Principal Cloud Security Architect
Caesars Entertainment3 months ago
Remote, United States or Las Vegas, NV, USAStaff+
Responsibilities
- Develop and enforce secure-by-design principles for cloud-native applications on AWS and GCP.
- Embed vulnerability detection and automated security testing into DevSecOps and CI/CD pipelines.
- Architect zero-trust security models for cloud services, APIs, and microservices.
- Lead deployment and automation of AWS and GCP security services and cloud-native security controls.
- Secure Kubernetes EKS/GKE workloads, serverless Lambda and Cloud Functions, and infrastructure-as-code using Terraform and CloudFormation.
- Design API security, authentication, tokenization, API gateway, WAF, and bot-traffic protections for high-traffic betting and gaming applications.
- Enhance detection and response for fraud, arbitrage betting, identity abuse, payment security, money laundering, and account takeovers.
- Implement behavioral analytics and ML-driven security detection and automate compliance monitoring across AWS and GCP.
- Partner with cloud security, engineering, fraud, legal, risk, and compliance teams on incident response and AML/KYC controls.
- Manage and mentor a team while providing technical leadership and stakeholder collaboration.
Requirements
- At least 5 years securing and monitoring CI/CD pipelines and AWS cloud infrastructure.
- At least 7 years of cloud experience in IT and at least 10 years of Information Technology or Information Security experience.
- Expertise writing AWS Lambda functions in Python or Go.
- Strong understanding of AWS and GCP Security Reference Architectures and security best practices, including IAM, VPC security, WAF, SIEM, CNAPP, and workload protection.
- Hands-on experience with Shift Left security, automated security testing, high-traffic APIs, microservices, Kubernetes EKS/GKE workloads, API abuse mitigation, fraud, and adversarial traffic.
- Experience using Terraform to deploy security-focused infrastructure and configure security services.
- Strong knowledge of cloud-native security tools and DevSecOps automation, plus leadership experience managing and mentoring a team.
- Preferred AWS Security Specialty and Google Professional Cloud Security Engineer certifications.
- Preferred experience securing real-time fraud prevention and identity security systems, ML-driven security analytics, adversarial threat detection, and multi-cloud or hybrid security strategies.
- Excellent communication, collaboration, problem-solving, critical-thinking, and strategic-planning skills.
Categories
About Caesars Entertainment
Caesars Entertainment operates casino resorts, hotels, and entertainment venues, and offers online sports betting and iGaming to consumers across the U.S. Its brands include Caesars, Harrah’s, Horseshoe, and Eldorado, unified by the Caesars Rewards loyalty program; revenue comes from gaming, lodging, and food and beverage. Headquartered in Las Vegas, it trades on Nasdaq (CZR) and took its current form when Eldorado Resorts acquired Caesars in 2020; roots date to 1937 in Reno.