Principal Cyber Security Architect

Leidos

Eagan (MN)

Hybrid

USD 131,000 - 237,000

Full time

4 days ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Health and Wellness programs

Income Protection

Paid Leave

Retirement

Job summary

Leidos seeks a senior Cyber Security Architect to define security across a large-scale hybrid cloud platform (L-CAP) supporting national air traffic operations. You will lead security architecture, FedRAMP strategy, and ATO efforts, integrating zero trust and SBOM practices across DevSecOps.

This role requires US citizenship and eligibility for Public Trust, with assignments to multiple locations including Eagan, MN.

Qualifications

Bachelor's degree with 12+ years of cybersecurity experience.
Demonstrated cybersecurity architecture experience for enterprise platforms.
Deep knowledge of FedRAMP authorization processes and requirements.
Expertise in NIST 800-53 security controls and RMF.
Experience leading ATO efforts for federal information systems.
Knowledge of zero trust architecture principles and implementation patterns.
Experience with safety-critical systems security requirements.
Cloud security expertise across AWS and/or Azure environments.
Understanding of distributed systems security challenges and solutions.
Experience securing distributed real-time services and microservice communication patterns.
Knowledge of software supply chain security practices (SLSA, SBOM, artifact signing, dependency scanning).
Ability to obtain and maintain a Public Trust
U.S. citizenship required
Successful completion of background investigations as required by the government customer

Responsibilities

Define and maintain the cybersecurity architecture for the L-CAP platform.
Develop and execute the FedRAMP compliance strategy across cloud environments.
Lead Authority to Operate (ATO) planning and execution activities.
Conduct threat modeling and vulnerability assessments across platform components.
Design and implement zero trust architecture principles across the enterprise.
Establish and govern the security controls framework aligned to NIST 800-53.
Integrate security practices into DevSecOps pipelines and CI/CD workflows.
Provide cybersecurity governance across four Agile Release Trains (ARTs).
Define security requirements for platform services and application teams.
Perform risk assessments and recommend mitigations for emerging threats.
Define security architecture for distributed real-time ATC services including inter-service communication protection and API gateway security.
Establish software supply chain integrity controls including SBOM generation, artifact signing, and dependency vulnerability management.
Design security patterns for cloud-native service communications protecting mission-critical ATC data flows.
Champion an AI-first engineering culture by identifying and applying AI-assisted development capabilities, automation, and emerging software engineering practices that improve developer productivity, code quality, testing, and delivery.

Skills

Cybersecurity architecture

FedRAMP security models

NIST 800-53

RMF

Zero trust

ATO leadership

Cloud security (AWS/Azure)

Safety-critical systems security

SLSA/SBOM/artifact signing

Public Trust eligibility

U.S. citizenship

Federal information systems security

Education

Bachelor's degree in cybersecurity or related field

Job description

Description

This role is part of a growing program, and hiring will depend on available funding. We review applications on a rolling basis, but the timeline for interviews and offers may vary. In some cases, we may extend contingent offers that become active once funding is confirmed.

This position is located in Gaithersburg, MD; Egg Harbor Township, NJ; or Eagan, MN. This is an opportunity to contribute to projects that impact millions of air travelers.

This is a hybrid position requiring 3 days onsite and 2 days remote work. Candidates should reside a commutable distance to one of the above locations.

Leidos is seeking a Cyber Security Architect to join the Air Traffic Business Area within the Homeland Sector, supporting the development of the Leidos Common Automation Platform (L-CAP). L-CAP is a mission-critical, future-ready automation platform built on a hybrid cloud data mesh architecture, enabling next-generation air traffic management capabilities. You will serve as a senior cybersecurity architect responsible for defining the security architecture across a large-scale hybrid cloud platform supporting national air traffic operations. We are building with an AI-first engineering mindset, embracing emerging AI capabilities and modern development practices to accelerate delivery, improve software quality, and continuously evolve how we design and build mission-critical systems. This position supports government programs and requires the ability to obtain and maintain a favorable Public Trust investigation.

What You'll Do

Define and maintain the cybersecurity architecture for the L-CAP platform
Develop and execute the FedRAMP compliance strategy across cloud environments
Lead Authority to Operate (ATO) planning and execution activities
Conduct threat modeling and vulnerability assessments across platform components
Design and implement zero trust architecture principles across the enterprise
Establish and govern the security controls framework aligned to NIST 800-53
Integrate security practices into DevSecOps pipelines and CI/CD workflows
Provide cybersecurity governance across four Agile Release Trains (ARTs)
Define security requirements for platform services and application teams
Perform risk assessments and recommend mitigations for emerging threats
Define security architecture for distributed real-time ATC services including inter-service communication protection and API gateway security
Establish software supply chain integrity controls including SBOM generation, artifact signing, and dependency vulnerability management
Design security patterns for cloud-native service communications protecting mission-critical ATC data flows
Champion an AI-first engineering culture by identifying and applying AI-assisted development capabilities, automation, and emerging software engineering practices that improve developer productivity, code quality, testing, and delivery.

Core Technical Qualifications

Bachelor's degree with 12+ years of cybersecurity experience
Demonstrated cybersecurity architecture experience for enterprise platforms
Deep knowledge of FedRAMP authorization processes and requirements
Expertise in NIST 800-53 security controls and Risk Management Framework (RMF)
Experience leading ATO efforts for federal information systems
Knowledge of zero trust architecture principles and implementation patterns
Experience with safety-critical systems security requirements
Cloud security expertise across AWS and/or Azure environments
Understanding of distributed systems security challenges and solutions
Experience securing distributed real-time services and microservice communication patterns
Knowledge of software supply chain security practices (SLSA, SBOM, artifact signing, dependency scanning)
Ability to obtain and maintain a Public Trust
U.S. citizenship required
Successful completion of background investigations as required by the government customer

Preferred / Desired Qualifications

CISSP, CISM, or equivalent cybersecurity certifications
FAA or aviation-sector cybersecurity experience
Penetration testing and red team experience
SIEM architecture and security operations design
Mission assurance and continuity of operations experience
DoD or federal civilian agency cybersecurity programs
Experience securing real-time operational systems in aviation or air traffic control environments

Why Leidos?

You'll work on systems where performance, precision, and reliability matter — every second. This is not experimental AI for prototypes. This is disciplined, responsible AI applied to mission-critical software that supports national infrastructure.

If you're excited by solving complex problems in regulated, real-world environments — and using AI as a force multiplier rather than a shortcut — we'd like to talk.

ATMC

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.

Pay Range $131,300.00 - $237,350.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers.

Pay and Benefits