Security Architect in Bedford

Energy Jobline ZR; Bedford (MA); On-site; USD 150,000 - 210,000; Full time

Job summary

Leidos is seeking a Cloud Security Architect to design secure multi-cloud solutions for the U.S. Air Force Cloud One Next program.

You will lead security capabilities across AWS, Azure, GCP, and OCI, translating requirements into implementable architectures and working with engineering teams to deploy reusable Cloud One capabilities. This solution architecture and engineering-focused role collaborates with cloud, network, platform, DevSecOps, and cybersecurity teams to abstract CSP-specific

Qualifications

• Design security architectures across AWS, Azure, GCP, and OCI.
• Translate cybersecurity requirements into implementable security solutions.
• Create reusable reference architectures and guardrails for Cloud One.

Responsibilities

• Design security architectures spanning multiple CSPs.
• Translate requirements into technical solutions and guidance.
• Develop reference architectures and architectural guardrails.

Skills

Cloud architecture

Security design

Multi-cloud

Reference architectures

Prototyping

Tech evaluation

Integration patterns

Zero Trust

Tools

AWS

Azure

GCP

OCI

Job description

Job Description

Leidos is seeking a Cloud Security Architect to lead the design and development of secure multi-cloud solutions supporting the U.S. Air Force Cloud One Next (C1N) ACSS contract.

In this role, you will serve as a senior technical architect responsible for designing security capabilities across Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI). The Cloud Security Architect will translate mission, cybersecurity, and platform requirements into implementable architectures and work directly with engineering teams to turn those architectures into reusable Cloud One capabilities.

This is a solution architecture and engineering-focused role, rather than a security operations or compliance management position. The architect will evaluate technologies, develop reference architectures, prototype solutions, make technical recommendations, define integration patterns, and guide engineering teams through implementation.

The Cloud Security Architect will work across cloud, network, platform, DevSecOps, and cybersecurity teams to determine how security capabilities should be designed and integrated into the Cloud One platform. A primary objective of the role is to abstract CSP-specific security complexity into standardized architectures and reusable capabilities that can be consistently deployed across Cloud One environments.

Key Responsibilities:

• Multi-Cloud Security Architecture: Design security architectures and solutions spanning AWS, Azure, GCP, and OCI, identifying common architectural patterns while accounting for CSP-specific capabilities and limitations.
• Security Solution Development: Translate cybersecurity requirements and identified capability gaps into implementable technical solutions, including architecture, technology selection, integration patterns, and implementation guidance.
• Reference Architecture Development: Create reusable reference architectures, design patterns, technical standards, and architectural guardrails that engineering teams can use to consistently build secure cloud environments.
• Architecture Prototyping: Develop proofs of concept and prototypes to validate new security architectures, technologies, integrations, and design approaches before enterprise implementation.
• Technology Evaluation & Selection: Evaluate cloud- and third-party security technologies and develop recommendations based on capability, integration complexity, security effectiveness, scalability, cost, and applicability to Cloud One.
• Build vs. Buy Analysis: Assess when Cloud One should leverage CSP- capabilities, enterprise security platforms, commercial products, or internally developed automation and services.
• Multi-Cloud Capability Abstraction: Design solutions that provide consistent security outcomes across CSPs while minimizing unnecessary CSP-specific implementation for Cloud One consumers.
• Security Platform Integration: Architect integrations between CSP- security services and enterprise security platforms, including , network security, CNAPP, vulnerability management, SIEM, security telemetry, secrets management, and related capabilities.
• Architecture: Design multi-cloud and access architectures including federation, privileged access, workload identities, service identities, role-based and attribute-based access controls, and machine-to-machine authentication.
• Zero Trust Architecture: Translate DoD Zero Trust requirements into practical cloud architecture patterns and platform capabilities spanning , workloads, networks, applications, and data.
• Network Security Architecture: Partner with the Cloud Network Architect to design trust boundaries, segmentation, ingress/egress security, traffic inspection, microsegmentation, private connectivity, and cross-cloud security patterns.