Associate Security Architect

Caesars Entertainment; Las Vegas (NV); On-site; USD 90,000 - 140,000; Full time

Job summary

Caesars Entertainment seeks an Associate Security Architect to support SAR reviews and BIAs, contributing to the ESA pattern library and security controls. You will grow into an advisory role under senior architects, with a focus on risk-based assessments and governance practices.

You will engage with solution and infrastructure teams, participate in threat modeling sessions, and help maintain security standards across AI, cloud, data, and network domains.

Qualifications

• 1–3 years in a security-adjacent role (security analyst, GRC, SOC, IT audit, or solution/security engineering)
• Working knowledge of IAM, network, cloud, application, and data security
• Familiarity with threat-modeling (STRIDE) or MITRE ATT&CK
• Awareness of PCI-DSS, SOX, gaming/compliance requirements, and privacy laws (GDPR/CCPA)
• Strong written communication and collaborative working style

Responsibilities

• Support SAR reviews and BIAs with minimal supervision
• Maintain ESAF security patterns, reference architectures, and control libraries
• Participate in weekly architecture reviews and knowledge-sharing sessions
• Communicate security requirements clearly to solution teams
• Draft risk assessment documentation for decision-making

Skills

Security analyst

Threat modeling

Written communication

Collaborative style

Tools

GitLab CI/CD security

Terraform tfsec

Secrets management

AWS Bedrock security

KMS

Job description

WE ARE CAESARS
At Caesars Entertainment, our Mission, Vision & Values reflect our unique purpose, providing people with possibilities and places to have fun. Our Mission, Vision & Values represent a unifying and inspiring way forward, and all Team Members are expected to uphold them.
Our Mission: “Create the Extraordinary"
Our Vision: “We create spectacular worlds that immerse, inspire and connect you. We don’t perform magic; we create it with excellence.”
Our Values: “Blaze the Trail, Together We Win, All-In on Service”
Our corporate social responsibility framework, People Planet Play, represents our continuous dedication to enhancing economic development, uplifting the wellbeing of our Team Members and their families, and making positive contributions to the communities we operate in.

Job Summary

Enterprise Security Architecture provides centralized security oversight, risk assessment, and pattern guidance across Caesars Entertainment. Importantly, ESA does not design business solutions — business units and solution teams own solution architecture. ESA reviews those solutions for security risk, develops reusable security patterns, and advises teams during design.

As an Associate Security Architect, you’ll be the engine behind that review-and-guidance function. You’ll support Security Architecture Reviews (SARs) and Business Impact Assessments (BIAs), help maintain the ESAF security pattern library, and grow into an advisory role under the mentorship of senior architects. This is a strong entry point into enterprise security architecture for someone with a security analyst, GRC, SOC, or solution-engineering background.

What success looks like in the first year:

Independently triages and drafts SAR review notes with minimal rework

Produces accurate BIAs and risk categorizations under light supervision

Meaningfully improves the currency and usability of the pattern library

Builds trusted working relationships with solution and infrastructure teams

How You Will Create the Extraordinary

Security Architecture Review (SAR) support

Intake and triage incoming review requests against SAR trigger criteria

Draft review notes: document proposed architectures, flag security gaps, and map recommended controls to ESAF patterns

Track that solution teams implement recommended controls and respond to review feedback

Sit in on threat-modeling sessions and consultations to build architectural judgment

Help conduct Business Impact Assessments (BIAs) and security risk categorization under senior review

Apply the risk-based BIA security checklists so control requirements scale appropriately to system risk

Prepare risk-assessment documentation as an input to decision-making

Governance boundary: In the ESA model, the team assesses risk but does not accept it. Risk acceptance and security exceptions are governed by the Exception Management Policy and decided by senior management / CIO. You’ll produce the assessment, not the acceptance decision.

Pattern & standards maintenance

Maintain and update ESAF security patterns, reference architectures, and control libraries across domains (AI, application, cloud, data, endpoint, GRC, IAM, infrastructure, network)

Keep documentation accurate, usable, and current — pattern quality and adoption are measured outcomes for the team

Participate in weekly architecture reviews, monthly pattern updates, and knowledge-sharing sessions

Communicate security requirements clearly to solution teams the ESA function influences but does not control

What You Will Need

Required

1–3 years in a security-adjacent role (security analyst, GRC, SOC, IT audit, or solution/security engineering)

Working knowledge of core security domains: IAM, network, cloud, application, and data security — breadth valued over deep single-stack specialization

Familiarity with at least one threat-modeling approach (e.g., STRIDE) or the MITRE ATT&CK framework

Awareness of regulatory frameworks relevant to gaming/hospitality: PCI-DSS, SOX, gaming commission requirements, and privacy laws (GDPR/CCPA)

Strong written communication — the role’s output is reviews, assessments, and documentation others must act on

Collaborative, diplomatic working style; comfortable influencing teams you don’t have authority over

Nice to have

Cloud security fundamentals, with AWS emphasis — the platform’s agentic/AI stack is built on Amazon Bedrock, so AWS IAM, VPC endpoints (PrivateLink), and KMS familiarity are especially valuable

Exposure to AWS Bedrock and agentic AI security — Bedrock Guardrails, Knowledge Base / RAG security, Bedrock Agents, and Bedrock AgentCore (Gateway/Runtime/Identity) with MCP servers. This is where the team’s AI security work actually lives (Bedrock-based, not Copilot-based), and it’s a currently high-demand area.

Understanding of MCP (Model Context Protocol) security concepts — agent-to-tool authentication (JWT/OAuth 2.0), tool-level access control, and centralized audit logging

GitLab CI/CD security — GitLab is the primary platform for code and pipelines across the enterprise. Familiarity with pipeline hardening, protected branches/environments and merge-request approvals, masked/protected CI/CD variables, GitLab Secret Detection and Dependency Scanning, and secrets management (HashiCorp Vault / AWS Secrets Manager) is directly applicable to the reviews this role supports.

Infrastructure-as-Code security exposure (Terraform with tfsec/checkov, encrypted/locked state) — IaC pipelines are in scope for ESA review

Security certifications (Security+, AWS/Azure security associate, or progress toward CISSP/CCSP)

Experience with SDLC/DevOps and CI/CD security integration

About Us

At Caesars Entertainment, Inc., our Team Members create the extraordinary. We are the largest casino-entertainment company in the U.S. and one of the world's most diversified casino-entertainment providers. Since beginning in Reno, Nevada, in 1937, Caesars Entertainment has grown through the development of new resorts, expansions and acquisitions. Our resorts operate primarily under the Caesars®, Harrah's®, Horseshoe® and Eldorado® brand names. We focus on building loyalty and value with our guests through a combination of impeccable service, operational excellence and technological leadership. The company is committed to its Team Members, suppliers, communities and the environment through its PEOPLE PLANET PLAY framework.
Our Caesars family is driven by our Mission, Vision and Values. We take great pride in living these values – Together We Win, All In On Service and Blaze the Trail – every day. Our mission, “Create the Extraordinary”. Our vision, “Create spectacular worlds. That immerse, inspire and connect you. We don’t perform magic; we create it with excellence. #WeAreCaesars”. If you are ready to create some magic, we invite you to explore our dynamic, yet unique, career opportunities.

TOGETHER WE WIN
We believe in delivering family-style service—an approach that fosters warmth, connection, and a genuine sense of belonging. Our team treats every guest and colleague with the same care and hospitality we would extend to family, creating a welcoming environment built on respect, teamwork, and personalized attention. Whether assisting customers or collaborating with coworkers, we prioritize service that is thoughtful, supportive, and rooted in genuine relationships.
DISCLAIMER
These statements are intended to describe the general nature and level of work being performed in this position. They are not intended to be construed as an exhaustive list of all responsibilities, duties and skills required of the position. The Company reserves the right to make changes to the job description whenever necessary.
As part of the onboarding process for new hires, candidates will be required to complete a background check. In addition, pre-employment drug testing is mandatory for any role operating a motor vehicle (Valet, Bus Drivers, Limo Drivers), Facilities and/or Engineering, Lifeguards, Pilots, Security and Surveillance roles. Pre-employment screenings will be completed prior to an offer being extended, except where applicable law requires that such pre-employment screening may occur post-offer. The Company is an equal opportunity employer and does not discriminate against employees or applicants based on race, color, national origin, sex, age over 40, religion, disability, sexual orientation, gender identity or expression, veteran status, marital status, or any other characteristic protected by law.
ADA
Caesars Entertainment will engage in an interactive process and make reasonable accommodations, as required by law, for individuals with disabilities or to accommodate pregnancy, pregnancy-related conditions, or where a conflict exists between the position and an individuals’ religious beliefs or practices.
EQUAL EMPLOYMENT OPPORTUNITY
Caesars Entertainment is an Equal Opportunity Employer. Caesars Entertainment will not discriminate against any employee or applicant based upon a person’s race, color, creed, religion, national origin, sex, marital status, disability, status with regard to public assistance, age, sexual or affectional orientation, gender identity, familial status, ancestry, local human rights commission activity, citizenship, genetic information, protected veteran or military status, or any other protected class.

Job Info

• Job Identification 90517
• Job Category Information Technology
• Job Schedule Full time