Associate Security Architect

WE ARE CAESARS
At Caesars Entertainment, our Mission, Vision & Values reflect our unique purpose, providing people with possibilities and places to have fun. Our Mission, Vision & Values represent a unifying and inspiring way forward, and all Team Members are expected to uphold them.
Our Mission
: “Create the Extraordinary"
Our Vision
: “We create spectacular worlds that immerse, inspire and connect you. We don’t perform magic; we create it with excellence.”
Our Values
: “Blaze the Trail, Together We Win, All-In on Service”
Our corporate social responsibility framework, People Planet Play, represents our continuous dedication to enhancing economic development, uplifting the wellbeing of our Team Members and their families, and making positive contributions to the communities we operate in.

Enterprise Security Architecture provides centralized security oversight, risk assessment, and pattern guidance across Caesars Entertainment. Importantly, ESA does not design business solutions — business units and solution teams own solution architecture. ESA reviews those solutions for security risk, develops reusable security patterns, and advises teams during design.

As an Associate Security Architect, you’ll be the engine behind that review-and-guidance function. You’ll support Security Architecture Reviews (SARs) and Business Impact Assessments (BIAs), help maintain the ESAF security pattern library, and grow into an advisory role under the mentorship of senior architects. This is a strong entry point into enterprise security architecture for someone with a security analyst, GRC, SOC, or solution-engineering background.

What success looks like in the first year:

Independently triages and drafts SAR review notes with minimal rework

Produces accurate BIAs and risk categorizations under light supervision

Meaningfully improves the currency and usability of the pattern library

Builds trusted working relationships with solution and infrastructure teams

Security Architecture Review (SAR) support

Intake and triage incoming review requests against SAR trigger criteria

Draft review notes: document proposed architectures, flag security gaps, and map recommended controls to ESAF patterns

Track that solution teams implement recommended controls and respond to review feedback

Sit in on threat-modeling sessions and consultations to build architectural judgment

Help conduct Business Impact Assessments (BIAs) and security risk categorization under senior review

Apply the risk-based BIA security checklists so control requirements scale appropriately to system risk

Prepare risk-assessment documentation as an input to decision-making

Governance boundary:
In the ESA model, the team assesses risk but does not accept it. Risk acceptance and security exceptions are governed by the Exception Management Policy and decided by senior management / CIO. You’ll produce the assessment, not the acceptance decision.

Pattern & standards maintenance

Maintain and update ESAF security patterns, reference architectures, and control libraries across domains (AI, application, cloud, data, endpoint, GRC, IAM, infrastructure, network)

Keep documentation accurate, usable, and current — pattern quality and adoption are measured outcomes for the team

Participate in weekly architecture reviews, monthly pattern updates, and knowledge-sharing sessions

Communicate security requirements clearly to solution teams the ESA function influences but does not control

Required

1–3 years in a security-adjacent role (security analyst, GRC, SOC, IT audit, or solution/security engineering)

Working knowledge of core security domains: IAM, network, cloud, application, and data security — breadth valued over deep…