Security Architecture & Engineering Lead

Leidos; Virginia (IL); Hybrid; USD 108,000 - 195,000; Full time

Job summary

Leidos is seeking a Security Architecture & Engineering Lead to act as the cybersecurity technical authority for the integration, accreditation, testing, and operational assessment of force protection sensing technologies supporting the RIA Increased Access OTA Prototype.

This role leads the program’s cybersecurity strategy and ensures secure integration into DoD networks with required authorizations for operational testing and transition.

Qualifications

• Bachelor’s degree and 8–12 years of relevant DoD cybersecurity engineering experience.
• Experience leading security architecture and engineering across SDLC for complex DoD systems.
• Proven ability to integrate multiple hardware, software, OT components into DoD environments.
• Experience planning RMF activities and acquiring IATT/IATO/ATO.
• Experience developing RMF artifacts (SSPs, SAPs, SARs, POA&Ms) and eMASS packages.
• Experience STIG development, ACAS scanning, vulnerability remediation, and compliance documentation.
• Experience managing cybersecurity risks with multiple vendors and DoD stakeholders.
• Experience systems engineering activities including design, integration, verification, validation, and transition to operations.
• Experience secure hardware, software, and infrastructure for mission-critical systems.
• Experience as cybersecurity engineering lead or technical authority for accreditation activities.

Responsibilities

• Develop the cybersecurity integration strategy for incorporating multiple OEM sensing technologies into the RIA Increased Access Prototype while balancing mission effectiveness, interoperability, operational usability, and cybersecurity compliance within the existing Rock Island Arsenal enterprise environment.

Skills

Security architecture

RMF implementation

STIG compliance

ACAS vulnerability management

IATT/IATO/ATO processes

DoD network environments

Education

Bachelor’s degree

Tools

eMASS

SSP/SAP/SAR

POA&Ms

ACAS scanning

Job description

Description

The Force Protection Division is seeking a Security Architecture & Engineering Lead to serve as the cybersecurity technical authority for the integration, accreditation, testing, and operational assessment of force protection sensing technologies supporting the Rock Island Arsenal (RIA) Increased Access OTA Prototype. The successful candidate will lead the development and execution of the program's cybersecurity strategy, ensuring the prototype is securely integrated into existing Department of Defense (DoD) network environments and achieves the required cybersecurity authorizations to support operational testing and transition.

The Security Architecture & Engineering Lead is responsible for planning, coordinating, and executing all cybersecurity engineering activities throughout the prototype lifecycle, including security architecture development, Risk Management Framework (RMF) implementation, Security Technical Implementation Guide (STIG) compliance, Assured Compliance Assessment Solution (ACAS) vulnerability management, and development of accreditation artifacts supporting an Interim Authority to Test (IATT), Interim Authority to Operate (IATO), and ultimately an Authorization to Operate (ATO). The individual will serve as the program's primary cybersecurity engineering lead, ensuring cybersecurity requirements are integrated into system design, development, integration, verification, and operational validation activities.

Working closely with Government stakeholders, Leidos engineering teams, subcontractors, and commercial technology providers, the Security Architecture & Engineering Lead will oversee the secure integration of multiple vendor solutions into an existing DoD enterprise environment. The individual will identify and mitigate cybersecurity risks associated with integrating commercial off-the-shelf (COTS), Government off-the-shelf (GOTS), and prototype technologies while ensuring compliance with DoD cybersecurity policies, Army security requirements, and applicable federal standards.

The Security Architecture & Engineering Lead collaborates across systems engineering, software engineering, networking, integration and test, and program management organizations to resolve technical issues, manage cybersecurity risks, support operational assessments, and enable the successful fielding of a secure, mission-ready prototype. The position requires a technically proficient cybersecurity leader capable of balancing mission execution, engineering rigor, and operational objectives within a fast-paced prototype development environment.

Primary Responsibilities

• Develop the cybersecurity integration strategy for incorporating multiple OEM sensing technologies into the RIA Increased Access Prototype while balancing mission effectiveness, interoperability, operational usability, and cybersecurity compliance within the existing Rock Island Arsenal enterprise environment.

Basic Qualifications

• Bachelor’s degree and 8 – 12 years of prior relevant experience.
• Demonstrated experience leading security architecture and engineering activities throughout the system development life cycle (SDLC) for complex Department of Defense (DoD) systems.
• Demonstrated experience developing and implementing cybersecurity architectures that support the integration of multiple hardware, software, networking, and operational technology (OT) components into existing DoD enterprise or tactical network environments.
• Demonstrated experience planning and executing the Risk Management Framework (RMF) process, including development of RMF artifacts required to obtain an Interim Authority to Test (IATT), Interim Authority to Operate (IATO), and/or Authorization to Operate (ATO).
• Demonstrated experience developing, maintaining, and managing RMF documentation and artifacts, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Plans of Action & Milestones (POA&Ms), eMASS packages, and supporting accreditation documentation.
• Demonstrated experience developing, reviewing, and implementing Security Technical Implementation Guides (STIGs), Assured Compliance Assessment Solution (ACAS) scanning requirements, vulnerability remediation plans, and security compliance documentation for DoD information systems.
• Demonstrated experience identifying, assessing, and mitigating cybersecurity risks associated with integrating multiple commercial, Government, and third-party vendor systems into existing DoD network environments.
• Demonstrated experience leading technical integration efforts involving multiple engineering disciplines, subcontractors, vendors, and Government stakeholders while ensuring compliance with DoD cybersecurity policies, RMF requirements, and accreditation objectives.
• Demonstrated experience executing systems engineering activities including technical planning, system architecture, technical design, development, integration, verification, validation, and transition to operational use.
• Demonstrated experience designing, engineering, implementing, integrating, maintaining, and continuously improving secure hardware, software, communications, and infrastructure components supporting mission-critical systems.
• Demonstrated experience serving as the cybersecurity engineering lead or technical authority responsible for security accreditation activities supporting operational assessments, developmental testing, field demonstrations, or system deployment.

Preferred Qualifications

• Experience obtaining IATTs or IATOs for prototype systems supporting operational assessments, user evaluations, or developmental testing.
• Experience supporting Army, Joint, or other DoD rapid prototyping and capability demonstration efforts.
• Experience integrating commercial off-the-shelf (COTS), government off-the-shelf (GOTS), and third-party vendor technologies into accredited DoD environments.
• Experience with Zero Trust Architecture, DevSecOps, Continuous ATO, and cloud-enabled security architectures.
• Professional cybersecurity certifications such as CISSP, CASP+, Security+, CCSP, or equivalent.

Original Posting

July 21, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range

Pay Range $107,900.00 - $195,050.00

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.

#Remote