Federal RMF/ATO Security Lead - Cloud Compliance

Leidos; United States; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Hybrid work model

Public Trust eligibility support

Job summary

Leidos seeks a Security Authorization Lead to drive the RMF/ATO lifecycle for L-CAP in government clouds. You will manage security artifacts, coordinate with FAA security and AO staff, and oversee control inheritance, POA&Ms, and continuous monitoring.

This role spans four ARTs to ensure consistent evidence and secure delivery. The position is hybrid with on-site requirements and potential for remote work, depending on commutable distance from listed hubs.

Qualifications

• Bachelor's degree in cybersecurity, CS, IT, or related field; 6+ years of cybersecurity or security authorization experience.
• Experience leading a federal information system through RMF to ATO or equivalent authorization.
• Experience developing and defending authorization packages (SSPs, POA&Ms, Security Assessment Reports).
• Familiarity with FedRAMP cloud controls and inheritance, CVE disposition, and remediation tracking.

Responsibilities

• Lead RMF/ATO processes for L-CAP workloads on government-provided cloud infrastructure.
• Maintain and defend the security authorization package (SSP, POA&Ms, Security Assessment Reports, boundary diagrams).
• Define control inheritance across cloud provider, government platform, and Leidos layers; maintain Customer Responsibility Matrix.
• Serve as the primary interface with government security reviewers, ISSOs, assessors, and Authorizing Official staff.
• Coordinate and manage POA&M and continuous monitoring lifecycle, remediation milestones, and evidence quality.

Skills

RMF process

Security authorization

SAFe coordination

Technical writing

Public Trust readiness

Education

Bachelor's degree in Cybersecurity/CS/IT or related field

Tools

NIST SP 800-53

Job description

Leidos seeks a Security Authorization Lead to drive the RMF/ATO lifecycle for L-CAP in government clouds. You will manage security artifacts, coordinate with FAA security and AO staff, and oversee control inheritance, POA&Ms, and continuous monitoring.

This role spans four ARTs to ensure consistent evidence and secure delivery. The position is hybrid with on-site requirements and potential for remote work, depending on commutable distance from listed hubs.