Cloud Infrastructure Engineer Visa Sponsorship Jobs in California

INTRODUCTION

The Senior Vice President (SVP), Cloud Infrastructure & IT Operations is accountable for the technology foundation that keeps LERETA secure, resilient, and available. This executive sets the strategy for, and leads, the migration from LERETA's current data-center environment to the cloud. The SVP also leads the managers and teams responsible for cloud and hybrid infrastructure, end-user computing, security operations, and Help Desk services. Working with software engineering, enterprise architecture, information security, data, product, and business leaders, this leader turns technology strategy into measurable results in reliability, security, cost, and service quality.

ROLE AND RESPONSIBILITIES

Key Responsibilities:

Cloud Migration & Data Center Exit

• Owns the migration roadmap: waves, dependencies, risks, readiness criteria, cutover, rollback, and decommissioning
• Partners with application owners and architects to choose the right strategy per workload (rehost, replatform, refactor, retain, replace, or retire), with objective entry and exit criteria
• Runs hybrid operations during the transition and retire data-center infrastructure, licenses, circuits, and support contracts as workloads move
• Reports progress, risks, decisions, and financial outcomes to executive leadership

Cloud Platform & Architecture

• Leads a governed, multi-account cloud environment with standard identity, networking, security, logging, monitoring, tagging, and policy controls
• Guides managed Kubernetes, PostgreSQL, and Snowflake platforms for availability, recovery, performance, security, and cost
• Establishes reusable patterns, reference architectures, infrastructure as code, and CI/CD-integrated platform practices
• Partners with architects on cloud-native application design; serve as the senior escalation point for complex platform issues

Hybrid & On-Premises Infrastructure

• Keeps remaining VMware, server, storage, network, DNS, firewall, load-balancing, backup, and connectivity services stable and secure until migrated or retired
• Avoids long-term investment in infrastructure scheduled for retirement without accepting undue operational or security risk

Endpoint Computing & End-User Services

• Owns the endpoint strategy and full lifecycle for laptops, desktops, mobile devices, and virtual desktops: provisioning, imaging, configuration, asset management, refresh, and secure disposal
• Enforces endpoint security baselines through device management: hardening, encryption, endpoint detection and response (EDR) coverage, and patch-compliance targets
• Leads the Help Desk: service levels, escalation paths, first-contact resolution, knowledge management, and user experience. This remains a core part of the role after the data-center migration
• Uses service data and recurring-issue trends to drive permanent fixes and automation

Security Operations

• Leads security operations across cloud, on-premises, and endpoint environments: continuous monitoring, threat detection, and response, including management of SIEM, EDR, and managed-detection partners
• Owns incident response readiness: playbooks, escalation, tabletop exercises, and coordination with the CISO, Legal, and business leaders during security events
• Runs risk-based vulnerability and patch management with defined remediation timelines, plus email security and phishing-defense programs
• Operates the technical controls that support SOC 1 and SOC 2 audits and client security assessments, and supply audit evidence in partnership with the CISO and compliance team
• Monitors networks and infrastructure for unusual traffic and activity patterns, manage firewall and perimeter controls, and escalate potential threats to the CISO
• Runs risk-based vulnerability and patch management across cloud, on-premises, and endpoint environments with defined remediation timelines
• Acts as first responder for security events in IT environments (containment, recovery, and root-cause fixes) under the CISO-led incident response plan
• Operates the technical controls that support SOC 1 and SOC 2 audits and client security assessments, supply audit evidence, and report security-operations metrics to the CISO

Reliability, Cost & Vendor Management

• Sets service-level objectives, observability standards, and disciplined incident, problem, change, and disaster-recovery management, including regular backup and failover testing
• Establishes a FinOps discipline: tagging, showback, forecasting, rightsizing, and commitment planning, with spend tracked against budget
• Manages cloud, migration, infrastructure, security, telecom, and managed-service vendors to clear deliverables and service levels, while retaining internal knowledge to avoid vendor dependency

Leadership

• Builds and leads a multi-disciplinary organization of managers and engineers across cloud, infrastructure, endpoint, security operations, and support
• Sets clear accountabilities and measurable objectives, develop successors, and stay hands-on enough to challenge designs and mentor staff
• Communicates complex technical risks and recommendations clearly to executives and the board

This position will perform other duties as assigned based on the needs of the department.

COMPENSATION

• Salary range: $230,000 - $260,000

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities

This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.