Senior Staff Infrastructure & Security Engineer
Job description
Security & Infrastructure Engineer at CivilGrid responsible for owning the company's security posture and supporting its cloud platform and reliability as it scales. The role sits on the Systems team spanning DevOps, SRE, and security and reports to the Head of Engineering.
At a glance
- Employment
- Full-time
- Work mode
- Hybrid · 3 days/week in office · Boston
- Pay
- USD 137,318 – 192,960 / year
What you'll do
- Partner with engineering to embed reliability and security into the SDLC and infrastructure decisions
- Run the security program: SOC 2 readiness and audits, vendor reviews, access controls, endpoint security, and threat modeling
- Define and enforce policies for identity, secrets, data handling, and production access across the company
- Lead incident response for security events and some reliability events, from detection through resolution and follow-up
- Harden and monitor GIS servers (Windows Server) alongside the AWS platform
- Build and maintain the Trust Center, and lead security reviews with customers
- Contribute to the AWS environment end to end: VPC architecture, ECS, RDS, secrets management, IAM, networking, and cost optimization
- Contribute to improving reliability practices: SLOs, observability, alerting, on-call rotation, runbooks, and blameless post-incident reviews
What we're looking for
- At least 5-8 years of experience across product security, platform security, or security engineering, with hands-on experience with DevOps or SRE of production AWS infrastructure
- Experience running or supporting a SOC 2 program, including evidence collection, control design, and auditor coordination
- Deep working knowledge of AWS (VPC, ECS, RDS, IAM, Secrets Manager, CloudWatch) and infrastructure-as-code (Terraform, CDK, or equivalent)
- Experience running vulnerability management, from scanner findings and outside reports to fixes shipped
- Track record of improving reliability in production: defining SLOs, building observability, running on-call, and leading post-incident reviews
- Startup ready: autonomous, moves fast, takes initiative without being asked
- Strong verbal and written communication, able to articulate ideas clearly and collaborate effectively
Nice to have
- Experience supporting B2B products sold into regulated industries (utilities, energy, public sector)
Your team
Systems team
Spans DevOps, SRE, and security
Apply
About CivilGrid
The trusted civil design platform powering affordable infrastructure renewal and growth
CivilGrid gives utilities, civil engineers, and municipalities a single, collaborative source of truth for what's underground so teams can plan, design, and build faster, smarter, and safer. Its platform consolidates utility records, geotechnical and environmental data, paving moratoriums, and jurisdictional requirements directly from 3,000+ utilities, agencies, and municipalities with full chain-of-custody documentation.
Key facts
- Civil infrastructure software
- Venture-backed Series A startup
- Tackling a $4.7T US infrastructure market
- Founded by industry insiders, each with 10+ years in utilities and civil engineering
- Platform consolidates data from 3,000+ utilities, agencies, and municipalities
- Teams cut research time by up to 88%
Partners & customers