Security Architect

Leidos is seeking a Cloud Security Architect to lead the design and development of secure multi-cloud solutions supporting the U.S. Air Force Cloud One Next (C1N) ACSS  this role, you will serve as a senior technical architect responsible for designing security capabilities across Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI). The Cloud Security Architect will translate mission, cybersecurity, and platform requirements into implementable architectures and work directly with engineering teams to turn those architectures into reusable Cloud One capabilities.

This is a solution architecture and engineering-focused role, rather than a security operations or compliance management position. The architect will evaluate technologies, develop reference architectures, prototype solutions, make technical recommendations, define integration patterns, and guide engineering teams through implementation.

The Cloud Security Architect will work across cloud, network, platform, Dev Sec Ops , and cybersecurity teams to determine how security capabilities should be designed and integrated into the Cloud One platform. A primary objective of the role is to abstract CSP-specific security complexity into standardized architectures and reusable capabilities that can be consistently deployed across Cloud One environments.

Key Responsibilities:

Multi-Cloud Security Architecture:
Design security architectures and solutions spanning AWS, Azure, GCP, and OCI, identifying common architectural patterns while accounting for CSP-specific capabilities and limitations.

Security Solution Development:
Translate cybersecurity requirements and identified capability gaps into implementable technical solutions, including architecture, technology selection, integration patterns, and implementation guidance.

Reference Architecture Development:
Create reusable reference architectures, design patterns, technical standards, and architectural guardrails that engineering teams can use to consistently build secure cloud environments.

Architecture Prototyping:
Develop proofs of concept and prototypes to validate new security architectures, technologies, integrations, and design approaches before enterprise implementation.

Technology Evaluation & Selection:
Evaluate cloud-native and third-party security technologies and develop recommendations based on capability, integration complexity, security effectiveness, scalability, cost, and applicability to Cloud One.

Build vs. Buy Analysis:
Assess when Cloud One should leverage CSP-native capabilities, enterprise security platforms, commercial products, or internally developed automation and services.

Multi-Cloud Capability Abstraction:
Design solutions that provide consistent security outcomes across CSPs while minimizing unnecessary CSP-specific implementation differences for Cloud One consumers.

Security Platform Integration:
Architect integrations between CSP-native security services and enterprise security platforms, including identity, network security, CNAPP, vulnerability management, SIEM, security telemetry, secrets management, and related capabilities.

Identity Architecture:
Design multi-cloud identity and access architectures including federation, privileged access, workload identities, service identities, role-based and attribute-based access controls, and machine-to-machine authentication.

Zero Trust Architecture:
Translate DoD Zero Trust requirements into practical cloud architecture patterns and platform capabilities spanning identity, workloads, networks, applications, and data.

Network Security Architecture:
Partner with the Cloud Network Architect to design trust boundaries, segmentation, ingress/egress security,…