Senior Cybersecurity Architect - Hybrid Cloud for ATC

Leidos; Gaithersburg (MD); Hybrid; USD 131,000 - 237,000; Full time

Benefits offered by this job

Competitive compensation

Health and Wellness programs

Income Protection

Paid Leave

Retirement

Job summary

Leidos seeks a Cyber Security Architect for the Air Traffic Business Area to define security across a large-scale hybrid cloud platform supporting national air traffic operations.

You will lead FedRAMP strategy, ATO planning, threat modeling, and zero-trust design in a role that integrates security into DevSecOps and guides four ARTs, with AI-first engineering practices shaping delivery.

Qualifications

• Bachelor's degree with 12+ years of cybersecurity experience.
• Demonstrated cybersecurity architecture experience for enterprise platforms.
• Deep knowledge of FedRAMP authorization processes and requirements.
• Expertise in NIST 800-53 security controls and RMF.
• Experience leading ATO efforts for federal information systems.
• Knowledge of zero trust architecture principles and implementation patterns.
• Experience with safety-critical systems security requirements.
• Cloud security expertise across AWS and/or Azure environments.
• Understanding of distributed systems security challenges and solutions.
• Experience securing distributed real-time services and microservice communication patterns.
• Knowledge of software supply chain security practices (SLSA, SBOM, artifact signing, dependency scanning).
• Ability to obtain and maintain a Public Trust; U.S. citizenship required.

Responsibilities

• Define and maintain the cybersecurity architecture for the L-CAP platform.
• Develop and execute the FedRAMP compliance strategy across cloud environments.
• Lead Authority to Operate (ATO) planning and execution activities.
• Conduct threat modeling and vulnerability assessments across platform components.
• Design and implement zero trust architecture principles across the enterprise.
• Establish and govern the security controls framework aligned to NIST 800-53.
• Integrate security practices into DevSecOps pipelines and CI/CD workflows.
• Provide cybersecurity governance across four Agile Release Trains (ARTs).
• Define security requirements for platform services and application teams.
• Perform risk assessments and recommend mitigations for emerging threats.
• Define security architecture for distributed real-time ATC services including inter-service communication protection and API gateway security.
• Establish software supply chain integrity controls including SBOM generation, artifact signing, and dependency vulnerability management.
• Design security patterns for cloud-native service communications protecting mission-critical ATC data flows.
• Champion an AI-first engineering culture by identifying and applying AI-assisted development capabilities.

Skills

Cybersecurity architecture

FedRAMP knowledge

NIST 800-53 RMF

ATO leadership

Zero trust

Cloud security

Distributed systems security

Software supply chain security

Safety-critical security

Education

Bachelor's degree in cybersecurity

Tools

AWS

Azure

Job description

Leidos seeks a Cyber Security Architect for the Air Traffic Business Area to define security across a large-scale hybrid cloud platform supporting national air traffic operations.

You will lead FedRAMP strategy, ATO planning, threat modeling, and zero-trust design in a role that integrates security into DevSecOps and guides four ARTs, with AI-first engineering practices shaping delivery.