Security Authorization Lead - FedRAMP/ATO Expert

Leidos Inc; Gaithersburg (MD); Hybrid; USD 108,000 - 195,000; Full time

Job summary

Leidos seeks a Security Authorization Lead to own the RMF/ATO lifecycle for L-CAP workloads, interfacing with FAA security and Authorizing Official staff. You will manage the authorization package, control inheritance, and continuous monitoring across hybrid cloud environments.

You will translate security requirements into engineering backlog items, ensure cross-ART compliance, and drive FedRAMP compliance while maintaining a robust security posture in a fast-paced, mission-critical program.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, IT, or related field with 6+ years of relevant cybersecurity experience, or a Master's with 4+ years.
• Experience leading a federal information system through RMF to ATO or equivalent authorization, including NIST 800-53 Rev. 5.
• Experience developing authorization packages (SSPs, POA&Ms, SARs, boundary diagrams).
• Experience with FedRAMP cloud control inheritance and vulnerability management.
• Experience working with government security reviewers, ISSOs, and Authorizing Official staff.
• Ability to translate security requirements into actionable backlog items for multiple Agile teams.
• Strong government-facing security documentation skills; U.S. citizenship and public trust eligibility required.

Responsibilities

• Lead the government RMF/ATO authorization process for L-CAP workloads on government-provisioned cloud infrastructure.
• Own and maintain the security authorization package, including SBOMs, POA&Ms, and evidence artifacts.
• Define and defend security control inheritance across cloud, platform, and application layers.
• Interface with government security reviewers, ISSOs, assessors, and Authorizing Official staff.
• Manage POA&M and continuous monitoring lifecycle, including findings and remediation milestones.
• Maintain the authorization boundary as architecture evolves and translate requirements into engineering backlog items.
• Coordinate cross-ART compliance to ensure consistent control implementation and evidence quality.
• Support FedRAMP and agency-specific authorization requirements across cloud environments.
• Coordinate personnel security and facility access eligibility; champion AI-first engineering culture.

Skills

RMF/ATO processes

Security authorization lifecycles

FedRAMP/ GovCloud

SAFe / Agile compliance

Technical writing

Interfacing with government reviewers

Backlog item translation

Public Trust eligibility

Education

Bachelor's degree in Cybersecurity or related field

Master's degree (optional for seniority)

Tools

OSCAL

eMASS

Xacta

SBOM tooling

Job description

Leidos seeks a Security Authorization Lead to own the RMF/ATO lifecycle for L-CAP workloads, interfacing with FAA security and Authorizing Official staff. You will manage the authorization package, control inheritance, and continuous monitoring across hybrid cloud environments.

You will translate security requirements into engineering backlog items, ensure cross-ART compliance, and drive FedRAMP compliance while maintaining a robust security posture in a fast-paced, mission-critical program.