Manager, Cloud Engineering Lead

LA28 does not provide relocation assistance.

LA28 is the independent, non‑profit, privately funded organizing committee for the Los Angeles 2028 Olympic and Paralympic Games. The organization’s mission is to create an unparalleled experience for athletes, fans, partners, and the community.

• Design, deploy, and manage Google Cloud Platform (GCP) infrastructure to support application team initiatives.
• Develop and manage complex API integrations between LA28 enterprise systems, SaaS platforms, and custom applications.
• Execute identity engineering tasks for Microsoft Entra, including app registrations, SSO integrations, and identity automation.
• Establish SaaS and platform hardening controls in collaboration with the Cyber Security team.
• Apply industry best practices for hardening IaaS/PaaS deployments, SaaS applications, and custom applications.
• Advise internal stakeholders on security best practices for existing or line‑of‑business SaaS applications.
• Design and deploy single‑sign‑on integration patterns using Microsoft Entra, ensuring alignment with LA28’s architecture principles and cybersecurity controls.
• Define and implement cloud integration strategies that adhere to organizational security policies, Zero Trust principles, and enterprise architecture standards.
• Maintain partner and vendor relationships, ensuring B2B integrations remain secure, compliant, and operational with proper monitoring and lifecycle oversight.
• Develop and maintain documentation, including SOPs, runbooks, integration standards, data‑flow diagrams, user journeys, and operational readiness guides.
• Lead technical integration work for cloud applications, conduct requirements gathering through secure design, engineering, deployment, and operational handoff.
• Collaborate with applications and architecture teams to develop secure, scalable integrations between enterprise systems, SaaS applications, IAM platforms, and security tooling (SIEM/SOC pipelines, logging, monitoring).
• Analyze application and business processes to streamline user access flows, portal access, enforce policy controls, and build automation that improves reliability and compliance.

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, Engineering, or equivalent experience.
• 5+ years of experience architecting cloud infrastructure (specifically GCP or similar IaaS/PaaS) and engineering complex enterprise API integrations, with hands‑on automation skills using scripting (Python, Power Shell) or IaC.
• 3-5+ years of experience managing Microsoft Entra  (Enterprise App Registrations, SSO, OAuth/OIDC) and implementing Zero Trust architecture, including SaaS security hardening and collaboration with cybersecurity teams for SIEM/SOC integrations.
• Demonstrated leadership in end‑to‑end lifecycle management, overseeing infrastructure and application onboarding, secure design, structured deployment practices (UAT, change management, release cycles), and operational readiness.
• Proven ability to drive cross‑functional engineering efforts, acting as the technical integration bridge across Architecture, Security, IAM, Applications, PMO, and Operations teams, supported by strong technical project management skills.
• Experience with operational automation and workflow design, including the creation of approval flows, triggers, and guardrails that improve reliability and enforce enterprise policies.
• Strong foundational understanding of enterprise networking protocols (DNS, DHCP, routing, VLANs, ACLs, TCP/UDP) as they relate to cloud connectivity and secure integrations.
• Additional Useful Training: Zero Trust architecture, SIEM onboarding (Sentinel/Splunk), modern auth (OIDC/OAuth/FIDO2), cloud security fundamentals, API lifecycle management / RESTful architecture.
• Preferred
  
  Certifications:
  
  GCP (Professional Cloud Architect, Associate Cloud Engineer), AWS (Solutions Architect – Professional or Solutions Architect/Sys Ops Associate), or Azure (Solutions Architect – Expert or Azure Administrator Associate). ITIL v3/v4/v5 are a plus.

• Available to work onsite in a downtown Los Angeles office.
• The majority…