Principal Cyber Security Architect with Security Clearance

R
- Description This role is part of a growing program, and hiring will depend on available funding. We review applications on a rolling basis, but the timeline for interviews and offers may vary. In some cases, we may extend contingent offers that become active once funding is confirmed.
This position is located in Gaithersburg, MD;
Egg Harbor Township, NJ; or Eagan, MN. This is an opportunity to contribute to projects that impact millions of air travelers.  This is a hybrid position requiring 3 days onsite and 2 days remote work.  Candidates should reside a commutable distance to one of the above locations.  Leidos is seeking a Cyber Security Architect to join the Air Traffic Business Area within the Homeland Sector, supporting the development of the Leidos Common Automation Platform (L-CAP).

L-CAP is a mission-critical, future-ready automation platform built on a hybrid cloud data mesh architecture, enabling next-generation air traffic management capabilities. You will serve as a senior cybersecurity architect responsible for defining the security architecture across a large-scale hybrid cloud platform supporting national air traffic operations. We are building with an AI-first engineering mindset, embracing emerging AI capabilities and modern development practices to accelerate delivery, improve software quality, and continuously evolve how we design and build mission-critical systems.

This position supports government programs and requires the ability to obtain and  maintain  a favorable Public Trust investigation.
What You'll Do   
* Define and  maintain  the cybersecurity architecture for the L-CAP platform   
* Develop and execute the FedRAMP compliance strategy across cloud environments   
* Lead Authority to Operate (ATO) planning and execution activities   
* Conduct threat modeling and vulnerability assessments across platform components   
* Design and implement zero trust architecture principles across the enterprise   
* Establish and govern the security controls framework aligned to NIST 800-53   
* Integrate security practices into  Dev Sec Ops   pipelines and CI/CD workflows   
* Provide cybersecurity governance across four Agile Release Trains (ARTs)   
* Define security requirements for platform services and application teams   
* Perform risk assessments and recommend mitigations for emerging threats   
* Define security architecture for distributed real-time ATC services including inter-service communication protection and API gateway security   
* Establish software supply chain integrity controls including SBOM generation, artifact signing, and dependency vulnerability management   
* Design security patterns for cloud-native service communications protecting mission-critical ATC data flows   
* Champion an AI-first engineering culture by  identifying  and applying AI-assisted development capabilities, automation, and emerging software engineering practices that improve developer productivity, code quality, testing, and delivery.
Core Technical

Qualifications:

* Bachelor's degree with 12+ years of cybersecurity experience   
* Demonstrated cybersecurity architecture experience for enterprise platforms   
* Deep knowledge of FedRAMP authorization processes and requirements   
* Expertise  in NIST 800-53 security controls and Risk Management Framework (RMF)   
* Experience leading ATO efforts for federal information systems   
* Knowledge of zero trust architecture principles and implementation patterns   
* Experience with safety-critical systems security requirements   
* Cloud security  expertise  across AWS and/or Azure environments   
* Understanding of distributed systems security challenges and solutions   
* Ability to obtain and  maintain  a Public Trust clearance; US citizenship  required ; subject to government background investigation   
* Experience securing distributed real-time services and microservice communication patterns   
* Knowledge of software supply chain security practices (SLSA, SBOM, artifact signing, dependency scanning)  
* Ability to obtain and maintain a Public Trust
* U.S. citizenship required
* Successful completion of background investigations as required by the…