Job DescriptionCaesars Entertainment is seeking a Principal Cloud Security Architect to drive secure cloud architecture across AWS and GCP, ensuring security is integrated from code to cloud for Caesars Sportsbook, iGaming, and digital platforms. This role will embed security early in development (Shift Left) while enabling innovation at scale in highly regulated, high-traffic cloud environments.
The ideal candidate is a deep technical expert in AWS and GCP security, specializing in cloud-native security architecture, security automation, API security, WAF, CNAPP, and DevSecOps. This position will partner with engineering, fraud, and risk teams to develop defenses against fraud, cheating, and money laundering in sports betting and online gaming.
Responsibilities- Develop and enforce secure-by-design principles for cloud-native applications on AWS and GCP.
- Embed security into DevSecOps pipelines, ensuring early detection of vulnerabilities (Shift Left).
- Architect zero-trust security models for cloud services, APIs, and microservices.
- Multi-Cloud Security Engineering & Automation
- Lead the deployment of AWS and GCP security services, including GuardDuty, Security Hub, IAM, WAF, Shield, Macie (AWS) and Security Command Center, IAM, and others.
- Implement automated security testing in CI/CD pipelines to ensure infrastructure-as-code (IaC) security compliance using Terraform, CloudFormation, and Kubernetes (EKS/GKE).
- Drive container security best practices in Kubernetes (EKS/GKE) and serverless security for Lambda and Cloud Functions.
- Architect API security frameworks for high-traffic sports betting and gaming applications.
- Design and enforce strong authentication, tokenization, and API gateway security.
- Deploy advanced AWS WAF, Google Cloud Armor, and API security solutions to detect and mitigate abuse, fraud, and bot traffic.
- Enhance cloud-native detection and response capabilities for fraud, arbitrage betting, identity abuse, and payment security.
- Implement behavioral analytics and ML-driven security detection to combat fraud, money laundering, and account takeovers.
- Work closely with AWS and GCP security teams to enhance cloud-native incident response capabilities.
- Ensure cloud security architecture aligns with PCI-DSS, ISO 27001, NIST, and gaming compliance regulations.
- Partner with fraud, legal, and compliance teams to enforce AML (Anti-Money Laundering) and KYC (Know Your Customer) security measures.
- Automate compliance monitoring across AWS and GCP environments.
Qualifications- 5+ years of work experience securing and monitoring CI/CD pipelines and AWS cloud infrastructure.
- 7+ years of cloud experience in IT field.
- 10+ years of Information Technology or Information Security experience.
- Expertise in writing Lambda functions in Python or Go.
- Strong command and understanding of AWS and GCP Security Reference Architecture (SRA).
- Deep expertise in AWS and GCP security best practices, including IAM, VPC security, WAF, SIEM, CNAPP, and workload protection.
- Strong experience embedding Shift Left security in CI/CD pipelines with automated security testing.
- Hands-on experience securing high-traffic APIs, microservices, and Kubernetes (EKS/GKE) workloads.
- Experience mitigating API abuse, fraud, and adversarial traffic.
- Strong knowledge of cloud-native security tools and DevSecOps automation.
- Experience using Terraform to deploy security-oriented infrastructure and configure security services.
- Proven leadership skills with the ability to manage and mentor a team.
- Excellent communication and collaboration skills to work effectively with stakeholders at all levels.
- Strong problem-solving skills and the ability to think critically and strategically.
Preferred Qualifications- AWS Security Specialty and Google Professional Cloud Security Engineer certifications.
- Experience securing real-time fraud prevention and identity security systems.
- Knowledge of ML-driven security analytics and adversarial threat detection.
- Experience with multi-cloud security strategies across AWS, GCP, and hybrid environments.
