Defender for Cloud is part of every subscription. You can activate resources in Azure for MDFC monitoring but there is no option to deploy MDFC itself. Activating Azure resources for MDFC is usually performed by a policy. Often that policy is set at the root subscription. The result of that policy is often seen at the local resource as an extension. I assume you could manage the policy as a template.
Unless I am missing something here. I don't work with DevOps myself. Can you share a sample of what you have seen so far?