Principal Cloud Security Architect

Caesars Entertainment is seeking a Principal Cloud Security Architect to drive secure cloud architecture across Google Cloud Platform (GCP), with a primary focus on securing our BigQuery data platform and a portfolio of BI applications supporting our digital and brick-and-mortar business units. This role ensures security is integrated from code to cloud, embedding protection early in development (Shift Left) while enabling innovation at scale in highly regulated, high-traffic environments.

The ideal candidate is a deep technical expert in GCP security, specializing in data platform security (BigQuery), cloud-native security architecture, security automation, API security, WAF, CSPM, and DevSecOps.

Secure-by-Design & Data Platform Security

• Develop and enforce secure-by-design principles for cloud-native applications and data workloads on GCP.
• Architect and secure the BigQuery environment end to end: VPC Service Controls perimeters to prevent data exfiltration, customer-managed encryption keys (CMEK) via Cloud KMS, authorized views, column-level and row-level security, and policy tags/data classification through Dataplex and Data Catalog.
• Integrate Sensitive Data Protection (Cloud DLP) to discover, classify, and de-identify PII and payment data in BigQuery and across data pipelines.
• Design least-privilege access models for BigQuery datasets, tables, and routines using IAM conditions, and govern data access at scale with Dataplex.

Cloud Security Engineering & Automation

• Lead the deployment and tuning of GCP security services, including Security Command Center (Premium/Enterprise), Cloud IAM, Cloud Armor, Identity-Aware Proxy (IAP), VPC Service Controls, Cloud KMS, Sensitive Data Protection (DLP), Cloud Audit Logs, and Chronicle/Google SecOps for detection and response.
• Implement automated security testing in CI/CD pipelines to ensure infrastructure-as-code (IaC) security compliance using Terraform, with policy-as-code enforcement (e.g., Organization Policy constraints, OPA/Gatekeeper, Forseti-style guardrails).
• Drive container security best practices in Google Kubernetes Engine (GKE) — including Binary Authorization, Workload Identity, and GKE security posture — and serverless security for Cloud Functions and Cloud Run.

Compliance & Collaboration

• Work closely with Google Cloud Business Intelligence teams and internal stakeholders to enhance cloud-native incident response capabilities.
• Automate compliance monitoring across the GCP environment using Security Command Center, Cloud Asset Inventory, and continuous IaC scanning.

• 5+ years of work experience securing and monitoring CI/CD pipelines and GCP cloud infrastructure.
• 7+ years of cloud experience in the IT field.
• 10+ years of Information Technology or Information Security experience.
• Hands-on expertise securing BigQuery, including VPC Service Controls, CMEK/Cloud KMS, column- and row-level security, authorized views, and data governance with Dataplex and Data Catalog.
• Expertise writing serverless functions in Python or Go (Cloud Functions / Cloud Run).
• Strong command and understanding of the Google Cloud security foundations / Security Reference Architecture.
• Deep expertise in GCP security best practices, including Cloud IAM, VPC and VPC Service Controls, Cloud Armor (WAF), SIEM (Chronicle/Google SecOps), CNAPP, and workload protection.
• Strong experience embedding Shift Left security in CI/CD pipelines with automated security testing.
• Hands-on experience securing high-traffic APIs, microservices, and GKE workloads.
• Experience mitigating API abuse, fraud, and adversarial traffic.
• Strong knowledge of cloud-native security tools and DevSecOps automation.
• Experience using Terraform to deploy security-oriented infrastructure and configure GCP security services.
• Excellent communication and collaboration skills to work effectively with stakeholders at all levels.
• Strong problem-solving skills and the ability to think critically and strategically.