Cloud Architect

ThoughtStorm; Durham (NC); On-site; USD 150,000 - 210,000; Full time

Job summary

ThoughtStorm is seeking a senior DevOps Architect to lead enterprise-scale cloud platform engineering across Azure subscriptions. You will design centralized CI/CD, policy-driven delivery, and secure software supply chains for large engineering teams in regulated industries.

Responsibilities include governance of deployment stacks, GitOps with FluxCD, OPA policy-as-code, and secure artifact signing with Sigstore, while mentoring senior engineers and aligning with security and compliance programs.

Qualifications

• Must have extensive enterprise-scale DevOps architecture experience.
• Experience delivering across Fortune-level organizations in regulated industries is required.
• Hands-on experience with Azure platform engineering and policy-as-code is essential.

Responsibilities

• Architect and govern centralized CI/CD platforms using Azure DevOps integrated with OPA policy enforcement.
• Design and implement enterprise infrastructure lifecycle management across multi-subscription Azure environments.
• Build and operate GitOps frameworks using FluxCD for large AKS clusters.
• Lead software supply chain security initiatives including Sigstore integration and SBOM automation pipelines.
• Architect secure workload environments leveraging Azure Confidential Computing for regulated use cases.
• Conduct resilience engineering experiments with Azure Chaos Studio across distributed microservices.
• Define and enforce DevSecOps standards and security controls across engineering teams.
• Collaborate with security, platform, and product teams to align DevOps with regulatory requirements and audit trails.
• Mentor senior engineers and establish best practices for GitOps, supply chain security, and policy-driven delivery.

Skills

Azure Deployment Stacks

Open Policy Agent

Sigstore

Azure Chaos Studio

Azure Confidential Computing

SBOM Automation Pipelines

FluxCD GitOps

Tools

Terraform

Bicep

Azure DevOps

FluxCD

OPA

Sigstore

Job description

- Azure Deployment Stacks — Enterprise-scale infrastructure lifecycle governance across hundreds of Azure subscriptions, including resource management, scoping, and deny assignment enforcement.

- Open Policy Agent (OPA) / Policy-as-Code — Design and enforcement of security and compliance policies embedded natively across CI/CD pipelines at enterprise scale (500+ engineering teams).

- Sigstore — Production-level implementation of artifact signing, verification, and software supply chain integrity pipelines across distributed engineering environments

- Azure Chaos Studio — Resilience engineering through controlled fault injection and distributed system failure experimentation across microservices and cloud-native workloads

- Azure Confidential Computing — Architecture and deployment of secure enclave workloads for high-security, regulated enterprise environments

- SBOM Automation Pipelines — End-to-end automated Software Bill of Materials generation, dependency visibility, and vulnerability tracking integrated into CI/CD workflows

- FluxCD GitOps Platform Engineering — Enterprise-grade GitOps-driven infrastructure delivery and cluster management for large-scale AKS environments

Required Experience:

- 10+ years of experience in DevOps architecture and cloud platform engineering.

- Demonstrated enterprise-scale delivery across Fortune-level organizations in finance, healthcare, retail, or technology

- Proven hands-on experience with all seven mandatory niche skills listed above — generalist profiles will not be considered - Experience supporting 500+ engineering teams or equivalent large-scale platform environments

- Background in regulated industries with strong understanding of compliance, audit, and security requirements

- Azure DevOps — Enterprise CI/CD platform design and management

- Infrastructure as Code — Terraform and/or Bicep at enterprise scale

- DevSecOps Architecture — Security-first pipeline design and governance

- Secure Artifact Signing Pipelines — Integration with modern supply chain security frameworks

Note

Key Responsibilities:

- Architect and govern centralized CI/CD platforms supporting large engineering organizations using Azure DevOps integrated with OPA policy-as-code enforcement

- Design and implement enterprise infrastructure lifecycle management using Azure Deployment Stacks across multi-subscription Azure environments

- Build and operate GitOps delivery frameworks using FluxCD for large-scale AKS cluster management

- Lead software supply chain security initiatives including Sigstore artifact signing and automated SBOM generation pipelines

- Architect secure workload environments leveraging Azure Confidential Computing for regulated and high-security use cases

- Conduct resilience engineering experiments across distributed microservices using Azure Chaos Studio

- Define and enforce DevSecOps standards, governance frameworks, and security controls across engineering teams

- Collaborate with security, platform, and product engineering teams to align DevOps strategy with enterprise compliance and regulatory requirements

- Mentor senior engineers and establish best practices for GitOps, supply chain security, and policy-driven delivery