Cloud Security & Infrastructure Architect

CivicPlus; Manhattan (KS); On-site; USD 104,000 - 157,000; Full time

Job summary

CivicPlus is hiring a Security & Infrastructure Architect to define secure configurations across AWS and Azure and baseline environments. You will ensure security design reviews before deployment and collaborate with DPRE and SRE to bake security into new cloud services and infrastructure as code.

You will maintain hardened baselines drawing on DISA STIGs and CIS Benchmarks, keep security standards current as cloud platforms evolve, and translate requirements into practical designs and

Qualifications

• Five+ years in cloud, infrastructure, or security engineering.
• At least three years in architecture, senior engineering, or design roles.
• Real depth in AWS or Azure security configuration.
• Experience reviewing infrastructure as code, Terraform in particular.
• Familiarity with cloud security posture tooling and detecting real findings.
• Practical use of hardened baselines via DISA STIGs, CIS Benchmarks, or equivalent.
• Knowledge of FedRAMP or GovRAMP monitoring and audits.
• Ability to influence technical decisions and escalate when needed.

Responsibilities

• Define secure configuration across AWS and Azure.
• Baseline cloud environments to standards and prioritize findings.
• Translate security requirements into actionable technical designs.
• Partner with DPRE and SRE to build security into cloud services and IaC.
• Review IaC changes for security impact before shipping.
• Maintain current cloud security standards as platforms evolve.
• Define and maintain hardened baselines for OS, cloud services, and infrastructure.
• Design scan coverage and boundary mapping for new systems.

Skills

Cloud security

Architecture

Terraform

Security auditing

AI tooling

Compliance frameworks

Tools

Terraform

AWS

Azure

Entra ID

Active Directory

Okta

MDM/UEM

EDR

SIEM

Job description

CivicPlus is hiring a Security & Infrastructure Architect to define secure configurations across AWS and Azure and baseline environments. You will ensure security design reviews before deployment and collaborate with DPRE and SRE to bake security into new cloud services and infrastructure as code.

You will maintain hardened baselines drawing on DISA STIGs and CIS Benchmarks, keep security standards current as cloud platforms evolve, and translate requirements into practical designs and