Associate Security Architect

Enterprise Security Architecture provides centralized security oversight, risk assessment, and pattern guidance across Caesars Entertainment. Importantly, ESA does not design business solutions — business units and solution teams own solution architecture. ESA reviews those solutions for security risk, develops reusable security patterns, and advises teams during design.

As an Associate Security Architect, you’ll be the engine behind that review-and-guidance function. You’ll support Security Architecture Reviews (SARs) and Business Impact Assessments (BIAs), help maintain the ESAF security pattern library, and grow into an advisory role under the mentorship of senior architects. This is a strong entry point into enterprise security architecture for someone with a security analyst, GRC, SOC, or solution-engineering background.

What success looks like in the first year:

Independently triages and drafts SAR review notes with minimal rework

Produces accurate BIAs and risk categorizations under light supervision

Meaningfully improves the currency and usability of the pattern library

Builds trusted working relationships with solution and infrastructure teams

At Caesars Entertainment, Inc., our Team Members create the extraordinary. We are the largest casino-entertainment company in the U.S. and one of the world's most diversified casino-entertainment providers. Since beginning in Reno, Nevada, in 1937, Caesars Entertainment has grown through the development of new resorts, expansions and acquisitions. Our resorts operate primarily under the Caesars, Harrah's, Horseshoe and Eldorado brand names.

We focus on building loyalty and value with our guests through a combination of impeccable service, operational excellence and technological leadership. The company is committed to its Team Members, suppliers, communities and the environment through its PEOPLE PLANET PLAY framework.  Our Caesars family is driven by our Mission, Vision and Values. We take great pride in living these values – Together We Win, All In On Service and Blaze the Trail – every day.

Our mission, “Create the Extraordinary”. Our vision, “Create spectacular worlds. That immerse, inspire and connect you. We don’t perform magic; we create it with excellence. #We Are Caesars ”.  If you are ready to create some magic, we invite you to explore our dynamic, yet unique, career opportunities.

Required1–3 years in a security-adjacent role (security analyst, GRC, SOC, IT audit, or solution/security engineering)
Working knowledge of core security domains: IAM, network, cloud, application, and data security — breadth valued over deep single-stack specialization

Familiarity with at least one threat-modeling approach (e.g., STRIDE) or the MITRE ATT&CK framework

Awareness of regulatory frameworks relevant to gaming/hospitality: PCI-DSS, SOX, gaming commission requirements, and privacy laws (GDPR/CCPA)
Strong written communication — the role’s output is reviews, assessments, and documentation others must act on Collaborative, diplomatic working style; comfortable influencing teams you don’t have authority over

Nice to have Cloud security fundamentals, with AWS emphasis — the platform’s agentic/AI stack is built on Amazon Bedrock, so AWS IAM, VPC endpoints (Private Link), and KMS familiarity are especially valuable

Exposure to AWS Bedrock and agentic AI security — Bedrock Guardrails, Knowledge Base / RAG security, Bedrock Agents, and Bedrock Agent Core (Gateway/Runtime/Identity) with MCP servers. This is where the team’s AI security work actually lives (Bedrock-based, not Copilot-based), and it’s a currently high-demand area.

Understanding of MCP (Model Context Protocol) security concepts — agent-to-tool authentication (JWT/OAuth 2.0), tool-level access…