{"id":155472,"url":"https://alion.io/job/leidos-data-centric-security-architect-mbse-sparx-ea","title":"Data-Centric Security Architect (MBSE / Sparx EA)","company":{"id":7791,"name":"Leidos","domain":"leidos.com","url":"https://alion.io/company/leidos","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":78,"open_postings":281,"ghost_share":0.004,"stale_share":0.868,"repost_share":0.004,"time_to_fill_p50_days":28,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"staff","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Brussels, Belgium"],"countries":["BE"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":131300,"max":237350,"currency":"USD","period":"year","gross":null,"usd_annual":237350},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DoDAF","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"MBSE","optional":false},{"name":"NIST 800-53","optional":false},{"name":"STANAG","optional":false},{"name":"SysML","optional":false},{"name":"UML","optional":false},{"name":"Zero Trust","optional":false},{"name":"Cameo Systems Modeler","optional":true}],"status":"live","first_seen_at":"2026-08-15T00:00:00Z","employer_posted_date":"2026-08-15","last_verified_at":"2026-10-29T03:59:28Z","board_verified":true,"closed_at":null,"days_open":75,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":75},"description":"Leidos is seeking a Data-Centric Security Architect (MBSE / Sparx EA)to develop robust security frameworks for a groundbreaking integrated air and missile defence command and control (C2) program for NATO partners and allied operations. You will bring your expertise in data-centric security to design, evolve, and validate a fit-for-purpose security architecture for a cloud-based solution supporting NATO missions. The role requires a thorough understanding of modern data-centric security, Zero Trust Architecture (ZTA), Identity and Access Management (IAM), and cloud security, fully aligned with the NATO Data Strategy for the Alliance (DaSA) and NATO Data-Centric Reference Architecture (DCRA).\nTo help define and evolve security concepts and architecture underpinning a federated, multi-domain cloud environment, you will leverage security patterns supporting data classification, tagging, lineage, encryption, access controls (RBAC/ABAC/CBAC), access decision logic, and policy-based enforcement. You will also bring strong skills in architecting Identity, Credential, and Access Management (ICAM) & Zero Trust solutions. You will create Zero Trust enforcement models across identity, endpoints, networks, workloads, and data.\nThis is a strict MBSE position. To be successful, you must be an expert in data-centric security models and possess deep, practical experience utilizing SysML and Sparx EA (or equivalent) to define information flows, security constraints, and systems architecture. Traditional IT security professionals without MBSE modelling experience will not be considered\nPrimary Responsibilities\nUse MBSE tools (e.g. Sparx Enterprise Architect) to build data-centric security-first architecture models.\n\nDevelop architecture views aligned with the NATO Architecture Framework (NAF v4), including security views, system views, technical standards/compliance views, service-based views, and data views.\n\nModel security behaviours using sequences, activity flows, state machines, and dependency diagrams.\n\nTrace security requirements from operational concepts to system functions to services to components and to controls.\n\nAssist the programme and teammates in navigating and completing the NATO Security Accreditation process for systems on restricted and classified networks. Clearly identify compliance concerns and trade-offs and propose accreditation strategies.\n\nCreate the System Security Architecture Document (SSAD), Security Target & Risk Assessment, Secure Configuration Baselines, Security Operating Procedures (SecOPs), and Security Test & Evaluation (ST&E) artifacts.\n\nEngage directly with NATO Security Accreditation Authorities and comply with the NATO Security Directive Series, STANAGs, and FMN Baseline requirements.\n\nBasic Qualifications\nNATO SECRET or national equivalent security clearance.\n\nBachelors in Cybersecurity, Information Assurance, Computer Science, Systems Engineering, or related field.\n\nStrong knowledge of the underpinnings of multi-domain security concepts, attribute-based security, and associated approaches, architectures, and technologies.\n\nHands on experience with architecting for Data Centric Security and Zero Trust Architecture, preferably in a military and/or coalition environment.\n\n5+ years in defense security architecture, cloud security, or classified system environments.\n\nDeep knowledge of cloud security, data-centric protection, encryption, IAM/ICAM, Zero Trust, and secure system design.\n\nExperience designing architectures for cross-domain, multi-level, multi-tenant systems.\n\nKnowledge of MBSE tools and modelling languages (e.g., SysML, UML, NAF/DoDAF/UAF frameworks).\n\nStrong understanding of modelling data flows, access policies, interfaces, and trust boundaries.\n\nAbility to coordinate reviews, produce documentation, and close findings with Security Accreditation Authorities (SAAs).\n\nProficient with standards including but not limited to: NIST 800-207 (ZTA), NIST 800-53, ISO 27001, CIS, and NATO cyber/INFOSEC frameworks (STANAG 4774, STANAG 4778, STANAG 5636, and ACP 240)\n\nExperience conducting risk analyses, vulnerability assessments, and defining mitigations.\n\nExcellent communicator comfortable with multinational stakeholders.\n\nAble to guide engineers and analysts through secure-by-design principles and model-based workflows.\n\nPreferred Qualifications\nMaster’s degree.\n\nExpertise in Zero Trust Data Format (ZTDF)\n\nExpertise in MBSE tools such as Cameo, MagicDraw, or Sparx Enterprise Architect and NAF v4 operational, system, service, and security viewpoints.\n\nDemonstrated expertise in applying data-centric security principles.\n\nDemonstrated experience completing NATO accreditation for classified systems.\n\nStrong understanding of the NATO Data Strategy and NATO Data-Centric Reference Architecture (DCRA).\n\nRelevant advanced certifications:\nCompTIA Security+\n\nCISSP, CCSP\n\nZero Trust, ICAM, cloud security certifications\n\nModel-based engineering certifications (e.g., SysML, vendor MBSE training)\n\nIf you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.\nOriginal Posting:\nFor U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.\n Pay Range:\nPay Range $131,300.00 - $237,350.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.","description_format":"text","description_chars":6067,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":true,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["National Security","C4ISR","Defense Manufacturing","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-08-15T00:00:00Z"}],"visa":[],"liveness":{"score":13,"band":"cold","label":"Long shot","p_open":1,"p_active":0.455,"p_room":0.28,"age_days":75,"expected_fill_days":28,"reasons":["conf:1","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":237350,"is_top_pay":true},"html_url":"https://alion.io/job/leidos-data-centric-security-architect-mbse-sparx-ea","json_url":"https://alion.io/job/leidos-data-centric-security-architect-mbse-sparx-ea.json","meta":{"generated_at":"2026-10-29T08:27:55Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12829,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7791},"rest":"https://alion.io/mcp/rest/get_company?id=7791"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fleidos-data-centric-security-architect-mbse-sparx-ea"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fleidos-data-centric-security-architect-mbse-sparx-ea"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fleidos-data-centric-security-architect-mbse-sparx-ea"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/leidos-data-centric-security-architect-mbse-sparx-ea\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fleidos-data-centric-security-architect-mbse-sparx-ea"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":155472}},{"tool":"search_jobs","arguments":{"company":"leidos.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":155472},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}