Manager, Cloud Engineering Lead

LA28 does not provide relocation assistance.

LA28 is the independent, non-profit, privately funded organizing committee for the Los Angeles 2028 Olympic and Paralympic Games. We are on a singular mission to create an Olympic and Paralympic Games that celebrate all that this city and country have to offer, delivering an unparalleled experience for athletes, fans, partners and our community.  

The 2028 Games mark the return of the Summer Games to the U.S. for the first time in 32 years and Los Angeles’ third time hosting an Olympic Games and first time welcoming the Paralympic Games. This presents the unique and exciting opportunity to celebrate our legacy with the Games and push the Olympic and Paralympic Movements forward, writing a new chapter of Games history in Los Angeles.  

Putting on an Olympic and Paralympic Games is a team sport. To build a Games unlike any the world has seen before, we need the best team in place–a team full of diverse perspectives, experiences and expertise. We are guided by the following set of values and behaviors–optimism, integrity, excellence, inclusion, co-creation and boldness–and look forward to hearing about how your past experiences align with them.

Manager, Cloud Engineering Lead

The Manager, Cloud Engineering Lead focuses on cloud infrastructure (IaaS/PaaS) with an emphasis on Google Cloud Platform (GCP), backend integrations, and identity architecture. The role manages App Registrations, API permissions, and modern authentication scoping within Microsoft Entra. Working with Application Owners, Cybersecurity, IAM/IGA, Architecture, SOC, and Operations teams, this position streamlines access, builds integrations, enforces policies, and improves monitoring and automation to ensure scalable operations. Responsibilities also include managing B2B partnerships, contributing to governance, and developing documentation such as SOPs and data‑flow diagrams, supporting secure application onboarding and advancing LA28’s cloud   

Key Responsibilities:

• Design, deploy, and manage Google Cloud Platform (GCP) infrastructure to support Application team initiatives. 
• Develop and manage complex API integrations between LA28 enterprise systems, SaaS platforms, and custom applications. 
• Support the IAM Manager by executing identity engineering tasks, including Entra app registrations, SSO integrations, and identity automation. 
• Establish a SaaS and platform hardening control set in collaboration with the Cyber Security team. 
• Evaluate and apply industry best practices for hardening IaaS/PaaS deployments, SaaS applications, and custom applications. 
• Partner with internal stakeholders to advise on security best practices for existing or Line of Business SaaS applications. 
• Design and deploy Single-Sign On integration patterns using Microsoft Entra and ensure alignment with LA28’s Architecture principles and Cybersecurity controls. 
• Define and implement cloud integration strategies that adhere to organizational security policies, Zero Trust principles, and enterprise architecture standards. 
• Manage partner and vendor relationships ensuring B2B integrations remain secure, compliant, and operational with proper monitoring and lifecycle oversight. 
• Develop and maintain documentation, including SOPs, runbooks, integration standards, data-flow diagrams, user journeys, and operational readiness guides. 
• Lead technical integration work for cloud applications, conduct requirements gathering through secure design, engineering, deployment, and operational handoff. 
• Partner with Applications and Architecture team to develop secure, scalable integrations between enterprise systems, SaaS applications, IAM platforms, and security tooling (SIEM/SOC pipelines, logging, monitoring). 
• Analyze application and business processes to streamline user access flows, portal access, enforce policy controls, and build automation that improves reliability and compliance. 
• Manage partner and vendor relationships ensuring B2B integrations remain secure, compliant, and operational with proper monitoring and lifecycle oversight. 

Background & Requirements:

• Bachelor’s in Computer Science, Cybersecurity, Information Systems, Engineering, or equivalent experience. 
• Additional Useful Training: Zero Trust architecture, SIEM onboarding (Sentinel/Splunk), modern auth (OIDC/OAuth/FIDO2), cloud security fundamentals, and API lifecycle management / RESTful architecture.
• Preferred Certifications: GCP (Professional Cloud Architect or Associate Cloud Engineer), AWS (Solutions Architect Professional or Solutions Architect/SysOps Associate), or Azure (Solutions Architect Expert or Azure Administrator Associate). ITIL v3/v4/v5 are a plus. 
• 5+ years of combined experience architecting cloud infrastructure (specifically GCP or similar IaaS/PaaS) and engineering complex enterprise API integrations, supported by hands-on automation skills using scripting (Python, PowerShell) or Infrastructure-as-Code (IaC).
• 3-5+ years of deep technical experience managing Microsoft Entra ID (Enterprise App Registrations, SSO, OAuth/OIDC) and implementing Zero Trust architecture, including SaaS securityhardening and collaborating with cybersecurity teams for SIEM/SOC integrations. 
• Demonstrated leadership in end-to-end lifecycle management, overseeing infrastructure and application onboarding, secure design, structured deployment practices (UAT, change management, release cycles), and operational readiness.
• Proven ability to drive cross-functional engineering efforts, acting as the technical integration bridge across Architecture, Security, IAM, Applications, PMO, and Operations teams, supported by strong technical project management skills (scoping, prioritization, and work planning).
• Experience with operational automation and workflow design, including the creation of approval flows, triggers, and guardrails that improve reliability and enforce enterprise policies.
• Strong foundational understanding of enterprise networking protocols (DNS, DHCP, routing, VLANs, ACLs, and TCP/UDP) as they relate to cloud connectivity and secure integrations. 

Physical Requirements and Working Conditions:

• Available to work onsite in our Downtown Los Angeles-based office. 
• The majority of work will be conducted in an office setting, requiring extended periods of time using computers, phones, and other office equipment. 
• The LA28 office is an open floorplan working environment; employees must be able to work efficiently in an open cubicle environment. 
• Hours of work may vary, including evenings, weekends, and holidays, especially during peak event periods. 
• Perform other duties as required; the role will evolve over time and may include operational responsibilities during the Olympic and Paralympic Games. 

Expectations:

• Extremely detail-oriented with excellent analytical and presentation skills, including the ability to translate complex cloud architectures and API integrations into clear visualizations and data-flow diagrams for stakeholders.
• Strong written, oral, and interpersonal communication skills, with a proven ability to collaborate cross-functionally and act as a trusted Subject Matter Expert (SME) and advisor within the Technology team.
• Well-developed problem-solving skills and the ability to work independently, combined with a forward-looking mindset and an interest in leveraging AI tools to accelerate scripting, automation, and operational efficiencies. 
• High level of adaptability in a constantly evolving, fast paced, and entrepreneurial environment.

Education:

• Bachelor’s in Computer Science, Cybersecurity, Information Systems, Engineering, or equivalent experience.  
• Additional Useful Training: Zero Trust architecture, SIEM onboarding (Sentinel/Splunk), modern auth (OIDC/OAuth/FIDO2), cloud security fundamentals. 
• Preferred Certifications: CISSP (or pursuit), SC‑300, AZ‑104, AZ‑500, MS‑102, ITIL v3/v4. 

The annual base salary range for this position is $88,000.00 - $125,000.00. The pay scale provided is the range that LA28 reasonably expects to pay as starting base compensation for this role. All LA28 compensation remains subject to final determination based on individual candidate qualifications, experience, or other reasonable criteria consistent with LA28’s operational business needs and applicable law.

LA28 does not provide relocation assistance.

LA28 is committed to fair and unbiased recruitment procedures allowing all applicants an equal opportunity for employment, free from discrimination on the basis of religion, race, sex, age, sexual orientation, disability, color, ethnic or national origin, or any other classification as may be protected by applicable law. LA28 will consider for employment qualified applicants with criminal histories in a manner consistent with the requirements of the Los Angeles Fair Chance Initiative for Hiring Ordinance and all applicable laws. We strive to build a team that is inclusive and encourage qualified candidates of all backgrounds, perspectives, and identities to apply. We assess applications based on relevant skills, education, and experience a candidate can add to our team.