Senior Cloud Security & Infra Engineer — Hybrid

CivilGrid; Boston; Hybrid; PHP 8,653,000 - 12,159,000; Full time

Benefits offered by this job

Equity equity

Medical, dental, and vision insurance

Unlimited PTO

401(k)

Remote-friendly

Job summary

CivilGrid is seeking a Security & Infrastructure Engineer to own security posture and scale our cloud platform. You will work across engineering, IT, and leadership on a hybrid Boston-based role, contributing to a security program spanning AWS, SOC 2, and reliability improvements.

You will lead incident response, define access controls, and harden GIS servers while partnering to optimize VPCs, ECS, RDS, and cost. Join a growth-stage startup shaping critical infrastructure software.

Qualifications

• 5-8 years of experience in product security, platform security, or security engineering with hands-on AWS infra experience.
• Experience running or supporting a SOC 2 program, including evidence collection and auditor coordination.
• Deep AWS knowledge (VPC, ECS, RDS, IAM, Secrets Manager) and IaC tooling.
• Experience with vulnerability management and production reliability improvements.
• Strong communication and collaboration skills across engineering and leadership.

Responsibilities

• Partner with engineering to embed reliability and security into the SDLC and infrastructure decisions.
• Run the security program: SOC 2 readiness and audits, vendor reviews, access controls, and threat modeling.
• Define and enforce policies for identity, secrets, data handling, and production access.

Skills

Security engineering

SOC 2

AWS

Infrastructure as Code

Vulnerability management

Reliability engineering

DevOps / SRE

Communication

Tools

AWS ECS

RDS

Terraform

CDK

GitHub

Datadog

Job description

CivilGrid is seeking a Security & Infrastructure Engineer to own security posture and scale our cloud platform. You will work across engineering, IT, and leadership on a hybrid Boston-based role, contributing to a security program spanning AWS, SOC 2, and reliability improvements.

You will lead incident response, define access controls, and harden GIS servers while partnering to optimize VPCs, ECS, RDS, and cost. Join a growth-stage startup shaping critical infrastructure software.