Remote Security & Infrastructure Lead (AWS)

Academic Key; Boston (MA); Hybrid; USD 137,000 - 193,000; Full time

Benefits offered by this job

Equity

Unlimited PTO

Remote-friendly

401(k)

Job summary

CivilGrid is hiring a Senior Staff Infrastructure & Security Engineer to own our security posture while helping scale our AWS-based platform for large utilities and civil engineering teams. The role is a hybrid position with in-person collaboration in the Boston area and close partnership with engineering, IT, and leadership.

You will drive SOC 2 readiness, identity and secrets governance, incident response, and reliability improvements across the cloud environment, collaborating across product

Qualifications

• 5–8 years in production AWS environments with security focus.
• Experience running or supporting a SOC 2 program, audits, and auditor coordination.
• Deep AWS knowledge: VPC, ECS, RDS, IAM, Secrets Manager, CloudWatch.
• Experience with infrastructure-as-code (Terraform, CDK).
• Proven track record improving reliability, defining SLOs, and on‑call leadership.
• Startup-ready: autonomous, proactive communicator.

Responsibilities

• Embed reliability and security into SDLC and infrastructure decisions.
• Run security program: SOC 2 readiness and audits, vendor reviews, access controls.
• Define policies for identity, secrets, data handling, and production access.
• Lead incident response for security events and some reliability events.
• Harden and monitor GIS servers (Windows) alongside AWS.
• Build and maintain Trust Center; lead security reviews with customers.
• Contribute to AWS: VPC, ECS, RDS, IAM, secrets, networking, cost optimization.
• Improve reliability practices: SLOs, observability, on‑call, runbooks, post‑incident reviews.

Skills

Security engineering

Cloud security

DevOps

SRE

Tools

AWS

Terraform

CDK

RDS

CloudWatch

Job description

CivilGrid is hiring a Senior Staff Infrastructure & Security Engineer to own our security posture while helping scale our AWS-based platform for large utilities and civil engineering teams. The role is a hybrid position with in-person collaboration in the Boston area and close partnership with engineering, IT, and leadership.

You will drive SOC 2 readiness, identity and secrets governance, incident response, and reliability improvements across the cloud environment, collaborating across product