Cloud Architect IV

Inside the Role The Cloud Platform Engineering team designs, builds and operates the cloud foundation that powers Daimler Truck's connected vehicle services across North America. We own the Azure infrastructure - networking, compute, security, and observability - that ~9 feature teams and 7 shared services teams depend on daily. Our mission: reduce cognitive load on product teams by providing secure, self-service “paved roads” so they can ship faster without compromising governance. We manage a hub-spoke Azure topology across multiple environments (DEV, QA, PROD) using Terraform, GitHub Actions CI/CD, and Kubernetes (AKS). We operate in a SAFe Agile framework with biweekly sprints and Program Increment planning. We believe in infrastructure-as-code as the single source of truth, security by default, and cross-team collaboration over gatekeeping. Please note: This posting is considering only current IT applicants. For a limited time, some positions at DTNA will only be open to current department employees due to restructuring efforts across the organization. For specific questions, please contact your HR Business Partner. Posting Information We provide a scheduled posting end date to assist our candidates with their application planning. While this date reflects our latest plans, it is subject to change, and postings may be extended or removed earlier than expected. We Take Care of Our Team Knowledge You Should Bring Bachelors and 5+ years in cloud infrastructure engineering, with 3+ years architecting production Azure environments at enterprise scale, is required. Deep expertise in Terraform - module design, state file management (including imports, moves, and manual edits), monorepo patterns, cross-state dependencies via remote state, and CI/CD integration. Strong Azure networking knowledge - hub-spoke topology, Azure Firewall, ExpressRoute, VNet peering, NSGs, UDRs, Private Endpoints, DNS Resolver, Application Gateway (AGIC), and Front Door. Production Kubernetes (AKS) experience - cluster architecture, Helm, RBAC, ingress controllers (AGIC), network policies, persistent storage, node pool upgrades, and CRD management. Hands-on CI/CD pipeline design with GitHub Actions or equivalent - reusable workflows, environment promotion, security gates, and troubleshooting build agent/runner issues. Experience with secrets management - Azure Key Vault, HashiCorp Vault, CSI secret store drivers, GitHub Actions secrets, and certificate lifecycle management. Experience with observability platforms - Grafana, Prometheus, Loki, Kubecost, Azure Log Analytics, or equivalent. Scripting proficiency in BICEP, ARM, Bash, PowerShell , or Python for automation. Strong git skills - rebasing, merge conflict resolution, tag/release management, and commit history investigation. Security-first mindset - RBAC design, WAF, SD Elements compliance, Azure Policy, and Azure Defender. Experience with site reliability practices - on-call rotations (PagerDuty or similar), war room coordination during outages, systematic troubleshooting under pressure, and blameless postmortem facilitation. Demonstrated ability to negotiate technical decisions with peer architects and SMEs - communicating trade-offs, building consensus, and driving alignment across teams with competing priorities. Experience planning and executing large-scale migrations involving multiple teams and stakeholders, including on-prem to cloud, major version upgrades, or service re-platforming. Proven ability to build technical roadmaps - translating business priorities and technical debt into sequenced, achievable plans with clear milestones and stakeholder buy-in. An attached resume is required. Exceptional Candidates Might Have Microsoft Certified: Azure Administrator Associate (AZ-104). Experience with event-driven architectures - Azure Event Hubs, Apache Kafka, Apache Flink. Experience with APIM - API gateway architecture, policy configuration, and integration patterns for internal and external consumers. Experience with hybrid connectivity - on-premises integration, ExpressRoute circuits, conditional DNS forwarding, and Point-to-Site VPN. Experience with SAFe Agile methodology - PI Planning, sprint ceremonies, story estimation, and feature board co-creation. Track record of identifying technical debt and driving adoption of new technologies through proof-of-concepts and phased rollout. Familiarity with GitOps patterns and platform engineering principles, including internal developer platforms and golden paths. Familiarity with Bicep or Azure CLI as supplementary IaC tools alongside Terraform. HashiCorp Certified: Terraform Associate or above. Experience with AWS (VPC, EKS, IAM, CloudFormation/CDK) - ability to design cross-cloud or compare platform patterns across providers. Background in software development and SDLC (Java, Go, or similar) - understanding of application runtime concerns, debugging, code scanning (SAST/DAST), unit and integration testing, static analysis, artifact management, and how infrastructure decisions impact application performance and reliability. Background in automotive, manufacturing, or IoT industries with high-throughput telemetry workloads. Familiarity with enterprise ITSM tools - ServiceNow or similar platforms for change management and incident coordination. Experience with VM lifecycle management - Azure Update Manager and patching strategies. Experience with Azure PaaS services - App Service Plans, Function Apps, Web Apps, and Azure VPN Gateway. Microsoft Certified: Azure Solutions Architect Expert (AZ-305). Contributions to internal module libraries or open source Terraform modules. Where We Work This position is open to applicants who can work in (or relocate to) the following location(s)- Portland, OR US. Relocation assistance is not available for this position. Schedule Type: Hybrid (4 days per week in-office / 1 day remote). This schedule builds our #OneTeamBestTeam culture, provides an unparalleled customer experience, and creates innovative solutions through in-person collaboration. At Daimler Truck North America, we recognize our world is changing faster than ever before. By listening to the needs of today, we’re building to solve with cutting-edge solutions in sustainability and future driving technology across electric, hydrogen and autonomous. These solutions, backed by years of innovative success and achievement, continue DTNA’s legacy as the undisputed industry leader. Our evolving brand portfolio is second to none, including Freightliner Trucks, Western Star, Demand Detroit, Thomas Built Buses, Freightliner Custom Chassis, and Financial Services. Together, we work as one team towards our envisioned future – building a cleaner, safer and more efficient tomorrow for all. That is what we are working toward - for all who keep the world moving. Additional Information This position is not open for Visa sponsorship or to existing Visa holders Applicants must be legally authorized to work permanently in the country the position is located in at the time of application Final candidate must successfully complete a criminal background check Final candidate may be required to successfully complete a pre-employment drug screen Contractors, professional services, or other contingent workers should confirm with their local agency if they are eligible to apply for FTE positions EEO - Disabled/Veterans Daimler Truck North America is committed to workforce inclusion and providing an environment where equal employment opportunities are available to all applicants and employees without regard to race, color, sex (including pregnancy), religion, national origin, age, marital status, family relationship, disability, sexual orientation, gender identity and expression (including transgender and transitioning status), genetic information, or veteran status. For an accommodation or special assistance with applying for a posted position, please contact our Human Resources department at 503-745-8982 or toll free 800-206-3369. For TTY/TDD enabled call 503-745-2137 or toll free 866-355-6935.