Principal Cloud Security Architect

Caesars Entertainment is seeking a Principal Cloud Security Architect to drive secure cloud architecture across Google Cloud Platform (GCP), with a primary focus on securing our BigQuery data platform and a portfolio of BI applications supporting our digital and brick-and-mortar business units. This role ensures security is integrated from code to cloud, embedding protection early in development (Shift Left) while enabling innovation at scale in highly regulated, high-traffic environments.

The ideal candidate is a deep technical expert in GCP security, specializing in data platform security (BigQuery), cloud-native security architecture, security automation, API security, WAF, CSPM, and DevSecOps.

Secure-by-Design & Data Platform Security

• Develop and enforce secure-by-design principles for cloud-native applications and data workloads on GCP.
• Architect and secure the BigQuery environment end to end: VPC Service Controls perimeters to prevent data exfiltration, customer-managed encryption keys (CMEK) via Cloud KMS, authorized views, column-level and row-level security, and policy tags/data classification through Dataplex and Data Catalog.
• Integrate Sensitive Data Protection (Cloud DLP) to discover, classify, and de-identify PII and payment data in BigQuery and across data pipelines.
• Design least-privilege access models for BigQuery datasets, tables, and routines using IAM conditions, and govern data access at scale with Dataplex.

Cloud Security Engineering & Automation

• Lead the deployment and tuning of GCP security services, including Security Command Center (Premium/Enterprise), Cloud IAM, Cloud Armor, Identity-Aware Proxy (IAP), VPC Service Controls, Cloud KMS, Sensitive Data Protection (DLP), Cloud Audit Logs, and Chronicle/Google SecOps for detection and response.
• Implement automated security testing in CI/CD pipelines to ensure infrastructure-as-code (IaC) security compliance using Terraform, with policy-as-code enforcement (e.g., Organization Policy constraints, OPA/Gatekeeper, Forseti-style guardrails).
• Drive container security best practices in Google Kubernetes Engine (GKE) — including Binary Authorization, Workload Identity, and GKE security posture — and serverless security for Cloud Functions and Cloud Run.

Compliance & Collaboration

• Work closely with Google Cloud Business Intelligence teams and internal stakeholders to enhance cloud-native incident response capabilities.
• Automate compliance monitoring across the GCP environment using Security Command Center, Cloud Asset Inventory, and continuous IaC scanning.

• 5+ years of work experience securing and monitoring CI/CD pipelines and GCP cloud infrastructure.
• 7+ years of cloud experience in the IT field.
• 10+ years of Information Technology or Information Security experience.