 365. You’ll partner with security engineers, cloud architects, identity teams, and incident responders to keep our tenant resilient and compliant.

Responsibilities include designing CA policies, optimizing Defender suites, implementing Purview, and crafting KQL queries for Sentinel. DHS EOD clearance ability is required or pursued.