# Security Authorization Lead

**Company**: Leidos
**Location**: Gaithersburg, MD
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: full-time
**Salary**: $131,300.00 - $237,350.00
**Category**: Security
**Industry**: Technology

**Apply**: https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Gaithersburg-MD/Security-Authorization-Lead_R-00195942?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_fcd81ca0-e91

## Description

Leidos is seeking a Security Authorization Lead to join the Air Traffic Business Area within the Homeland Sector, supporting the development of the Leidos Common Automation Platform (L-CAP).

This role operates within a SAFe/Agile framework as part of an Agile Release Train (ART) delivering iterative value across the program.

In this role, you will own the security authorization lifecycle for L-CAP.

**Responsibilities:**

- Lead the government network connection and RMF/ATO authorization process for L-CAP workloads on government-provided cloud infrastructure

- Own and maintain the security authorization package

- Define and defend security control inheritance across cloud provider, government platform, and Leidos application layers

- Serve as the primary interface with government security reviewers, ISSOs, assessors, and Authorizing Official staff

- Manage the POA&M and continuous monitoring lifecycle

- Maintain the authorization boundary as architecture evolves

- Coordinate cross-ART compliance across four Agile Release Trains

- Support FedRAMP and agency-specific authorization requirements across cloud environments

- Coordinate personnel security and facility access eligibility with program security and Talent Acquisition

- Champion an AI-first engineering culture through AI-assisted development, automation, and emerging practices

**Core Technical Qualifications:**

- Bachelor’s degree in Cybersecurity, Computer Science, IT, or related field with 12+ years of relevant cybersecurity, compliance, or security authorization experience

- Demonstrated experience leading a federal information system through RMF to ATO or equivalent authorization

- Experience developing and defending authorization packages

- Experience with FedRAMP cloud control inheritance, Customer Responsibility Matrices, vulnerability management, CVE disposition, and remediation tracking

- Experience working directly with government security reviewers, ISSOs, and/or Authorizing Official staff

- Ability to translate security requirements into actionable engineering backlog items

- Strong technical writing skills with experience producing government-facing security documentation

- Ability to obtain and maintain a Public Trust and successfully complete required government background investigations

- U.S. citizenship required

**Preferred / Desired Qualifications:**

- CISSP, CGRC (formerly CAP), CISM, or equivalent certification

- FAA or aviation-sector security authorization experience

- Experience with continuous ATO (cATO) or ongoing authorization models

- Experience defining authorization boundaries for Kubernetes and containerized workloads

- Familiarity with FedRAMP High and GovCloud inheritance models

- Security authorization experience for safety-critical or real-time operational systems

- Experience with compliance automation and evidence tooling

- Knowledge of software supply chain security

- Experience with SAFe or large-scale Agile compliance integration

## Skills

### Required
- Cybersecurity
- Compliance
- Security Authorization
- RMF
- ATO
- FedRAMP
- Cloud Computing
- Agile
- SAFe
- AI-first engineering

### Nice to have
- CISSP
- CGRC
- CISM
- FAA security authorization
- Continuous ATO
- Kubernetes
- FedRAMP High
- GovCloud
- Software supply chain security
- Compliance automation

---

Source: [Apply at leidos.wd5.myworkdayjobs.com](https://leidos.wd5.myworkdayjobs.com/en-US/External/job/Gaithersburg-MD/Security-Authorization-Lead_R-00195942?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)