Senior Network, Cloud & DevSecOps Engineer

CACI International Inc; Washington (District of Columbia); On-site; USD 105,000 - 231,000; Full time

Job summary

CA CI International Inc. is actively seeking a Network/Cloud Engineer to evaluate cloud architectures, CI/CD pipelines, and security controls for FEMA ITSA 3.0, guiding modernization and secure deployment across AWS/Azure/hybrid environments.

The role emphasizes DevSecOps maturity, IAM patterns, and policy-compliant infrastructure management. The position requires deep expertise in cloud platforms, IaC, service meshes, and zero-trust security, with a focus on delivering reliable, compliant

Qualifications

• Bachelor's degree and 15+ years of infrastructure, cloud, and security engineering experience across hybrid cloud and on-premises environments.
• Hands-on experience architecting and implementing solutions on AWS and/or Azure including core services (compute, storage, networking, databases, security)
• Demonstrated expertise designing and implementing CI/CD pipelines, DevSecOps workflows, and automated deployment strategies
• Proficiency with Infrastructure-as-Code tools (Terraform, CloudFormation, ARM templates, Ansible, or similar)
• Deep understanding of security control implementation across cloud and hybrid environments
• Experience assessing technical maturity, identifying gaps, and recommending practical modernization strategies
• Ability to obtain DHS EOD clearance

Responsibilities

• Evaluate cloud hosting architectures across AWS, Azure, and hybrid environments including compute, storage, networking, and managed services utilization
• Assess cloud-native design patterns, serverless adoption, containerization maturity, and platform-as-a-service (PaaS) opportunities
• Review multi-region and multi-availability zone strategies for high availability and disaster recovery
• Evaluate environment design across development, test, staging, and production including environment parity and configuration drift
• Identify cloud cost optimization opportunities including rightsizing, reserved capacity, and architectural efficiency
• Assess alignment with FedRAMP requirements, cloud security best practices, and DHS cloud policies
• Review CI/CD pipelines including build automation, testing frameworks, and deployment orchestration
• Assess artifact management practices, container registries, and software composition analysis
• Evaluate deployment strategies including blue-green deployments, canary releases, rolling updates, and rollback procedures
• Review test automation coverage including unit testing, integration testing, security testing (SAST/DAST), and performance testing
• Assess DevSecOps maturity including security integration within development workflows, shift-left security practices, and automated compliance validation
• Identify pipeline bottlenecks, manual handoffs, and opportunities to accelerate delivery velocity while maintaining security and quality
• Evaluate Infrastructure-as-Code (IaC) adoption using tools such as Terraform, CloudFormation, ARM templates, or similar platforms
• Assess configuration management practices, version control discipline, and code review processes for infrastructure
• Review environment provisioning automation, infrastructure testing, and policy-as-code implementation
• Evaluate immutable infrastructure patterns, container orchestration (Kubernetes, ECS, AKS), and declarative configuration approaches
• Identify opportunities to reduce configuration drift, improve environment consistency, and enhance infrastructure reliability through automation
• Assess Identity and Access Management (IAM) patterns, role-based access control (RBAC), and least-privilege implementation
• Evaluate Multi-Factor Authentication (MFA) enforcement, privileged access management (PAM), and secrets management practices
• Review Security Information and Event Management (SIEM) integration, centralized logging coverage, and log retention compliance
• Assess alerting mechanisms, threat detection capabilities, and Security Orchestration, Automation and Response (SOAR) maturity
• Evaluate incident response preparedness, playbook documentation, and security operations center (SOC) integration
• Review vulnerability management practices including scanning frequency, remediation workflows, and patch management automation
• Assess compliance with NIST SP 800-53 security controls, Risk Management Framework (RMF) requirements, and continuous monitoring practices
• Recommend adoption of API gateways for centralized API management, traffic control, and security policy enforcement
• Evaluate service mesh opportunities (Istio, Linkerd, AWS App Mesh) to improve microservices observability, security, and resilience
• Assess automation platforms and orchestration tools that can improve operational efficiency and reduce manual toil
• Identify opportunities to leverage managed services, serverless computing, and event-driven architectures
• Recommend container orchestration, service discovery, and distributed tracing implementations
• Advise on interoperability improvements through standardized APIs, event streaming, and asynchronous messaging patterns

Skills

Cloud architecture

CI/CD pipelines

DevSecOps

Security assessment

FedRAMP RMF

Education

Bachelor's degree

Tools

Terraform

CloudFormation

ARM templates

Ansible

Kubernetes

Job description

CA CI International Inc. is actively seeking a Network/Cloud Engineer to evaluate cloud architectures, CI/CD pipelines, and security controls for FEMA ITSA 3.0, guiding modernization and secure deployment across AWS/Azure/hybrid environments.

The role emphasizes DevSecOps maturity, IAM patterns, and policy-compliant infrastructure management. The position requires deep expertise in cloud platforms, IaC, service meshes, and zero-trust security, with a focus on delivering reliable, compliant