Senior Microsoft Cloud Security Engineer: Azure & Defender

CACI International Inc.; Arlington (VA); On-site; USD 132,000 - 290,000; Full time

Job summary

CA CI International Inc. is seeking a Senior Microsoft Cloud Security Engineer to lead security for our Microsoft cloud environment, including Azure, O365, and M365.

You will act as SME on secure designs, CA policies, and Defender suite optimization across enterprise-scale deployments. The role emphasizes deep expertise in Azure AD/Entra, CAPs, and Zero Trust, with responsibilities spanning data loss prevention, eDiscovery, and incident response.

Qualifications

• Requires DHS EOD Public Trust clearance eligibility.
• Advanced expertise deploying and securing Microsoft cloud platforms (Azure, Entra, Defender, Purview, Office 365, M365).
• Strong experience in Conditional Access, CAPs, and Zero Trust principles.

Responsibilities

• Secure the Microsoft cloud tenant and advise on architecture, design, and secure implementation for Azure, O365, and M365.
• Develop and enforce Conditional Access policies for personas, groups, and applications.
• Optimize Defender components: Defender for Endpoint, Defender for Cloud, Defender for Identity, Defender for Office 365.
• Implement Microsoft Purview data classification, DLP, and eDiscovery workflows.
• Design and run Kusto Query Language (KQL) queries for Azure Sentinel and log analytics.
• Lead vulnerability assessments, pen tests, and red/blue team engagements; guide governance best practices.

Skills

Azure Cloud Security

KQL

Zero Trust

Policy & Governance

Incident Response

Education

Master's Degree

Bachelor's degree

Tools

Defender Suite

Purview

Azure AD/Entra

Job description

CA CI International Inc. is seeking a Senior Microsoft Cloud Security Engineer to lead security for our Microsoft cloud environment, including Azure, O365, and M365.

You will act as SME on secure designs, CA policies, and Defender suite optimization across enterprise-scale deployments. The role emphasizes deep expertise in Azure AD/Entra, CAPs, and Zero Trust, with responsibilities spanning data loss prevention, eDiscovery, and incident response.