Security Architecture & Engineering Lead

The Force Protection Division is seeking a Security Architecture & Engineering Lead to serve as the cybersecurity technical authority for the integration, accreditation, testing, and operational assessment of force protection sensing technologies supporting the Rock Island Arsenal (RIA) Increased Access OTA Prototype. The successful candidate will lead the development and execution of the program's cybersecurity strategy, ensuring the prototype is securely integrated into existing Department of Defense (DoD) network environments and achieves the required cybersecurity authorizations to support operational testing and transition.

The Security Architecture & Engineering Lead is responsible for planning, coordinating, and executing all cybersecurity engineering activities throughout the prototype lifecycle, including security architecture development, Risk Management Framework (RMF) implementation, Security Technical Implementation Guide (STIG) compliance, Assured Compliance Assessment Solution (ACAS) vulnerability management, and development of accreditation artifacts supporting an Interim Authority to Test (IATT), Interim Authority to Operate (IATO), and ultimately an Authorization to Operate (ATO). The individual will serve as the program's primary cybersecurity engineering lead, ensuring cybersecurity requirements are integrated into system design, development, integration, verification, and operational validation activities.

Working closely with Government stakeholders, Leidos engineering teams, subcontractors, and commercial technology providers, the Security Architecture & Engineering Lead will oversee the secure integration of multiple vendor solutions into an existing DoD enterprise environment. The individual will identify and mitigate cybersecurity risks associated with integrating commercial off-the-shelf (COTS), Government off-the-shelf (GOTS), and prototype technologies while ensuring compliance with DoD cybersecurity policies, Army security requirements, and applicable federal standards.

The Security Architecture & Engineering Lead collaborates across systems engineering, software engineering, networking, integration and test, and program management organizations to resolve technical issues, manage cybersecurity risks, support operational assessments, and enable the successful fielding of a secure, mission-ready prototype. The position requires a technically proficient cybersecurity leader capable of balancing mission execution, engineering rigor, and operational objectives within a fast-paced prototype development environment.

Primary Responsibilities

• Develop the cybersecurity integration strategy for incorporating multiple OEM sensing technologies into the RIA Increased Access Prototype while balancing mission effectiveness, interoperability, operational usability, and cybersecurity compliance within the existing Rock Island Arsenal enterprise environment.

Basic Qualifications

• Bachelor’s degree and 8 - 12 years of prior relevant experience.
• Demonstrated experience leading security architecture and engineering activities throughout the system development life cycle (SDLC) for complex Department of Defense (DoD) systems..
• Demonstrated experience developing and implementing cybersecurity architectures that support the integration of multiple hardware, software, networking, and operational technology (OT) components into existing DoD enterprise or tactical network environments..
• Demonstrated experience planning and executing the Risk Management Framework (RMF) process, including development of RMF artifacts required to obtain an Interim Authority to Test (IATT), Interim Authority to Operate (IATO), and/or Authorization to Operate (ATO).
• Demonstrated experience developing, maintaining, and managing RMF documentation and artifacts, including System Security Plans (SSPs), Security Assessment Plans (SAPs), Security Assessment Reports (SARs), Plans of Action & Milestones (POA&Ms), eMASS packages, and supporting accreditation documentation.
• Demonstrated experience developing, reviewing, and implementing Security Technical Implementation Guides (STIGs), Assured Compliance Assessment Solution (ACAS) scanning requirements, vulnerability remediation plans, and security compliance documentation for DoD information systems.
• Demonstrated experience identifying, assessing, and mitigating cybersecurity risks associated with integrating multiple commercial, Government, and third-party vendor systems into existing DoD network environments.
• Demonstrated experience leading technical integration efforts involving multiple engineering disciplines, subcontractors, vendors, and Government stakeholders while ensuring compliance with DoD cybersecurity policies, RMF requirements, and accreditation objectives.
• Demonstrated experience executing systems engineering activities including technical planning, system architecture, technical design, development, integration, verification, validation, and transition to operational use.
• Demonstrated experience designing, engineering, implementing, integrating, maintaining, and continuously improving secure hardware, software, communications, and infrastructure components supporting mission-critical systems.
• Demonstrated experience serving as the cybersecurity engineering lead or technical authority responsible for security accreditation activities supporting operational assessments, developmental testing, field demonstrations, or system deployment.

Preferred Qualifications

• Experience obtaining IATTs or IATOs for prototype systems supporting operational assessments, user evaluations, or developmental testing.
• Experience supporting Army, Joint, or other DoD rapid prototyping and capability demonstration efforts.
• Experience integrating commercial off-the-shelf (COTS), government off-the-shelf (GOTS), and third-party vendor technologies into accredited DoD environments.
• Experience with Zero Trust Architecture, DevSecOps, Continuous ATO, and cloud-enabled security architectures.
• Professional cybersecurity certifications such as CISSP, CASP+, Security+, CCSP, or equivalent.

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.

Original Posting:

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.