Manager, Cloud Engineering Lead

LA28 (Web); Los Angeles (CA); On-site; USD 88,000 - 125,000; Full time

Job summary

LA28 (Web) in Los Angeles is looking for a Cloud Architect to design and manage Google Cloud Platform infrastructure, ensuring secure and compliant API integrations. The role involves collaboration across tech teams, implementing Zero Trust architecture, and advising on best security practices.

Candidates should have a Bachelor's in Computer Science or Engineering, 5+ years of relevant experience, and expertise in GCP and Microsoft Entra. This position offers a base salary ranging from $88,000.00 to $125,000.00 annually.

Qualifications

• 5+ years of experience architecting cloud infrastructure and API integrations.
• Experience managing Microsoft Entra ID.
• Proven leadership in end-to-end lifecycle management.

Responsibilities

• Design and manage Google Cloud Platform infrastructure.
• Develop and manage complex API integrations.
• Advise on security best practices for SaaS applications.

Skills

Architecting cloud infrastructure

Developing API integrations

Identity engineering tasks

Cloud automation skills

Cross-functional collaboration

Problem-solving skills

Education

Bachelor’s degree in Computer Science or related field

Tools

Google Cloud Platform (GCP)

Microsoft Entra

Python

PowerShell

Job description

LA28 does not provide relocation assistance.

LA28 is the independent, non‑profit, privately funded organizing committee for the Los Angeles 2028 Olympic and Paralympic Games. The organization’s mission is to create an unparalleled experience for athletes, fans, partners, and the community.

Key Responsibilities:

• Design, deploy, and manage Google Cloud Platform (GCP) infrastructure to support application team initiatives.
• Develop and manage complex API integrations between LA28 enterprise systems, SaaS platforms, and custom applications.
• Execute identity engineering tasks for Microsoft Entra, including app registrations, SSO integrations, and identity automation.
• Establish SaaS and platform hardening controls in collaboration with the Cyber Security team.
• Apply industry best practices for hardening IaaS/PaaS deployments, SaaS applications, and custom applications.
• Advise internal stakeholders on security best practices for existing or line‑of‑business SaaS applications.
• Design and deploy single‑sign‑on integration patterns using Microsoft Entra, ensuring alignment with LA28’s architecture principles and cybersecurity controls.
• Define and implement cloud integration strategies that adhere to organizational security policies, Zero Trust principles, and enterprise architecture standards.
• Maintain partner and vendor relationships, ensuring B2B integrations remain secure, compliant, and operational with proper monitoring and lifecycle oversight.
• Develop and maintain documentation, including SOPs, runbooks, integration standards, data‑flow diagrams, user journeys, and operational readiness guides.
• Lead technical integration work for cloud applications, conduct requirements gathering through secure design, engineering, deployment, and operational handoff.
• Collaborate with applications and architecture teams to develop secure, scalable integrations between enterprise systems, SaaS applications, IAM platforms, and security tooling (SIEM/SOC pipelines, logging, monitoring).
• Analyze application and business processes to streamline user access flows, portal access, enforce policy controls, and build automation that improves reliability and compliance.

Qualifications:

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or equivalent experience.
• 5+ years of experience architecting cloud infrastructure (specifically GCP or similar IaaS/PaaS) and engineering complex enterprise API integrations, with hands‑on automation skills using scripting (Python, PowerShell) or IaC.
• 3-5+ years of experience managing Microsoft Entra ID (Enterprise App Registrations, SSO, OAuth/OIDC) and implementing Zero Trust architecture, including SaaS security hardening and collaboration with cybersecurity teams for SIEM/SOC integrations.
• Demonstrated leadership in end‑to‑end lifecycle management, overseeing infrastructure and application onboarding, secure design, structured deployment practices (UAT, change management, release cycles), and operational readiness.
• Proven ability to drive cross‑functional engineering efforts, acting as the technical integration bridge across Architecture, Security, IAM, Applications, PMO, and Operations teams, supported by strong technical project management skills.
• Experience with operational automation and workflow design, including the creation of approval flows, triggers, and guardrails that improve reliability and enforce enterprise policies.
• Strong foundational understanding of enterprise networking protocols (DNS, DHCP, routing, VLANs, ACLs, TCP/UDP) as they relate to cloud connectivity and secure integrations.
• Additional Useful Training: Zero Trust architecture, SIEM onboarding (Sentinel/Splunk), modern auth (OIDC/OAuth/FIDO2), cloud security fundamentals, API lifecycle management / RESTful architecture.
• Preferred Certifications: GCP (Professional Cloud Architect, Associate Cloud Engineer), AWS (Solutions Architect – Professional or Solutions Architect/SysOps Associate), or Azure (Solutions Architect – Expert or Azure Administrator Associate). ITIL v3/v4/v5 are a plus.

Physical Requirements and Working Conditions:

• Available to work onsite in a downtown Los Angeles office.
• The majority of work will be conducted in an office setting, requiring extended periods of time using computers, phones, and other office equipment.
• Employees must be able to work efficiently in an open floorplan cubicle environment.
• Hours may vary, including evenings, weekends, and holidays, especially during peak event periods.
• Performance of other duties as required; the role will evolve over time and may include operational responsibilities during the Olympic and Paralympic Games.
• Extremely detail‑oriented with excellent analytical and presentation skills, including the ability to translate complex cloud architectures and API integrations into clear visualizations and data‑flow diagrams for stakeholders.
• Strong written, oral, and interpersonal communication skills, with a proven ability to collaborate cross‑functionally and act as a trusted subject‑matter expert (SME) and advisor within the technology team.
• Well‑developed problem‑solving skills and the ability to work independently, combined with a forward‑looking mindset and an interest in leveraging AI tools to accelerate scripting, automation, and operational efficiencies.
• High level of adaptability in a constantly evolving, fast‑paced, and entrepreneurial environment.

Salary Range:

The annual base salary range for this position is $88,000.00 – $125,000.00. All compensation remains subject to final determination based on individual candidate qualifications, experience, and other reasonable criteria consistent with LA28’s operational business needs and applicable law.

EEO Statement:

LA28 is committed to fair and unbiased recruitment procedures, providing equal opportunity for employment free from discrimination on the basis of religion, race, sex, age, sexual orientation, disability, color, ethnic or national origin, or any other protected classification. LA28 will consider qualified applicants with criminal histories in accordance with the Los Angeles Fair Chance Initiative for Hiring Ordinance and all applicable laws.