> Markdown version of [/jobs/ext/3762162-lead-azure-architecture-sme](https://www.wearedevelopers.com/jobs/ext/3762162-lead-azure-architecture-sme). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Lead Azure Architecture SME

- **Company:** Seneca Resources
- **Location:** Fairfax, VA, United States
- **Experience:** Expert
- **Salary:** $166,400.0 - $208,000.0
- **Contract:** Temporary to permanent
- **Skills:** Microsoft Azure, Cloud Computing, Cloud Computing Security, Cloud Database, Cloud Engineering, CompTIA Security+, Continuous Integration, DevOps, Disaster Recovery, Github, Identity and Access Management, IP Routing, Subnetting, Virtual Private Networks (VPN), Microsoft Visio, Routing, Windows PowerShell, Azure Active Directory, Ansible, Scripting, Load Balancing, Firewalls (Computer Science), Infrastructure Automation Frameworks, Information Technology, Bicep, Patch Management, Hardware Infrastructure, Terraform, Data Pipelines, Azure Resource Manager
- **Published:** October 15, 2026
- **Apply:** https://www.clearancejobs.com/jobs/9241308/lead-azure-architecture-sme

## About the Role

* Bachelor's degree or higher in Systems Engineering, Computer Science, Information Technology, or a closely related technical field., * 10+ years of related IT/cloud architecture experience.
 * 5+ years of hands-on experience in Azure IL5/IL6 environments.
 * Strong experience designing and implementing network solutions within Azure IL5/IL6 environments.
 * Experience with Microsoft Entra ID and Microsoft Entra Monitor.
 * Extensive knowledge of Azure network architecture and Entra architecture.
 * Advanced scripting experience with Ansible and/or PowerShell.
 * Understanding of CI/CD concepts and secure pipeline development within controlled cloud environments.

Azure Networking Expertise

Candidates should have strong hands-on experience with:

 * Azure VNets and subnets
 * NSGs
 * Routing and route tables
 * Azure Firewall
 * Load balancing
 * ExpressRoute
 * VPN
 * Cloud-to-on-premises connectivity

Key Candidate Profile

The ideal candidate is a senior Azure architect/SME who can operate at both the architecture and hands-on engineering levels. They should be comfortable leading customer-facing technical discussions while also designing Azure networking, Entra architecture, migration strategies, IaC solutions, and secure cloud infrastructure.

Top priorities:
Azure IL5/IL6 + Azure Networking + Entra ID/Architecture + Architecture Leadership + Security+ + Active Secret + Government/Federal experience.
Required Certification

 * CompTIA Security+ required to satisfy DoD 8570.01M IAT Level II requirements.
 * Additional work-dependent certifications are a plus.

Preferred Qualifications

Experience in two or more of the following is preferred:

 * Azure migration solutions, including Azure Site Recovery
 * Cloud-based database systems
 * Microsoft Visio for architecture diagrams
 * Agile/Scrum environments
 * Federal or State government environments

## Description

You will lead architecture decisions, support complex migrations, engage directly with government stakeholders, and provide hands-on technical leadership across highly controlled Azure environments.
Major Responsibilities

 * Lead end-to-end Azure architecture and solution design, including detailed Visio architecture diagrams and technical documentation.
 * Lead technical presentations, architecture discussions, and solution deep dives with government customers and stakeholders.
 * Plan and execute complex migrations using Azure Site Recovery (ASR), including dependency mapping, failover testing, and cutover activities.
 * Manage and optimize replication traffic across ExpressRoute/VPN and design isolated VNets for migration testing and validation.
 * Serve as the technical point of contact for Azure networking, driving troubleshooting, architecture decisions, and technical direction.
 * Design and implement secure, resilient connectivity between Azure and on-premises environments.
 * Architect and manage VNets, subnets, NSGs, Azure Firewall, VPN/ExpressRoute, load balancers, routing, and other Azure networking components.
 * Lead security hardening across cloud and on-premises infrastructure while supporting system and workload migrations.
 * Design and implement Microsoft Entra architecture, including identity governance, Conditional Access, role management, and cross-tenant integrations.
 * Build and manage Azure infrastructure using DevOps and Infrastructure-as-Code (IaC) practices, including Terraform, Bicep, ARM templates, Azure DevOps, and GitHub Actions.
 * Mentor System Administrators on account administration, VM configuration, monitoring, patch management, and operational support.
 * Oversee system changes and ensure compliance with DISA STIGs, hardening requirements, and organizational security controls.