Senior Cloud Engineer

Job Title: Senior Cloud Engineer Job Category: Information Technology Time Type: Full time Minimum Clearance Required to Start: TS/SCI with Polygraph Employee Type: Regular Percentage of Travel Required: None Type of Travel: None * * *

The Opportunity:

CACI is seeking a hands-on Senior CloudDoors Engineer to sustain and enhance CloudDoors, an existing enterprise cloud provisioning and governance service supporting mission customers. This engineer will focus on secure cloud account onboarding and lifecycle management, automated provisioning workflows, multi-cloud administration, cloud policy enforcement, cost controls, and integration with customer request and identity services.
Responsibilities:

• Operate, maintain, and enhance CloudDoors, the enterprise service supporting cloud account provisioning, governance, and lifecycle management for mission customers.

• Provision, configure, and support approved cloud accounts, subscriptions, and associated infrastructure in AWS and other authorized cloud service provider environments.

• Develop, maintain, and troubleshoot automated account-provisioning workflows, infrastructure as code (IaC), and API-based integrations using tools such as Terraform, CloudFormation, Python, Bash, and PowerShell.

• Administer, upgrade, configure, and troubleshoot cloud-management capabilities, including account onboarding, governance policies, budgets, and service reliability.

• Integrate CloudDoors workflows with customer request, approval, and identity services, including ServiceNow, UView, single sign-on (SSO), and role-based access control (RBAC), as applicable.

• Apply and validate cloud guardrails for identity and least-privilege access, networking, resource tagging, security baselines, approved services, and account-level policies.

• Support FinOps activities through cloud cost monitoring, budgets and alerts, utilization reporting, cost allocation, and identification of preventable spending.

• Maintain source-controlled provisioning automation, test changes, and follow approved configuration and change-management procedures to protect production service stability.

• Troubleshoot provisioning failures, access issues, cloud configuration problems, and customer support tickets; identify root causes and implement lasting corrective actions.

• Maintain operational documentation, troubleshooting runbooks, architecture and configuration records, and evidence supporting cybersecurity and authorization requirements.

• Coordinate with cloud, cybersecurity, service management, and mission teams to resolve issues and support onboarding of new customers and services.

• Evaluate prospective cloud-provider integrations, including new platform or tenant configurations, and validate technical and security readiness before enabling provisioning.

You will excel in this role if you are:

• A hands-on engineer who takes ownership of complex problems and can keep mission-critical cloud provisioning and governance services reliable.
• Comfortable balancing cloud engineering, automation, platform administration, customer support, and ongoing operational demands.
• Skilled at troubleshooting integrations spanning cloud accounts, Kion, identity, networking, APIs, and service-request workflows.
• Security-minded and familiar with building cloud governance, least-privilege access, and policy enforcement into repeatable processes.
• Effective at collaborating across teams, explaining technical decisions, and maintaining accurate, useful documentation.

Qualifications:
Required: 

• U.S. citizenship and a current TS/SCI security clearance with CI or FSP.

• Hands-on experience provisioning, configuring, administering, and troubleshooting cloud accounts or infrastructure in AWS, Azure, or comparable enterprise cloud environments.

• Experience implementing and supporting automated cloud provisioning, configuration management, infrastructure as code, or API-based integrations.

• Experience using automation and scripting tools such as Terraform, CloudFormation, Ansible, Python, Bash, PowerShell, or equivalent technologies.

• Working knowledge of cloud identity and access management (IAM), RBAC, cloud networking, security controls, and logging.

• Familiarity with with enterprise cloud account governance, centralized policy enforcement, resource tagging, and secure configuration baselines.

• Experience supporting production platforms, responding to customer requests and incidents, performing root-cause analysis, and documenting resolutions.

• Ability to troubleshoot cloud services, management platforms, integrations, operating systems, and automation workflows.

• Ability to collaborate with engineering, cybersecurity, identity, service-management, and customer stakeholders in a secure environment.

• Strong technical communication, documentation, and problem-solving skills with the ability to work independently.

• Must successfully meet all customer background investigation and access requirements prior to employment.

Desired:
• Direct experience with Kion administration, account provisioning, governance policies, cost controls, reporting, troubleshooting, or platform upgrades.

• Experience with AWS Organizations, AWS GovCloud, Azure subscription management, enterprise landing zones, or cloud account-vending patterns.

• Experience integrating ServiceNow request workflows, UView or comparable identity platforms, SSO, SAML/OIDC, federation, and RBAC.

• Experience with FinOps practices, cost allocation, cloud budgeting, chargeback/showback, and cost optimization.

• Familiarity with federal cloud security and authorization requirements such as NIST RMF, NIST SP 800-53, ICD 503, or ATO support.

• Experience evaluating or onboarding additional cloud service providers, including Oracle Cloud Infrastructure, following approved integration and operational validation.

• Experience with monitoring, reporting, and operational support tooling for enterprise cloud environments.

• Relevant certifications in AWS, Azure, Terraform, cloud architecture, cybersecurity, or related fields.

-

What You Can Expect:

 A culture of integrity.

At CACI, we place character and innovation at the center of everything we do. As a valued team member, you’ll be part of a high-performing group dedicated to our customer’s missions and driven by a higher purpose – to ensure the safety of our nation.

An environment of trust.

CACI values the unique contributions that every employee brings to our company and our customers - every day. You’ll have the autonomy to take the time you need through a unique flexible time off benefit and have access to robust learning resources to make your ambitions a reality.

A focus on continuous growth.

Together, we will advance our nation's most critical missions, build on our lengthy track record of business success, and find opportunities to break new ground — in your career and in our legacy.

Pay Range:

There are a host of factors that can influence final salary including, but not limited to, geographic location, Federal Government contract labor categories and contract wage rates, relevant prior work experience, specific skills and competencies, education, and certifications. Our employees value the flexibility at CACI that allows them to balance quality work and their personal lives. We offer competitive compensation, benefits and learning and development opportunities. Our broad and competitive mix of benefits options is designed to support and protect employees and their families. At CACI, you will receive comprehensive benefits such as; healthcare, wellness, financial, retirement, family support, continuing education, and time off benefits.

Since this position can be worked in more than one location, the range shown is the national average for the position.

The proposed salary range for this position is:

$90,300-$189,600

CACI is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, age, national origin, disability, status as a protected veteran, or any other protected characteristic.