Description
Leidos is seeking a Security Authorization Lead to join the Air Traffic Business Area within the Homeland Sector, supporting the development of the Leidos Common Automation Platform (L-CAP).
This role operates within a SAFe/Agile framework as part of an Agile Release Train (ART) delivering iterative value across the program.
In this role, you will own the security authorization lifecycle for L-CAP.
Responsibilities:
- Lead the government network connection and RMF/ATO authorization process for L-CAP workloads on government-provided cloud infrastructure
- Own and maintain the security authorization package
- Define and defend security control inheritance across cloud provider, government platform, and Leidos application layers
- Serve as the primary interface with government security reviewers, ISSOs, assessors, and Authorizing Official staff
- Manage the POA&M and continuous monitoring lifecycle
- Maintain the authorization boundary as architecture evolves
- Coordinate cross-ART compliance across four Agile Release Trains
- Support FedRAMP and agency-specific authorization requirements across cloud environments
- Coordinate personnel security and facility access eligibility with program security and Talent Acquisition
- Champion an AI-first engineering culture through AI-assisted development, automation, and emerging practices
Core Technical Qualifications:
- Bachelor’s degree in Cybersecurity, Computer Science, IT, or related field with 12+ years of relevant cybersecurity, compliance, or security authorization experience
- Demonstrated experience leading a federal information system through RMF to ATO or equivalent authorization
- Experience developing and defending authorization packages
- Experience with FedRAMP cloud control inheritance, Customer Responsibility Matrices, vulnerability management, CVE disposition, and remediation tracking
- Experience working directly with government security reviewers, ISSOs, and/or Authorizing Official staff
- Ability to translate security requirements into actionable engineering backlog items
- Strong technical writing skills with experience producing government-facing security documentation
- Ability to obtain and maintain a Public Trust and successfully complete required government background investigations
- U.S. citizenship required
Preferred / Desired Qualifications:
- CISSP, CGRC (formerly CAP), CISM, or equivalent certification
- FAA or aviation-sector security authorization experience
- Experience with continuous ATO (cATO) or ongoing authorization models
- Experience defining authorization boundaries for Kubernetes and containerized workloads
- Familiarity with FedRAMP High and GovCloud inheritance models
- Security authorization experience for safety-critical or real-time operational systems
- Experience with compliance automation and evidence tooling
- Knowledge of software supply chain security
- Experience with SAFe or large-scale Agile compliance integration