> Markdown version of [/jobs/ext/4476147-senior-azure-cloud-platform-engineer](https://www.wearedevelopers.com/jobs/ext/4476147-senior-azure-cloud-platform-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Azure Cloud Platform Engineer - **Company:** Caci Inc - **Location:** United States (Remote available) - **Experience:** Expert - **Salary:** $98,500.0 - $206,800.0 - **Contract:** Permanent contract - **Skills:** Microsoft Azure, Cloud Computing, Cloud Computing Security, Cloud Engineering, CompTIA Security+, Continuous Integration, DevOps, Domain Name System (DNS), Identity and Access Management, Information Technology Operations, Python (Programming Language), Network Security, Network Configuration and Change Management, Windows PowerShell, Role-Based Access Control, Release Management, Azure Active Directory, Zero Trust Network Access, Runbook, Policy as Code, Azure Automation, Scripting, Cloud Platform System, Microsoft Power Automate, Cloud Monitoring, Software Troubleshooting, Azure Powershell, Firewalls (Computer Science), Git, SC Clearance, Infrastructure Automation Frameworks, Deployment Automation, Bicep, Terraform - **Published:** October 25, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=a4b43ab7c29c60a2 ## About the Role * 15+ Years of relevant experience (Bachelor's Degree in relevant field may be substituted for 5 years of relevant experience). * Active Secret clearance * DoD 8570/8140-compliant cybersecurity certification, such as CompTIA Security+ CE or an approved equivalent appropriate. * Extensive hands-on experience engineering, deploying, and managing Microsoft Azure infrastructure in enterprise environments. * Strong proficiency with Infrastructure-as-Code (IaC), including Azure Bicep, ARM templates, and/or Terraform. * Experience implementing Azure Policy, Role-Based Access Control (RBAC), Privileged Identity Management (PIM), and Microsoft Entra ID. * Experience developing and maintaining CI/CD pipelines using Azure DevOps, Git, and automated deployment processes. * Working knowledge of cloud networking, including Azure Virtual Networks, Network Security Groups, Azure Firewall, Private Endpoints, DNS, and hybrid connectivity. * Experience implementing cloud security controls, automated compliance monitoring, and remediation using Microsoft Defender for Cloud, Azure Monitor, and Azure Advisor. * Strong troubleshooting, scripting, and automation skills using PowerShell, Azure CLI, and/or Python. Desired: * Experience supporting DoD IL5 cloud environments and implementing security controls aligned with DISA STIGs, DoD Cloud Computing SRG, and Zero Trust requirements. * Familiarity with DoD Secure Cloud Computing Architecture (SCCA), Risk Management Framework (RMF), and Authority to Operate (ATO) processes. * Experience implementing enterprise-scale Azure governance using Management Groups, Azure Policy Initiatives, and automated compliance enforcement. * Microsoft Azure certifications such as Azure Solutions Architect Expert (AZ-305), Azure Administrator Associate (AZ-104), or DevOps Engineer Expert (AZ-400). * Experience supporting large-scale federal or Department of Defense cloud modernization programs. * Demonstrated ability to collaborate across cloud engineering, cybersecurity, networking, and application teams to deliver secure ## Description On the EITaaS program, CACI will deliver enhanced capabilities and services to implement and operate an enterprise ITSM solution, enterprise service desk, endpoint management and security solution, as well as CONUS/OCONUS field support and life cycle support for end user devices to enable the DAF to transition focus from IT operations to mission operations., Policy-as-Code & Drift Prevention: Author and deploy custom Azure Policies, Initiatives, and Management Group guardrails to enforce IL5 and Zero Trust baselines automatically across ECS. * Identity Automation: Automate Privileged Identity Management (PIM) workflows, just-in-time access, and RBAC lifecycles using infrastructure automation. * Zero Trust Platform Execution: Translate DoD Zero Trust capability targets and TASKORD requirements into operational cloud architectures and network configurations. * Continuous Monitoring & Telemetry: Build Azure Automation Runbooks, Logic Apps, and live dashboards to automate telemetry collection and eliminate manual audit artifact capture. * Automated Remediation Pipelines: Streamline triage and remediation workflows for Microsoft Defender for Cloud and Azure Advisor recommendations, managing cloud infrastructure resolution cycles. * Baseline Architecture & Boundaries: Maintain boundary configurations for DoD SCCA, and Cloud Computing SRG alignment. * CI/CD Quality Gates: Integrate infrastructure linting, template validation, and automated policy testing into Azure DevOps build and release pipelines.