Senior Security & Cloud Infrastructure Engineer

CivilGrid; Boston (MA); Hybrid; USD 137,000 - 193,000; Full time

Benefits offered by this job

Equity/Stock options

Medical, dental, vision insurance

FSA

Unlimited PTO

401(k) plan

Remote-friendly

Job summary

CivilGrid in Boston, MA is seeking a Security & Infrastructure Engineer to own security posture and scale our cloud platform for large utilities and civil engineering firms. You will drive SOC 2 readiness, manage IAM, secrets, and production access, and collaborate with DevOps, SRE, and leadership on AWS, VPC, ECS, and RDS.

Hybrid work from Boston office at least 3 days a week. The role offers meaningful equity, comprehensive benefits, and the chance to influence infrastructure security at a

Qualifications

• 5-8+ years of experience in product security, platform security, or security engineering.
• Hands-on with production AWS infrastructure (DevOps or SRE).
• Experience running or supporting a SOC 2 program.
• Deep knowledge of AWS services and infrastructure-as-code.
• Experience with vulnerability management and incident response.
• Strong written and verbal communication.

Responsibilities

• Partner with engineering to embed reliability and security into the SDLC and infrastructure decisions.
• Lead the security program: SOC 2 readiness, audits, vendor reviews, access controls.
• Define and enforce identity, secrets, data handling, and production access policies.
• Lead incident response for security and some reliability events.
• Harden and monitor GIS and AWS environments; manage cost optimization.
• Build and maintain Trust Center and lead security reviews with customers.
• Contribute to end-to-end AWS environment (VPC, ECS, RDS, IAM, secrets).
• Improve reliability practices: SLOs, observability, on-call, runbooks.

Skills

Security engineering

AWS

SOC 2

DevOps / SRE

Reliability

Observability

SLA / SLOs

Communication

Tools

AWS ECS

RDS

IAM

Secrets Manager

CloudWatch

Terraform/CDK

Job description

CivilGrid in Boston, MA is seeking a Security & Infrastructure Engineer to own security posture and scale our cloud platform for large utilities and civil engineering firms. You will drive SOC 2 readiness, manage IAM, secrets, and production access, and collaborate with DevOps, SRE, and leadership on AWS, VPC, ECS, and RDS.

Hybrid work from Boston office at least 3 days a week. The role offers meaningful equity, comprehensive benefits, and the chance to influence infrastructure security at a