Cloud Architect IV

Daimler Truck • Portland, OR

6d • Hybrid

About The Position

The Cloud Platform Engineering team designs, builds and operates the cloud foundation that powers Daimler Truck's connected vehicle services across North America. We own the Azure infrastructure - networking, compute, security, and observability - that ~9 feature teams and 7 shared services teams depend on daily. Our mission: reduce cognitive load on product teams by providing secure, self-service “paved roads” so they can ship faster without compromising governance.

We manage a hub-spoke Azure topology across multiple environments (DEV, QA, PROD) using Terraform, GitHub Actions CI/CD, and Kubernetes (AKS). We operate in a SAFe Agile framework with biweekly sprints and Program Increment planning. We believe in infrastructure-as-code as the single source of truth, security by default, and cross-team collaboration over gatekeeping.

Please note: This posting is considering only current IT applicants. For a limited time, some positions at DTNA will only be open to current department employees due to restructuring efforts across the organization. For specific questions, please contact your HR Business Partner.

Requirements

• Bachelors and 5+ years in cloud infrastructure engineering.
• 3+ years architecting production Azure environments at enterprise scale.
• Deep expertise in Terraform - module design, state file management (including imports, moves, and manual edits), monorepo patterns, cross-state dependencies via remote state, and CI/CD integration.
• Strong Azure networking knowledge - hub-spoke topology, Azure Firewall, ExpressRoute, VNet peering, NSGs, UDRs, Private Endpoints, DNS Resolver, Application Gateway (AGIC), and Front Door.
• Production Kubernetes (AKS) experience - cluster architecture, Helm, RBAC, ingress controllers (AGIC), network policies, persistent storage, node pool upgrades, and CRD management.
• Hands-on CI/CD pipeline design with GitHub Actions or equivalent - reusable workflows, environment promotion, security gates, and troubleshooting build agent/runner issues.
• Experience with secrets management - Azure Key Vault, HashiCorp Vault, CSI secret store drivers, GitHub Actions secrets, and certificate lifecycle management.
• Experience with observability platforms - Grafana, Prometheus, Loki, Kubecost, Azure Log Analytics, or equivalent.
• Scripting proficiency in BICEP, ARM, Bash, PowerShell, or Python for automation.
• Strong git skills - rebasing, merge conflict resolution, tag/release management, and commit history investigation.
• Security-first mindset - RBAC design, WAF, SD Elements compliance, Azure Policy, and Azure Defender.
• Experience with site reliability practices - on-call rotations (PagerDuty or similar), war room coordination during outages, systematic troubleshooting under pressure, and blameless postmortem facilitation.
• Demonstrated ability to negotiate technical decisions with peer architects and SMEs.
• Experience planning and executing large-scale migrations involving multiple teams and stakeholders.
• Proven ability to build technical roadmaps.
• An attached resume is required.

Nice To Haves

• Microsoft Certified: Azure Administrator Associate (AZ-104).
• Experience with event-driven architectures - Azure Event Hubs, Apache Kafka, Apache Flink.
• Experience with APIM - API gateway architecture, policy configuration, and integration patterns for internal and external consumers.
• Experience with hybrid connectivity - on-premises integration, ExpressRoute circuits, conditional DNS forwarding, and Point-to-Site VPN.
• Experience with SAFe Agile methodology - PI Planning, sprint ceremonies, story estimation, and feature board co-creation.
• Track record of identifying technical debt and driving adoption of new technologies through proof-of-concepts and phased rollout.
• Familiarity with GitOps patterns and platform engineering principles, including internal developer platforms and golden paths.
• Familiarity with Bicep or Azure CLI as supplementary IaC tools alongside Terraform.
• HashiCorp Certified: Terraform Associate or above.
• Experience with AWS (VPC, EKS, IAM, CloudFormation/CDK) - ability to design cross-cloud or compare platform patterns across providers.
• Background in software development and SDLC (Java, Go, or similar) - understanding of application runtime concerns, debugging, code scanning (SAST/DAST), unit and integration testing, static analysis, artifact management, and how infrastructure decisions impact application performance and reliability.
• Background in automotive, manufacturing, or IoT industries with high-throughput telemetry workloads.
• Familiarity with enterprise ITSM tools - ServiceNow or similar platforms for change management and incident coordination.
• Experience with VM lifecycle management - Azure Update Manager and patching strategies.
• Experience with Azure PaaS services - App Service Plans, Function Apps, Web Apps, and Azure VPN Gateway.
• Microsoft Certified: Azure Solutions Architect Expert (AZ-305).
• Contributions to internal module libraries or open source Terraform modules.

Responsibilities

• Designs, builds, and operates the cloud foundation for Daimler Truck's connected vehicle services.
• Owns the Azure infrastructure, including networking, compute, security, and observability.
• Provides secure, self-service "paved roads" to reduce cognitive load on product teams.
• Manages a hub-spoke Azure topology across multiple environments (DEV, QA, PROD) using Terraform, GitHub Actions CI/CD, and Kubernetes (AKS).
• Operates within a SAFe Agile framework with biweekly sprints and Program Increment planning.
• Negotiates technical decisions with peer architects and SMEs, communicating trade-offs, building consensus, and driving alignment.
• Plans and executes large-scale migrations.
• Builds technical roadmaps, translating business priorities and technical debt into sequenced, achievable plans.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior