Principal Cloud Security Architect

Caesars Entertainment is seeking a Principal Cloud Security Architect to drive secure cloud architecture across Google Cloud Platform (GCP), with a primary focus on securing our BigQuery data platform and a portfolio of BI applications supporting our digital and brick-and-mortar business units. This role ensures security is integrated from code to cloud, embedding protection early in development (Shift Left) while enabling innovation at scale in highly regulated, high-traffic environments.

The ideal candidate is a deep technical expert in GCP security, specializing in data platform security (BigQuery), cloud-native security architecture, security automation, API security, WAF, CSPM, and DevSecOps.

Responsibilities

Secure-by-Design & Data Platform Security

• Develop and enforce secure-by-design principles for cloud-native applications and data workloads on GCP.
• Architect and secure the BigQuery environment end to end: VPC Service Controls perimeters to prevent data exfiltration, customer-managed encryption keys (CMEK) via Cloud KMS, authorized views, column-level and row-level security, and policy tags/data classification through Dataplex and Data Catalog.
• Integrate Sensitive Data Protection (Cloud DLP) to discover, classify, and de-identify PII and payment data in BigQuery and across data pipelines.
• Design least-privilege access models for BigQuery datasets, tables, and routines using IAM conditions, and govern data access at scale with Dataplex.

 

  Cloud Security Engineering & Automation

• Lead the deployment and tuning of GCP security services, including Security Command Center (Premium/Enterprise), Cloud IAM, Cloud Armor, Identity-Aware Proxy (IAP), VPC Service Controls, Cloud KMS, Sensitive Data Protection (DLP), Cloud Audit Logs, and Chronicle/Google SecOps for detection and response.
• Implement automated security testing in CI/CD pipelines to ensure infrastructure-as-code (IaC) security compliance using Terraform, with policy-as-code enforcement (e.g., Organization Policy constraints, OPA/Gatekeeper, Forseti-style guardrails).
• Drive container security best practices in Google Kubernetes Engine (GKE) — including Binary Authorization, Workload Identity, and GKE security posture — and serverless security for Cloud Functions and Cloud Run.

 

  Compliance & Collaboration

• Work closely with Google Cloud Business Intelligence teams and internal stakeholders to enhance cloud-native incident response capabilities.
• Automate compliance monitoring across the GCP environment using Security Command Center, Cloud Asset Inventory, and continuous IaC scanning.

Qualifications

• 5+ years of work experience securing and monitoring CI/CD pipelines and GCP cloud infrastructure.
• 7+ years of cloud experience in the IT field.
• 10+ years of Information Technology or Information Security experience.
• Hands-on expertise securing BigQuery, including VPC Service Controls, CMEK/Cloud KMS, column- and row-level security, authorized views, and data governance with Dataplex and Data Catalog.
• Expertise writing serverless functions in Python or Go (Cloud Functions / Cloud Run).
• Strong command and understanding of the Google Cloud security foundations / Security Reference Architecture.
• Deep expertise in GCP security best practices, including Cloud IAM, VPC and VPC Service Controls, Cloud Armor (WAF), SIEM (Chronicle/Google SecOps), CNAPP, and workload protection.
• Strong experience embedding Shift Left security in CI/CD pipelines with automated security testing.
• Hands-on experience securing high-traffic APIs, microservices, and GKE workloads.
• Experience mitigating API abuse, fraud, and adversarial traffic.
• Strong knowledge of cloud-native security tools and DevSecOps automation.
• Experience using Terraform to deploy security-oriented infrastructure and configure GCP security services.
• Excellent communication and collaboration skills to work effectively with stakeholders at all levels.
• Strong problem-solving skills and the ability to think critically and strategically.

About the company

At Caesars Entertainment, Inc., our Team Members create the extraordinary. We are the largest casino-entertainment company in the U.S. and one of the world's most diversified casino-entertainment providers. Since beginning in Reno, Nevada, in 1937, Caesars Entertainment has grown through the development of new resorts, expansions and acquisitions. Our resorts operate primarily under the Caesars®, Harrah's®, Horseshoe® and Eldorado® brand names. We focus on building loyalty and value with our guests through a combination of impeccable service, operational excellence and technological leadership. The company is committed to its Team Members, suppliers, communities and the environment through its PEOPLE PLANET PLAY framework.  

Our Caesars family is driven by our Mission, Vision and Values. We take great pride in living these values – Together We Win, All In On Service and Blaze the Trail – every day. Our mission, “Create the Extraordinary”. Our vision, “Create spectacular worlds. That immerse, inspire and connect you. We don’t perform magic; we create it with excellence. #WeAreCaesars”.  If you are ready to create some magic, we invite you to explore our dynamic, yet unique, career opportunities.