Leidos is seeking a Cloud Security Architect to lead the design and development of secure multi-cloud solutions supporting the U.S. Air Force Cloud One Next (C1N) ACSS contract.
In this role, you will serve as a senior technical architect responsible for designing security capabilities across Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), and Oracle Cloud Infrastructure (OCI). The Cloud Security Architect will translate mission, cybersecurity, and platform requirements into implementable architectures and work directly with engineering teams to turn those architectures into reusable Cloud One capabilities.
This is a solution architecture and engineering-focused role, rather than a security operations or compliance management position. The architect will evaluate technologies, develop reference architectures, prototype solutions, make technical recommendations, define integration patterns, and guide engineering teams through implementation.
The Cloud Security Architect will work across cloud, network, platform, DevSecOps, and cybersecurity teams to determine how security capabilities should be designed and integrated into the Cloud One platform. A primary objective of the role is to abstract CSP-specific security complexity into standardized architectures and reusable capabilities that can be consistently deployed across Cloud One environments.
Key Responsibilities:
Multi-Cloud Security Architecture: Design security architectures and solutions spanning AWS, Azure, GCP, and OCI, identifying common architectural patterns while accounting for CSP-specific capabilities and limitations.
Security Solution Development: Translate cybersecurity requirements and identified capability gaps into implementable technical solutions, including architecture, technology selection, integration patterns, and implementation guidance.
Reference Architecture Development: Create reusable reference architectures, design patterns, technical standards, and architectural guardrails that engineering teams can use to consistently build secure cloud environments.
Architecture Prototyping: Develop proofs of concept and prototypes to validate new security architectures, technologies, integrations, and design approaches before enterprise implementation.
Technology Evaluation & Selection: Evaluate cloud-native and third-party security technologies and develop recommendations based on capability, integration complexity, security effectiveness, scalability, cost, and applicability to Cloud One.
Build vs. Buy Analysis: Assess when Cloud One should leverage CSP-native capabilities, enterprise security platforms, commercial products, or internally developed automation and services.
Multi-Cloud Capability Abstraction: Design solutions that provide consistent security outcomes across CSPs while minimizing unnecessary CSP-specific implementation differences for Cloud One consumers.
Security Platform Integration: Architect integrations between CSP-native security services and enterprise security platforms, including identity, network security, CNAPP, vulnerability management, SIEM, security telemetry, secrets management, and related capabilities.
Identity Architecture: Design multi-cloud identity and access architectures including federation, privileged access, workload identities, service identities, role-based and attribute-based access controls, and machine-to-machine authentication.
Zero Trust Architecture: Translate DoD Zero Trust requirements into practical cloud architecture patterns and platform capabilities spanning identity, workloads, networks, applications, and data.
Network Security Architecture: Partner with the Cloud Network Architect to design trust boundaries, segmentation, ingress/egress security, traffic inspection, microsegmentation, private connectivity, and cross-cloud security patterns.
Workload Security Architecture: Design security patterns for virtual machines, containers, Kubernetes, serverless services, APIs, cloud-native applications, and other workload architectures.
Data Protection Architecture: Design approaches for encryption, key management, secrets management, certificate management, data access controls, and protection of sensitive information across multiple CSPs.
DevSecOps Architecture: Define how security capabilities are integrated into Infrastructure as Code and CI/CD workflows, including automated security testing, policy enforcement, artifact security, and software supply chain protections.
Security as Code: Develop architectural patterns for implementing security through Infrastructure as Code, Policy as Code, and Configuration as Code, enabling security controls to be consistently incorporated into Cloud One engineering workflows.
Solution Engineering: Work directly with engineering teams during solution development to resolve design challenges, validate implementation approaches, and ensure delivered capabilities align with the intended architecture.
Architecture Reviews: Review new platform capabilities, cloud services, infrastructure designs, and major technical changes to identify security implications and recommend architectural solutions.
Technical Roadmap Development: Identify security capability gaps and emerging technology needs and contribute to the Cloud One technical roadmap by defining future security capabilities and modernization initiatives.
Technical Decision-Making: Develop architecture decision records, technical trade studies, and recommendations that clearly document alternatives, constraints, risks, and rationale for major security architecture decisions.
Required Qualifications:
Education: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Systems Engineering, or a related technical discipline and 12+ years of prior relevant experience, or equivalent additional experience in lieu of degree.
Security Architecture: Extensive experience designing enterprise security solutions and translating security requirements into implementable technical architectures.
Solution Architecture: Demonstrated experience taking complex technical problems from requirements and conceptual design through architecture, prototyping, engineering, and implementation.
Multi-Cloud Architecture: Strong experience with multiple CSPs, with deep technical knowledge of at least two of the following: AWS, Azure, GCP, or OCI, and the ability to develop architectures that span heterogeneous cloud environments.
Cloud-Native Security: Advanced knowledge of CSP-native security architectures and services covering identity, networking, encryption, key management, secrets, workloads, logging, policy, and data protection.
Security Technology Integration: Experience architecting integrations between cloud-native capabilities and enterprise security technologies.
Identity Architecture: Strong understanding of IAM, federation, SSO, MFA, RBAC, ABAC, privileged access, workload identity, service identity, and least-privilege architectures.
Network Security Architecture: Strong understanding of segmentation, trust boundaries, firewalls, private connectivity, traffic inspection, microsegmentation, ingress/egress controls, and Zero Trust network architecture.
Infrastructure & Security as Code: Experience designing security capabilities implemented through Terraform, Ansible, Policy as Code, Configuration as Code, APIs, and CI/CD automation.
Containers & Kubernetes: Knowledge of Kubernetes and container security architectures, including image security, admission controls, secrets, identity, network policies, software supply chain security, and runtime protection.
DevSecOps: Strong understanding of how security capabilities are integrated throughout software and infrastructure delivery pipelines rather than implemented as downstream compliance activities.
·DoD Architecture: Experience designing solutions within DoD, federal, or similarly regulated environments and an understanding of RMF, NIST SP 800-53, DISA STIGs, DoD CC SRG, and DoD Zero Trust requirements.
Technical Leadership: Demonstrated ability to lead technical design efforts, facilitate architecture discussions, evaluate competing technologies, and provide technical direction to engineering teams.
Technical Communication: Ability to communicate complex architectures and technical tradeoffs through diagrams, technical documentation, trade studies, presentations, and direct engagement with engineering and Government stakeholders.
Security Clearance: Ability to obtain and maintain a DoD Secret security clearance.
Preferred Qualifications:
Active DoD Secret or Top Secret clearance.
Advanced security architecture certifications such as CISSP, CCSP, CISSP-ISSAP, or equivalent.
Advanced cloud security certifications such as AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, Google Professional Cloud Security Engineer, or equivalent OCI certification.
Demonstrated experience developing multi-cloud reference architectures and enterprise security platforms.
Experience designing security capabilities supporting DoD Impact Levels (IL) 2, 4, 5, and 6.
Experience architecting and integrating Cloud-Native Application Protection Platforms (CNAPP), including CSPM, CWPP, CIEM, attack-path analysis, and cloud detection capabilities.
Experience designing solutions involving SIEM, SOAR, vulnerability management, identity security, microsegmentation, network security, secrets management, and data protection technologies.
Experience designing and implementing DoD Zero Trust Architecture capabilities.
Experience developing proofs of concept, technical prototypes, trade studies, and technology evaluations for enterprise security capabilities.
Experience building reusable Terraform modules, Policy as Code frameworks, security APIs, or other automation that translates architecture into deployable platform capabilities.
Experience with software supply chain security, SBOMs, artifact integrity, container security, and automated security testing.
Familiarity with MITRE ATT&CK, threat modeling, attack-path analysis, and threat-informed architecture.
Experience establishing technical roadmaps and identifying new platforms, products, or capabilities needed to address fundamental security architecture gaps.
Experience supporting large-scale cloud modernization, platform engineering, or enterprise cloud programs within the Department of Defense.
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.
Original Posting: October 9, 2026
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.
Pay Range: Pay Range $131,300.00 - $237,350.00
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.
Pay and Benefits
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.
Securing Your Data
Beware of fake employment opportunities using Leidos' name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system - never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.
Commitment to Non-Discrimination
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.
You apply on The Muse or on the employer's page; AtiveSite does not receive or process applications and is not affiliated with The Muse. The description above is shown as the source published it.
About the role
This is a Mid Level role in the Technology field (Cybersecurity) at Leidos. Mid-level roles usually expect some years of relevant experience and the ability to work with limited supervision.
We could not match this job title to one occupation in the official wage statistics, so no pay estimate is shown. Pay is not in the source listing; ask the employer for the range and compare in the 240 job niches.
How to prepare and behave
This is editorial guidance, not information from the employer.
Read the whole description and match your examples to its requirements; use the same words the posting uses where they are true for you.
Research the employer before the interview: what it does, who its customers are and recent news; prepare two or three questions about the work.
Arrive early (or log in early for a video call), dress one step above the daily dress code, and test your camera and audio beforehand.
Answer with short stories: the situation, what you did and the result. Give numbers when you have them and never invent them.
Be honest about gaps; say what you did to learn and how fast you can close them.
Ask about the team, the first 90 days, how success is measured and the schedule; do not open with salary and time off.
When pay comes up, know the market range for the occupation and your lowest acceptable offer before you answer; ask for the full package in writing.
Send a short thank-you message within a day, mentioning one thing you discussed.
The listing mentions a remote or flexible location. Confirm with the employer whether remote work applies to your state: taxes, licensing and benefits can depend on where you live.
Have code, data work or projects you can show, and be ready to think aloud: many technical interviews test how you reason, not only the answer.
Bedford, MA is not one of the cities with its own page in our guides, so here is the state: Massachusetts.
The state economy in brief
Massachusetts is in the Northeast region (New England division) and has 7,044,056 residents (the 16th largest of the 50 states and DC by population), with a median age of 40.0. Its economy produced about $834,474 million in the latest four quarters (BEA), 12th among states and DC, equal to $118,465 per resident.
Jobs and the labour market
The unemployment rate was 4.3% in 2026M09, which is 35th lowest of 51 (1st is the lowest). Employers had job openings equal to 3.4% of employment, 44th highest of 51, a measure of how hard it is to hire. The median wage across all occupations is $63,590 a year ($30.57 an hour), 25% above the national median ($63,590 against $50,980).
Prices are above the national average in Massachusetts: the regional price parity is 105.8 against 100 for the whole country (45th lowest of 51). Median gross rent is $1,762 a month and the median household income $103,960, so a year of rent equals 20.3% of income; the median home value is $562,100. The state minimum wage is $15.00 (the higher of state and federal rates applies to most workers). State income tax on wages: Graduated, top rate 9.00%. It is not a right-to-work state, so union contracts can require fees from covered workers. It runs a state paid family and medical leave programme.
People and commuting
18.1% of residents were born abroad and 47.3% of adults hold a bachelor's degree or higher. Among workers, 61.2% drive alone, 6.5% use public transit and 18.6% work from home; 21.5% commute 45 minutes or more.
The job city has no coordinates we can place on the map, so no housing comparison is shown. Use the 250 largest cities table to compare rent and income.
Career paths
We could not match this title to one occupation, so here are the other sub-niches in Technology, where your skills may carry over:
This job has no single city we can place on the map (remote, flexible or unmatched location), so no distance table is shown. Browse all Technology jobs with distances from any of the 20 largest cities.
Company description (from The Muse): Leidos is a Fortune 500® innovation company rapidly addressing the world’s most vexing challenges in national security and health.
size: Large Size; industries: Information Technology; locations on The Muse: Reston, VA.
These links go to official sources and open in a new window. The first one is the government's or company's own site as listed in Wikidata (property "official website"); check it before relying on it.
What it is like to work at a company (culture, schedules, benefits) is not in the source data, so we do not describe it. Read the description and ask the questions under "How to prepare".
A mid level role in technology (cybersecurity) listed 2 days ago. The full description is on this page and on The Muse.
Where is this job?
Bedford, MA. A remote or flexible location is listed; confirm with the employer which states are accepted.
How do I apply?
Use the "View this job and apply on The Muse" button. AtiveSite does not receive applications.
How much does it pay?
The listing does not publish pay, and we could not match the title to one official occupation.
What is the cost of living there?
See the state or country guide for rent, income and taxes.
How old is this listing?
It was posted on 2026-11-06 (2 days ago). Jobs older than 90 days are not shown.
Are there similar jobs?
Yes: browse cybersecurity jobs in Massachusetts.
Sources and terms
Job data: The Muse public API (listing dated 2026-11-06). The job disappears from this site when it disappears from the source.
Wages and projections: BLS OEWS (May 2025) and Employment Projections 2025–35.
City and county figures: Census Bureau ACS 2020–2024, BEA, BLS QCEW and LAUS, NASA POWER climatology; distances from Census Gazetteer coordinates.
AtiveSite is not affiliated with or endorsed by The Muse, the employer or any government agency, and does not process applications. Verify every detail with the employer before acting.