Senior Cloud Security Architect – Microsoft Azure & Defender

CACI; Arlington (VA); On-site; USD 132,000 - 290,000; Full time

Job summary

CACI seeks a Senior Microsoft Cloud Security Engineer to secure and optimize our Microsoft cloud tenant across Azure, Entra, Defender, Purview and Office 365 in a large enterprise environment.

You will lead policy development, implement advanced security controls, craft KQL queries for Sentinel, and collaborate with security, identity and incident response teams to ensure resilient, compliant operations.

Qualifications

• Ability to Obtain DHS EOD Public Trust Clearance.
• Expert-level hands-on experience deploying, managing, and securing Azure, Entra, Defender, Purview, Office 365, and Microsoft 365 in large enterprises.
• Deep understanding of Conditional Access Policies (CAPs), Azure AD/Entra, and Zero Trust principles.
• Proven track record implementing and managing the full Defender ecosystem and Microsoft Purview (DLP, sensitivity labels, eDiscovery).
• Advanced proficiency writing KQL for detection, investigation, response, and reporting.
• Active, expert-level certifications such as MSCE, Microsoft 365 Admin Expert, Cybersecurity Architect Expert, AZ-900/500/SC-900/100/200/300/400/401.
• Cybersecurity certifications: Security+.

Responsibilities

• Secure and optimize the Microsoft cloud tenant across Azure, Entra, Defender, Purview, and Office 365.
• Lead development and enforcement of Conditional Access Policies for various personas and applications.
• Optimize Defender for Endpoint, Defender for Cloud, Defender for Identity, and Defender for Office 365.
• Design and implement Microsoft Purview data classification, DLP, and eDiscovery workflows.
• Develop and run KQL queries for Azure Sentinel, Defender, and log analytics.
• Perform vulnerability assessments, penetration tests, and red/blue team engagements to remediate controls.
• Guide cross-functional teams on security controls, policies, and governance.

Skills

Public Trust Clearance

Zero Trust

KQL

Incident Response

Time Management

Written & Verbal Communication

Education

Master’s Degree

Bachelor’s degree

Tools

Microsoft Defender suite

Microsoft Purview

Azure AD/Entra

Office 365 / M365

Azure Sentinel

Kusto Query Language (KQL)

Job description

CACI seeks a Senior Microsoft Cloud Security Engineer to secure and optimize our Microsoft cloud tenant across Azure, Entra, Defender, Purview and Office 365 in a large enterprise environment.

You will lead policy development, implement advanced security controls, craft KQL queries for Sentinel, and collaborate with security, identity and incident response teams to ensure resilient, compliant operations.