Principal Cloud Security Architect
At a glance
Senior Security Engineering role at Caesars Sportsbook. Remote, United States · full-time · no salary stated · we estimate $152,500–$210,650 across the United States.
Caesars Sportsbook has not published a salary for this role. The figure below is our estimate, not theirs.
remoteroles summary, based on the employer's posting.
What you'll do
- Set secure design rules for cloud-native applications on AWS and GCP, and bring security checks into development pipelines
- Build zero-trust protections for cloud services, APIs and microservices, including authentication, tokenization and gateway controls
- Automate AWS and GCP security testing and infrastructure compliance with Terraform, CloudFormation and Kubernetes
- Protect betting and gaming APIs from abuse, fraud and bot traffic, and strengthen detection of account and payment threats
- Align cloud controls with PCI-DSS, ISO 27001, NIST and gaming rules, automating compliance checks across both clouds
What you bring
- At least ten years in IT or information security, including seven years working with cloud environments
- At least five years securing and monitoring CI/CD pipelines and AWS infrastructure
- You can write Lambda functions in Python or Go and have deep security expertise across AWS and GCP
- You have hands-on experience securing high-traffic APIs, microservices and Kubernetes workloads, and using Terraform for security infrastructure
Who this fits
This senior, hands-on architecture role suits a deep AWS and GCP security practitioner who can lead technical work and mentor a team. You’ll collaborate with engineering, fraud, risk, legal and compliance stakeholders. The position is listed as remote in Las Vegas.
From the employer
Caesars Entertainment is seeking a Principal Cloud Security Architect to drive secure cloud architecture across AWS and GCP, ensuring security is integrated from code to cloud for Caesars Sportsbook, iGaming, and digital platforms. This role will embed security early in development (Shift Left) while enabling innovation at scale in highly regulated, high-traffic cloud environments.
The ideal candidate is a deep technical expert in AWS and GCP security, specializing in cloud-native security architecture, security automation, API security, WAF, CNAPP, and DevSecOps. This position will partner with engineering, fraud, and risk teams to develop defenses against fraud, cheating, and money laundering in sports betting and online gaming.
- Develop and enforce secure-by-design principles for cloud-native applications on AWS and GCP.
- Embed security into DevSecOps pipelines, ensuring early detection of vulnerabilities (Shift Left).
- Architect zero-trust security models for cloud services, APIs, and microservices.
- Multi-Cloud Security Engineering & Automation
- Lead the deployment of AWS and GCP security services, including GuardDuty, Security Hub, IAM, WAF, Shield, Macie (AWS) and Security Command Center, IAM, and others.
- Implement automated security testing in CI/CD pipelines to ensure infrastructure-as-code (IaC) security compliance using Terraform, CloudFormation, and Kubernetes (EKS/GKE).
- Drive container security best practices in Kubernetes (EKS/GKE) and serverless security for Lambda and Cloud Functions.
- Architect API security frameworks for high-traffic sports betting and gaming applications.
- Design and enforce strong authentication, tokenization, and API gateway security.
- Deploy advanced AWS WAF, Google Cloud Armor, and API security solutions to detect and mitigate abuse, fraud, and bot traffic.
- Enhance cloud-native detection and response capabilities for fraud, arbitrage betting, identity abuse, and payment security.
- Implement behavioral analytics and ML-driven security detection to combat fraud, money laundering, and account takeovers.
- Work closely with AWS and GCP security teams to enhance cloud-native incident response capabilities.
- Ensure cloud security architecture aligns with PCI-DSS, ISO 27001, NIST, and gaming compliance regulations.
- Partner with fraud, legal, and compliance teams to enforce AML (Anti-Money Laundering) and KYC (Know Your Customer) security measures.
- Automate compliance monitoring across AWS and GCP environments.
- 5+ years of work experience securing and monitoring CI/CD pipelines and AWS cloud infrastructure.
- 7+ years of cloud experience in IT field.
- 10+ years of Information Technology or Information Security experience.
- Expertise in writing Lambda functions in Python or Go.
- Strong command and understanding of AWS and GCP Security Reference Architecture (SRA).
- Deep expertise in AWS and GCP security best practices, including IAM, VPC security, WAF, SIEM, CNAPP, and workload protection.
- Strong experience embedding Shift Left security in CI/CD pipelines with automated security testing.
- Hands-on experience securing high-traffic APIs, microservices, and Kubernetes (EKS/GKE) workloads.
- Experience mitigating API abuse, fraud, and adversarial traffic.
- Strong knowledge of cloud-native security tools and DevSecOps automation.
- Experience using Terraform to deploy security-oriented infrastructure and configure security services.
- Proven leadership skills with the ability to manage and mentor a team.
- Excellent communication and collaboration skills to work effectively with stakeholders at all levels.
- Strong problem-solving skills and the ability to think critically and strategically.
Preferred Qualifications
- AWS Security Specialty and Google Professional Cloud Security Engineer certifications.
- Experience securing real-time fraud prevention and identity security systems.
- Knowledge of ML-driven security analytics and adversarial threat detection.
- Experience with multi-cloud security strategies across AWS, GCP, and hybrid environments.