Infrastructure & Security Engineer

CivilGrid•Boston, MA

2d•$155,544 - $175,320•Remote

About The Position

We're looking for an Infrastructure & Security Engineer to own our cloud platform, reliability, and security posture as we scale into large utilities and civil engineering firms. You'll be the first dedicated infra and security hire, working across engineering, IT, and leadership. The role spans DevOps, SRE, and security in equal parts. CivilGrid is a venture-backed SaaS construction tech company building the "Google Maps for the Underground." Come help us disrupt a $4.7T US industry segment that desperately needs innovation. This opportunity has tremendous upside as it scales. CivilGrid aggregates public and proprietary utility, geotechnical, environmental, and jurisdictional data. The consolidated information is sold via our collaborative SaaS mapping platform to engineers and developers who need it to make early-stage decisions on real estate and infrastructure projects. Real time data access reduces labor and project delays, accelerates decision making and reduces project risk. Collaborative features ensure faster information flow and decisioning inside and outside the organization and better project insight retention over time.

Requirements

4+ years of experience across DevOps, SRE, platform, or security engineering, with hands-on ownership of production AWS infrastructure
Deep working knowledge of AWS (VPC, ECS, RDS, IAM, Secrets Manager, CloudWatch) and infrastructure-as-code (Terraform, CDK, or equivalent)
Track record of improving reliability in production: defining SLOs, building observability, running on-call, and leading post-incident reviews
Experience running or supporting a SOC 2 program, including evidence collection, control design, and auditor coordination
Startup ready: autonomous, moves fast, takes initiative without being asked
Strong verbal and written communication, able to articulate ideas clearly and collaborate effectively

Nice To Haves

Experience supporting B2B products sold into regulated industries (utilities, energy, public sector)

Responsibilities

Own our AWS environment end to end: VPC architecture, ECS, RDS, secrets management, IAM, networking, and cost optimization
Define and improve reliability practices: SLOs, observability, alerting, on-call rotation, runbooks, and blameless post-incident reviews
Lead incident response for both reliability and security events, from detection through resolution and follow-up
Define and enforce policies for identity, secrets, data handling, and production access across the company
Partner with engineering to embed reliability and security into the SDLC and infrastructure decisions
Run our security program: SOC 2 readiness and audits, vendor reviews, access controls, endpoint security, and threat modeling