Senior Security & Infrastructure Engineer

Free resume; Boston (MA); Hybrid; USD 137,000 - 193,000; Full time

Benefits offered by this job

Medical, dental, vision insurance

FSA (health and dependent care)

Unlimited PTO

401(k) plan

Remote-friendly environment

Equity

Job summary

CivilGrid is hiring a Senior Staff Infrastructure & Security Engineer to own security posture while scaling our cloud platform for large utilities and civil engineering firms. The role blends security, reliability, and DevOps across an AWS stack, with a focus on SOC 2 readiness and governance.

Hybrid work from Boston, MA, at least three days in the office. The team values autonomous, proactive engineers who communicate clearly and collaborate across IT, security, and leadership to deliver

Qualifications

• Hands-on experience with production AWS infrastructure.
• SOC 2 program involvement, evidence collection and auditor coordination.
• Deep AWS knowledge (VPC, ECS, RDS, IAM, Secrets Manager, CloudWatch) and IaC (Terraform, CDK).
• Experience running vulnerability management.
• Proven ability to improve reliability with SLOs and observability.
• Startup-ready, autonomous and proactive.
• Strong verbal and written communication.

Responsibilities

• Own security posture and support cloud platform as we scale.
• Run security program incl. SOC 2 readiness and audits.
• Define and enforce data handling, identity, and production access policies.
• Lead incident response for security and select reliability events.
• Harden and monitor AWS stack and Windows GIS servers.
• Build and maintain Trust Center; lead security reviews with customers.
• Collaborate on AWS architecture end-to-end and cost optimization.
• Improve reliability practices: SLOs, observability, on-call, runbooks.

Skills

AWS expertise

SOC 2

IaC (Terraform, CDK)

Vulnerability management

Reliability / SRE

Communication

Startup mindset

Tools

GitHub

Datadog

Slack

Notion

Drata

Job description

CivilGrid is hiring a Senior Staff Infrastructure & Security Engineer to own security posture while scaling our cloud platform for large utilities and civil engineering firms. The role blends security, reliability, and DevOps across an AWS stack, with a focus on SOC 2 readiness and governance.

Hybrid work from Boston, MA, at least three days in the office. The team values autonomous, proactive engineers who communicate clearly and collaborate across IT, security, and leadership to deliver