Security & Infrastructure Architect

CivicPlus, LLC

13d•$115,000 - $125,000

About The Position

The Security & Infrastructure Architect will keep security architecture aligned with CivicPlus’s growing AWS and Azure footprint, including growth from new product work, platform expansion, and acquisitions. The role defines secure configuration standards across cloud environments, establishes baselines, prioritizes findings, and ensures proposed designs are reviewed against standards before implementation. The architect partners with DPRE and SRE to build security into cloud services and infrastructure as code. The position also develops hardened configuration baselines, maps scanning and monitoring coverage to authorization boundaries, creates architecture standards and reference patterns, and maintains current-state documentation across cloud, identity, endpoints, SaaS, networks, and integrations. The role translates security requirements into technical guidance that IT Operations and DPRE can implement and provides the Compliance team with architecture documentation and technical details for System Security Plans and audits. The position requires the ability to influence technical decisions, keep standards current as cloud platforms evolve, and use AI tools thoughtfully to improve productivity and work quality.

Requirements

Five or more years of experience in cloud, infrastructure, systems engineering, or security engineering.
At least three years in architecture, senior engineering, or a role centered on technical design and standards.
Deep experience in AWS or Azure security configuration and working knowledge of the other platform.
Experience reviewing or writing infrastructure as code, particularly Terraform.
Familiarity with cloud security posture tooling and ability to distinguish meaningful findings from noise.
Practical experience applying hardened configuration baselines using DISA STIGs, CIS Benchmarks, or equivalent.
Working knowledge of continuous monitoring under FedRAMP or GovRAMP, including scan coverage and evidence requirements.
Comfort automating configuration checks and evidence collection.
Working knowledge of corporate technologies including Microsoft 365, Entra ID, Active Directory, Okta, MDM and UEM tooling, EDR, and SIEM.
Track record of producing useful technical documentation, such as diagrams, standards, decision records, and design reviews.
Familiarity with GovRAMP, FedRAMP, SOC 2, PCI DSS, or ISO 27001 compliance frameworks.
Ability to influence technical decisions without owning them and to judge when to escalate versus defer to the owning team.
AI-forward mindset and demonstrated ability to use AI tools to improve productivity, decision-making, work quality, and outcomes.

Responsibilities

Define secure configuration standards across AWS and Azure, including identity and access, network boundaries, encryption, logging, secrets handling, and workload protection.
Baseline cloud environments against security standards and prioritize findings for remediation.
Translate assessment results into specific, actionable technical work.
Partner with DPRE and SRE to incorporate security configuration into new cloud services and infrastructure as code.
Review cloud architecture and infrastructure-as-code changes for security impact before release.
Keep cloud security standards current as AWS and Azure evolve and the company’s footprint grows.
Define and maintain hardened configuration baselines for operating systems, cloud services, and infrastructure using DISA STIGs and CIS Benchmarks.
Design how scanning and monitoring coverage maps to authorization boundaries so new systems enter scope as they are created.
Draft architecture standards and reference patterns for recurring company decisions.
Review proposed infrastructure, platform, and integration designs against architecture standards and raise concerns while designs can still change.
Develop and maintain current-state architecture documentation across cloud, identity, endpoints, SaaS, network, and integrations.
Translate security requirements into technical design and configuration guidance for IT Operations and DPRE.
Provide the Compliance team with architecture documentation and technical detail for System Security Plans and audits.