Security Architect

Leidos LLC; Brookmont (MD); Hybrid; USD 154,000 - 278,000; Full time

Job summary

Leidos is seeking a Security Engineer Architect Lead to guide security across cloud and on‑prem environments, leading RMF/ATO efforts and cross‑team collaboration in a fast‑paced setting.

The role emphasizes strong leadership, security policy development, and incident response within a DoD/IC context, with on‑site work in Bethesda, MD and flexible remote options based on client needs.

Qualifications

• BS degree and 15+ years of relevant experience or Master’s with 12+ years of relevant experience.
• Active TS/SCI clearance with ability to obtain/maintain a Polygraph.
• Prefer DoD 8570.01-M IASAE Level II certs: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE (CISSP Associate not acceptable).
• Familiarity with NIST SP 800-27/30/37/53/60 and CNSS 1253 all essential.
• Experience with RMF/ATO for DoD/IC systems, incident response, POA&Ms, and vulnerability management.
• Experience building SSE programs to integrate security/privacy controls into complex systems.
• Experience leading a team of CSEs/ISSOs; strong cross-team collaboration.

Responsibilities

• Provide security engineering leadership across cloud and on‑prem environments.
• Lead RMF/ATO processes and interface with DIA CIO and NDOC Security POCs.
• Create and enforce security policies; perform OS hardening and patch guidance per DISA STIGs and NIST.
• Direct team priorities, deliverables, and milestones; support product ownership for Security Team.
• Collaborate across program management and engineers to deliver secure, compliant solutions.
• Analyze incidents and recommend remediation; facilitate cross-domain security engineering.

Skills

TS/SCI clearance

Security Architect

RMF/ATO experience

Agile/SAFe

Team leadership

Incident response

DISA STIGs / NIST

Jira & Confluence

Kubernetes/Rancher

PKI / VPN / VPC

CISSP or equivalent certs

Education

BS degree

Master's degree

Tools

Tenable Security Center

Jira

Confluence

CNSSI 1253

CNSS 1253

NIST SP 800-series

Linux / Windows

Active Directory

Elasticsearch

Jenkins/Gitlab CI/CD

OIDC/OAuth2

Job description

Are you ready to join Leidos all-star team? Through training, teamwork, and exposure to challenging technical work, let Leidos show how to accelerate your career path. Leidos has an exciting opening for you as our next TS/SCI Security Engineer Architect working across several Task Orders under the DOMEX Technology Platform (DTP) contract supporting National Digital Exploitation & OSINT Center systems. Have impact as part of a mission focused, solutions oriented, and adaptive team that values innovation, collaboration, and professional development. As the Security Engineering Architect Lead, your job is to provide technical security expertise in our cloud and on-premise infrastructure with focus on leading teams through the Risk Management Framework to system ATOs across multiple domains. You will lean on your experience with security technologies and industry best practices while employing effective security solutions. You are a demonstrated leader, skilled at achieving cross functional collaboration in a dynamic and fast paced environment. While most work is conducted on-site at our client location in Bethesda, MD, we offer a flexible schedule and, occasionally, some tasks may be performed remotely. Percentage of remote work will vary based on client requirements/deliverables.

As an integral member of the team, you will work closely with DTP Program Management, Task Order Leads, and Security and System Engineers on the following key tasks:

• Provide management oversight and coordination of DTP Security Team across multiple Task Orders with a focus on streamlining ATO management processes with engineering solutions and best practice efficiencies
• Provide technical guidance to team members while employing security solutions
• Directly interact with DIA CIO and NDOC Security POCs
• Create, improve, and maintain security policies and procedures
• Provide operating system hardening and system patching guidance based on DISA STIGs and NIST publications
• Analyze security incidents and provide recommendations for resolution
• Strong knowledge and experience in software development in an Agile or SAFe environment
• Serve as Product Owner for the Security Engineering Team
• Manage individual project priorities, deliverables, and deadlines.
• Foster an environment of collaboration with the different team members in the goal of providing quality service and product to our customer.

You demonstrate a solid understanding of security best practices and meet the following qualifications:

• BS degree and 15+ years of prior relevant experience or Masters with 12+ years of prior relevant experience
• An active TS/SCI clearance with the ability to obtain/maintain a Polygraph
• Have at least one of the following DoD 8570.01-M IASAE Level II certifications: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE. NOTE: the CISSP Associate is not acceptable
• Familiarity with NIST Special Publications e.g. NIST SP 800-27, 30, 37, 53, 60
• Experience with CNSS publication CNSSI 1253
• Experience supporting DoD/IC systems through the entire Risk Management Framework Plus (RMF) process to ATO
• Experience with incident response plans, plans of actions and milestones (POA&Ms), risk management plans, and vulnerability management plans
• Experience establishing and maintaining a System Security Engineering (SSE) management process to integrate security and privacy controls into complex hardware and software systems
• Experience managing a team of Cyber Security Engineers (CSEs) and Information System Security Officers (ISSOs)
• Experience using Tenable Security Center and all components
• Experience with technologies such as Linux, Windows, firewalls, gateways, proxies, VPCs, and public key infrastructure.
• Strong analytical, communication, problem-solving, and interpersonal skills

You will wow us even more if you have some of these:

• An active TS/SCI clearance with Poly Certified Scrum Master (CSM) or SAFe Scrum Master (SSM) certification
• Experience with SAFe methodology
• Successfully achieved ATO under RMF+ across multiple domains
• Experience working in Agile and DevOpsSec environments
• Experience with big data applications
• Experience with Jira and Confluence
• Experience with OIDC or Oauth2
• Experience with any of the following technologies: Kubernetes, Rancher, or Cloudera containerization technologies CI/CD tools like Jenkins or Gitlab Elasticsearch Active Directory SQL and NoSQL databases Scripting languages like bash, python, or PowerShell

#NMECDTP-Leidos #ASBA

At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We’re not hiring followers. We’re recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We’re already at step 30 — and moving faster than anyone else dares.

Original Posting

June 24, 2026 For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. Pay Range: Pay Range $154,050.00 - $278,475.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $17.2 billion for the fiscal year ended January 2, 2026. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available here.

Securing Your Data

Leidos will never ask you to provide payment-related information at any part of the employment application process. And Leidos will communicate with you only through emails that are sent from a Leidos.com email address. If you receive an email purporting to be from Leidos that asks for payment-related information or any other personal information, please report the email to [e-mail].

Commitment and Diversity

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.