Associate Security Architect

Caesars Entertainment • Las Vegas, NV

9d

About The Position

Enterprise Security Architecture provides centralized security oversight, risk assessment, and pattern guidance across Caesars Entertainment. ESA reviews business solutions for security risk, develops reusable security patterns, and advises teams during design. As an Associate Security Architect, you will support Security Architecture Reviews (SARs) and Business Impact Assessments (BIAs), help maintain the ESAF security pattern library, and grow into an advisory role under the mentorship of senior architects. This role is an entry point into enterprise security architecture for individuals with a background in security analysis, GRC, SOC, or solution engineering.

Requirements

• 1–3 years in a security-adjacent role (security analyst, GRC, SOC, IT audit, or solution/security engineering).
• Working knowledge of core security domains: IAM, network, cloud, application, and data security — breadth valued over deep single-stack specialization.
• Familiarity with at least one threat-modeling approach (e.g., STRIDE) or the MITRE ATT&CK framework.
• Awareness of regulatory frameworks relevant to gaming/hospitality: PCI-DSS, SOX, gaming commission requirements, and privacy laws (GDPR/CCPA).
• Strong written communication skills, as the role's output includes reviews, assessments, and documentation that others must act upon.
• Collaborative, diplomatic working style; comfortable influencing teams without direct authority.

Nice To Haves

• Cloud security fundamentals, with an emphasis on AWS, including familiarity with AWS IAM, VPC endpoints (PrivateLink), and KMS.
• Exposure to AWS Bedrock and agentic AI security, including Bedrock Guardrails, Knowledge Base / RAG security, Bedrock Agents, and Bedrock AgentCore (Gateway/Runtime/Identity) with MCP servers.
• Understanding of MCP (Model Context Protocol) security concepts, such as agent-to-tool authentication (JWT/OAuth 2.0), tool-level access control, and centralized audit logging.
• GitLab CI/CD security, including pipeline hardening, protected branches/environments, merge-request approvals, masked/protected CI/CD variables, GitLab Secret Detection and Dependency Scanning, and secrets management (HashiCorp Vault / AWS Secrets Manager).
• Infrastructure-as-Code security exposure (Terraform with tfsec/checkov, encrypted/locked state).
• Security certifications such as Security+, AWS/Azure security associate, or progress toward CISSP/CCSP.
• Experience with SDLC/DevOps and CI/CD security integration.

Responsibilities

• Support Security Architecture Reviews (SARs) by triaging incoming requests, drafting review notes that document proposed architectures, flagging security gaps, and mapping recommended controls to ESAF patterns.
• Track the implementation of recommended controls and responses to review feedback by solution teams.
• Participate in threat-modeling sessions and consultations to develop architectural judgment.
• Assist in conducting Business Impact Assessments (BIAs) and security risk categorization under senior review.
• Apply risk-based BIA security checklists to ensure control requirements scale appropriately to system risk.
• Prepare risk-assessment documentation as input for decision-making.
• Maintain and update ESAF security patterns, reference architectures, and control libraries across various domains (AI, application, cloud, data, endpoint, GRC, IAM, infrastructure, network).
• Ensure documentation is accurate, usable, and current, as pattern quality and adoption are measured outcomes.
• Participate in weekly architecture reviews, monthly pattern updates, and knowledge-sharing sessions.
• Communicate security requirements clearly to solution teams that the ESA function influences but does not control.

Benefits

• PEOPLE PLANET PLAY framework

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Education Level: No Education Listed