Senior Staff Infrastructure & Security Engineer

pofft Technology Inc.; Boston (MA); Hybrid; USD 137,000 - 193,000; Full time

Job summary

CivilGrid is seeking a Senior Staff Infrastructure & Security Engineer in Boston, MA. The role anchors our security program, partnering with engineering, IT, and leadership to embed security into the SDLC and cloud infrastructure while scaling for large utilities and civil engineering clients.

You're expected to work in a hybrid model, spending at least three days per week in the Boston office, and lead incident response, governance, and security reviews with customers as the team extends our

Responsibilities

• Partner with engineering to embed reliability and security into the SDLC.
• SOC 2 readiness and audits, vendor reviews, access controls, endpoint security, risk modeling.
• Define identity, secrets, data handling, and production access policies.
• Lead incident response for security and reliability events from detection to resolution.
• Harden and monitor GIS servers and AWS platform.
• Build and maintain Trust Center and lead security reviews with customers.
• Contribute to AWS environment end to end: VPC, ECS, RDS, IAM, networking, cost optimization.
• Improve reliability practices: SLOs, observability, alerting, on-call, runbooks, post-incident reviews.

Job description

Senior Staff Infrastructure & Security Engineer

Senior Staff Infrastructure & Security Engineer Boston 2 gün 10 saat 54 dakika önce yayınlandı. RemoteOK 137.318 - 192.960 USD

ABOUT CIVILGRID

CivilGrid is the trusted civil design platform powering affordable infrastructure renewal and growth. We give utilities, civil engineers, and municipalities a single, collaborative source of truth for what's underground so teams can plan, design, and build faster, smarter, and safer.

Our platform consolidates utility records, geotechnical and environmental data, paving moratoriums, and jurisdictional requirements directly from 3,000+ utilities, agencies, and municipalities with full chain-of-custody documentation. Teams at PG&E, Mark Thomas, and dozens of leading engineering firms use CivilGrid to cut research time by up to 88%, reduce project costs, prevent dig-ins, and accelerate delivery on the projects that keep communities running.

We're a venture-backed Series A startup tackling a $4.7T US infrastructure market that has been underserved by software for decades. Founded by industry insiders, each with 10+ years in utilities and civil engineering, we move fast, ship work that matters, and stay close to the customers and field teams we build for.

WHY THIS ROLE

We're looking for a Security & Infrastructure Engineer to own our security posture and assist in supporting our cloud platform and reliability as we scale into large utilities and civil engineering firms. You'll take over and grow our security program, working across engineering, IT, and leadership. The role is on the Systems team that spans DevOps, SRE, and security. Your focus is security but you will contribute across the team.

This role reports to the Head of Engineering. It is a hybrid role with expectations that you are working from our Boston, MA office at least 3 days per week if hired.

WHAT YOU'LL DO

Partner with engineering to embed reliability and security into the SDLC and infrastructure decisions

Run our security program: SOC 2 readiness and audits, vendor reviews, access controls, endpoint security, and threat modeling

Define and enforce policies for identity, secrets, data handling, and production access across the company

Lead incident response for both security events, and some reliability events, from detection through resolution and follow-up

Harden and monitor our GIS servers (Windows Server) alongside our AWS platform

Build and maintain our Trust Center, and lead security reviews with customers

Contribute to our AWS environment end to end: VPC architecture, ECS, RDS, secrets management, IAM, networking, and cost optimization

Contribute to improving reliability practices: SLOs, observability, alerting, on-call rotation, runbooks, and blameless post-incident reviews

The tech:

AWS ECS, Postgres on RDS managed with CDK

Salary

137.318 - 192.960 USD

137.318 - 192.960 USD

RemoteOK 137.318 - 192.960 USD