
Principal Cloud Security Architect
Caesars Entertainment
full-time
Posted on:
Location Type: Remote
Location: United States
Visit company websiteExplore more
Job Level
About the role
- Develop and enforce secure-by-design principles for cloud-native applications on AWS and GCP.
- Embed security into DevSecOps pipelines, ensuring early detection of vulnerabilities (Shift Left).
- Architect zero-trust security models for cloud services, APIs, and microservices.
- Multi-Cloud Security Engineering & Automation
- Lead the deployment of AWS and GCP security services, including GuardDuty, Security Hub, IAM, WAF, Shield, Macie (AWS) and Security Command Center, IAM, and others.
- Implement automated security testing in CI/CD pipelines to ensure infrastructure-as-code (IaC) security compliance using Terraform, CloudFormation, and Kubernetes (EKS/GKE).
- Drive container security best practices in Kubernetes (EKS/GKE) and serverless security for Lambda and Cloud Functions.
- Architect API security frameworks for high-traffic sports betting and gaming applications.
- Design and enforce strong authentication, tokenization, and API gateway security.
- Deploy advanced AWS WAF, Google Cloud Armor, and API security solutions to detect and mitigate abuse, fraud, and bot traffic.
- Enhance cloud-native detection and response capabilities for fraud, arbitrage betting, identity abuse, and payment security.
- Implement behavioral analytics and ML-driven security detection to combat fraud, money laundering, and account takeovers.
- Work closely with AWS and GCP security teams to enhance cloud-native incident response capabilities.
- Ensure cloud security architecture aligns with PCI-DSS, ISO 27001, NIST, and gaming compliance regulations.
- Partner with fraud, legal, and compliance teams to enforce AML (Anti-Money Laundering) and KYC (Know Your Customer) security measures.
- Automate compliance monitoring across AWS and GCP environments.
Requirements
- 5+ years of work experience securing and monitoring CI/CD pipelines and AWS cloud infrastructure.
- 7+ years of cloud experience in IT field.
- 10+ years of Information Technology or Information Security experience.
- Expertise in writing Lambda functions in Python or Go.
- Strong command and understanding of AWS and GCP Security Reference Architecture (SRA).
- Deep expertise in AWS and GCP security best practices, including IAM, VPC security, WAF, SIEM, CNAPP, and workload protection.
- Strong experience embedding Shift Left security in CI/CD pipelines with automated security testing.
- Hands-on experience securing high-traffic APIs, microservices, and Kubernetes (EKS/GKE) workloads.
- Experience mitigating API abuse, fraud, and adversarial traffic.
- Strong knowledge of cloud-native security tools and DevSecOps automation.
- Experience using Terraform to deploy security-oriented infrastructure and configure security services.
- Proven leadership skills with the ability to manage and mentor a team.
- Excellent communication and collaboration skills to work effectively with stakeholders at all levels.
- Strong problem-solving skills and the ability to think critically and strategically.
Benefits
- Health insurance
- 401(k) matching
- Paid time off
- Remote work options
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard skills
AWSGCPPythonGoTerraformCloudFormationKubernetesCI/CDDevSecOpsAPI security
Soft skills
leadershipcommunicationcollaborationproblem-solvingcritical thinkingstrategic thinkingmentoring
Certifications
PCI-DSSISO 27001NIST