Senior/Staff Infrastructure & Security Engineer

CivilGrid • Boston, MA

5d • $137,318 - $192,960 • Hybrid

About The Position

CivilGrid is seeking a Security & Infrastructure Engineer to own and grow the company’s security posture while helping support its cloud platform and reliability as the business scales. The role is part of the Systems team, which spans DevOps, SRE, and security, and focuses primarily on security while contributing across the team. The position reports to the Head of Engineering and is hybrid, with work from the Boston, Massachusetts office expected at least three days per week.

The engineer will partner with engineering to incorporate security and reliability into the software development lifecycle and infrastructure decisions; run the security program, including SOC 2 readiness and audits; define company-wide policies for identity, secrets, data handling, and production access; and lead security incident response. They will also harden and monitor Windows Server GIS systems and contribute end to end to the AWS environment and reliability practices.

The technology environment includes AWS ECS, PostgreSQL on RDS managed with CDK, GitHub, Datadog, Slack, Notion, and Drata. CivilGrid describes its working culture as a rapidly growing, small team with direct feedback, ownership from day one, customer proximity, and in-person collaboration where useful alongside remote-friendly flexibility. Compensation includes a base salary of $137,318–$192,960 and meaningful early-stage equity, in addition to the listed benefits.

Requirements

• At least 5–8 years of experience across product security, platform security, or security engineering.
• Hands-on DevOps or SRE experience with production AWS infrastructure.
• Experience running or supporting a SOC 2 program, including evidence collection, control design, and auditor coordination.
• Deep working knowledge of AWS, including VPC, ECS, RDS, IAM, Secrets Manager, and CloudWatch.
• Experience with infrastructure as code such as Terraform, CDK, or equivalent.
• Experience running vulnerability management, from scanner findings and outside reports through fixes shipped.
• Track record of improving production reliability by defining SLOs, building observability, running on-call, and leading post-incident reviews.
• Autonomous, fast-moving, and takes initiative without being asked.
• Strong verbal and written communication skills, with the ability to articulate ideas clearly and collaborate effectively.

Nice To Haves

• Experience supporting B2B products sold into regulated industries such as utilities, energy, or the public sector.

Responsibilities

• Partner with engineering to embed reliability and security into the SDLC and infrastructure decisions.
• Run the security program, including SOC 2 readiness and audits, vendor reviews, access controls, endpoint security, and threat modeling.
• Define and enforce policies for identity, secrets, data handling, and production access across the company.
• Lead incident response for security events and some reliability events, from detection through resolution and follow-up.
• Harden and monitor GIS servers running Windows Server alongside the AWS platform.
• Contribute to the AWS environment, including VPC architecture, ECS, RDS, secrets management, IAM, networking, and cost optimization.
• Improve reliability practices, including SLOs, observability, alerting, on-call rotation, runbooks, and blameless post-incident reviews.
• Build and maintain the Trust Center and lead security reviews with customers.

Benefits

• Meaningful early-stage equity.
• Company-funded medical, dental, and vision insurance, including medical plans at no cost to the employee.
• Health and dependent-care FSA.
• Unlimited PTO.
• 401(k) plan.
• Flexible, remote-friendly work environment.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed