Hybrid Principal Cybersecurity Architect

Leidos LLC; Gaithersburg (MD); Hybrid; USD 131,000 - 237,000; Full time

Job summary

Leidos LLC in Gaithersburg, MD is seeking a senior cybersecurity architect to define and maintain the security posture of the L-CAP platform. This hybrid role requires 3 days onsite and 2 days remote, with eligibility for federal-level program work and potential contingent offers based on funding.

You will lead FedRAMP and RMF activities, drive zero-trust design, and ensure secure software supply chains across cloud environments (AWS/Azure).

Qualifications

• Bachelor's degree in cybersecurity or related field and 12+ years of cybersecurity experience.
• Demonstrated cybersecurity architecture experience for enterprise platforms.
• Deep knowledge of FedRAMP authorization processes and requirements.
• Expertise in NIST 800-53 controls and RMF.
• Experience leading ATO efforts for federal information systems.
• Knowledge of zero trust architecture principles and implementation patterns.
• Cloud security expertise across AWS and/or Azure.
• Ability to obtain and maintain a Public Trust clearance; US citizenship required; subject to government background investigation.
• Experience securing distributed real-time services and microservice communication patterns.
• Knowledge of software supply chain security practices (SLSA, SBOM, artifact signing, dependency scanning).

Responsibilities

• Define and maintain the cybersecurity architecture for the L-CAP platform
• Develop and execute the FedRAMP compliance strategy across cloud environments
• Lead Authority to Operate (ATO) planning and execution activities
• Conduct threat modeling and vulnerability assessments across platform components
• Design and implement zero trust architecture principles across the enterprise
• Establish and govern the security controls framework aligned to NIST 800-53
• Integrate security practices into DevSecOps pipelines and CI/CD workflows
• Provide cybersecurity governance across four Agile Release Trains (ARTs)
• Define security requirements for platform services and application teams
• Perform risk assessments and recommend mitigations for emerging threats
• Define security architecture for distributed real-time ATC services including inter-service communication protection and API gateway security
• Establish software supply chain integrity controls including SBOM generation, artifact signing, and dependency vulnerability management
• Design security patterns for cloud-native service communications protecting mission-critical ATC data flows
• Champion an AI-first engineering culture by identifying and applying AI-assisted development capabilities, automation, and emerging software engineering practices that improve developer productivity, code quality, testing, and delivery.

Skills

Cybersecurity architecture

FedRAMP knowledge

NIST 800-53 RMF

Zero trust

DevSecOps

Threat modeling

Cloud security

Public Trust clearance

Education

Bachelor’s degree in cybersecurity or related field

Tools

AWS

Azure

CI/CD pipelines

SBOM tooling

Job description

Leidos LLC in Gaithersburg, MD is seeking a senior cybersecurity architect to define and maintain the security posture of the L-CAP platform. This hybrid role requires 3 days onsite and 2 days remote, with eligibility for federal-level program work and potential contingent offers based on funding.

You will lead FedRAMP and RMF activities, drive zero-trust design, and ensure secure software supply chains across cloud environments (AWS/Azure).