Security & Infrastructure Architect

CivicPlus; Manhattan (KS); On-site; USD 104,000 - 157,000; Full time

Job summary

CivicPlus is hiring a Security & Infrastructure Architect to define secure configurations across AWS and Azure and baseline environments. You will ensure security design reviews before deployment and collaborate with DPRE and SRE to bake security into new cloud services and infrastructure as code.

You will maintain hardened baselines drawing on DISA STIGs and CIS Benchmarks, keep security standards current as cloud platforms evolve, and translate requirements into practical designs and

Qualifications

• Five+ years in cloud, infrastructure, or security engineering.
• At least three years in architecture, senior engineering, or design roles.
• Real depth in AWS or Azure security configuration.
• Experience reviewing infrastructure as code, Terraform in particular.
• Familiarity with cloud security posture tooling and detecting real findings.
• Practical use of hardened baselines via DISA STIGs, CIS Benchmarks, or equivalent.
• Knowledge of FedRAMP or GovRAMP monitoring and audits.
• Ability to influence technical decisions and escalate when needed.

Responsibilities

• Define secure configuration across AWS and Azure.
• Baseline cloud environments to standards and prioritize findings.
• Translate security requirements into actionable technical designs.
• Partner with DPRE and SRE to build security into cloud services and IaC.
• Review IaC changes for security impact before shipping.
• Maintain current cloud security standards as platforms evolve.
• Define and maintain hardened baselines for OS, cloud services, and infrastructure.
• Design scan coverage and boundary mapping for new systems.

Skills

Cloud security

Architecture

Terraform

Security auditing

AI tooling

Compliance frameworks

Tools

Terraform

AWS

Azure

Entra ID

Active Directory

Okta

MDM/UEM

EDR

SIEM

Job description

CivicPlus runs across AWS and Azure, and that footprint has grown through new product work, platform expansion, and acquisitions. This role exists so security architecture keeps pace with that growth. You will set a clear definition of secure configuration, carry it consistently across environments, and make sure new designs are reviewed against it before they ship.

About CivicPlus

At CivicPlus, we strive to bring our company vision to life through innovation and collaboration. Supported by approachable leadership and transparent communication, we’re empowered to make an impact on local government and the residents they serve. Grow your career alongside great people, where authenticity is welcome, successes are celebrated, and potential is nurtured.

What You’ll Do

As a Security & Infrastructure Architect, you will:

• Define what secure configuration looks like across AWS and Azure, covering identity and access, network boundaries, encryption, logging, secrets handling, and workload protection
• Baseline cloud environments against those standards and prioritize findings so teams can work through them in a sensible order
• Turn assessment results into specific, actionable work with enough technical detail that teams can act without a second round of analysis
• Partner with DPRE and SRE so security configuration is built into new cloud services and infrastructure as code from the start
• Review cloud architecture and infrastructure as code changes for security impact before they ship
• Keep cloud security standards current as AWS and Azure change and as the company’s footprint grows
• Define and maintain hardened configuration baselines for operating systems, cloud services, and infrastructure drawing on DISA STIGs and CIS Benchmarks
• Design how scan and monitoring coverage maps to authorization boundaries so new systems come into scope as they are created
• Draft architecture standards and reference patterns for decisions made repeatedly across the company
• Review proposed infrastructure, platform, and integration designs against architecture standards, raising concerns while designs can still change
• Develop and maintain current state architecture documentation across cloud, identity, endpoints, SaaS, network, and integrations
• Translate security requirements into technical design and configuration guidance IT Operations and DPRE can implement
• Provide the Compliance team with accurate architecture documentation and technical detail needed for System Security Plans and audits

What We’re Looking For

We know that excellent candidates come from diverse backgrounds. Even if you don’t meet 100% of the listed requirements, we encourage you to apply!

Preferred Qualifications

• Five or more years working in cloud, infrastructure, systems engineering, or security engineering
• At least three of those years in architecture, senior engineering, or a role centered on technical design and standards
• Real depth in AWS or Azure security configuration, and working knowledge of the other
• Experience reviewing or writing infrastructure as code, Terraform in particular
• Familiarity with cloud security posture tooling and the ability to tell a real finding from noise
• Practical experience applying hardened configuration baselines using DISA STIGs, CIS Benchmarks, or equivalent
• Working knowledge of how continuous monitoring operates under FedRAMP or GovRAMP, including what scan coverage and evidence need to look like
• Comfort automating configuration checks and evidence collectionWorking knowledge of the corporate side: Microsoft 365, Entra ID, Active Directory, Okta, MDM and UEM tooling, EDR, and SIEM
• A track record of writing technical documentation people actually use: diagrams, standards, decision records, and design reviews
• Familiarity with GovRAMP, FedRAMP, SOC 2, PCI DSS, or ISO 27001 compliance frameworks
• The ability to influence a technical decision without owning it, and the judgment to know when to elevate versus when to let the owning team decide
• AI-forward mindset with a demonstrated ability to leverage AI tools to improve productivity, decision-making, and work quality
• Demonstrated ability to effectively use AI tools to enhance productivity and outcomes
• Estimated Salary Grade Range: $104,400 - $156,600
• Anticipated Hiring Range: $115,000 - $125,000
• The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience and is based on a 40-hour work week.

Our Hiring Process

• Introductory call with Talent Acquisition
• Interview with the Hiring Manager
• Panel Interview with CivicPlus team members, including an interview project activity
• Offer

Note: The process may vary slightly depending on the role.

Additional Information

• CivicPlus is currently unable to provide visa sponsorship for this position now or in the future. Applicants must be authorized to work in the US.
• At CivicPlus, we embrace AI and automation as tools that help people work smarter, move faster, and focus on higher-value work that strengthens communities. We encourage thoughtful, responsible use of technology to improve efficiency, support innovation, and enhance the employee and customer experience-while keeping human judgment, collaboration, and accountability at the center of what we do.

Equal Opportunity Commitment

CivicPlus is proud to be an Equal Employment Opportunity employer. We celebrate and support diversity for the benefit of our employees, products, clients, and communities. Reasonable accommodations are available during the interview process.

Use of Artificial Intelligence in Hiring: We use artificial intelligence (AI) tools to support parts of our hiring process, such as reviewing applications, analyzing resumes, and assessing responses against the qualifications listed in the job posting. These tools assist our recruitment team. People review applications and make all hiring decisions. If you need a reasonable accommodation or would like to request an alternative review process, contact [email protected]. To learn how we collect and use your information, see our Applicant Privacy Notice (https://www.civicplus.help/legal-center/docs/civicplus-privacy-policy).