Senior/Staff Security & Infrastructure Engineer
Civilgrid · Boston
About this role
## About CivilGrid CivilGrid is the trusted civil design platform powering affordable infrastructure renewal and growth. We give utilities, civil engineers, and municipalities a single, collaborative source of truth for what’s underground—so teams can plan, design, and build faster, smarter, and safer. Our platform consolidates utility records, geotechnical and environmental data, moratoriums, and jurisdictional requirements from 3,000+ utilities, agencies, and municipalities, with full chain-of-custody documentation. Teams at PG&E, Mark Thomas, and dozens of leading engineering firms use CivilGrid to cut research time by up to 88%, reduce project costs, prevent dig-ins, and accelerate delivery. ## Why this role We’re looking for a **Security & Infrastructure Engineer** to own our security posture and help support our cloud platform and reliability as we scale into large utilities and civil engineering firms. You’ll take over and grow our security program, working across engineering, IT, and leadership. This role sits on the **Systems team** (spanning DevOps, SRE, and security). Your focus is security, but you’ll contribute across the team. **Reports to:** Head of Engineering **Location:** Hybrid — Boston, MA (at least 3 days/week in office) ## What you’ll do - Partner with engineering to embed reliability and security into the SDLC and infrastructure decisions - Run our security program, including: - SOC 2 readiness and audits - Vendor reviews - Access controls - Endpoint security - Threat modeling - Define and enforce policies for identity, secrets, data handling, and production access - Lead incident response for security events (and some reliability events) from detection through resolution and follow-up - Harden and monitor our GIS servers (Windows Server) alongside our AWS platform - Build and maintain our Trust Center, and lead security reviews with customers - Contribute to our AWS environment end to end: - VPC architecture - ECS - RDS - Secrets management - IAM - Networking - Cost optimization - Improve reliability practices: - SLOs - Observability - Alerting - On-call rotation - Runbooks - Blameless post-incident reviews - Work with the stack: - AWS ECS, Postgres on RDS managed with CDK - GitHub, Datadog, Slack, Notion, Drata ## What you’ll bring - 5–8+ years of experience across product security, platform security, or security engineering, with hands-on DevOps/SRE experience in production AWS infrastructure - Experience running/supporting a SOC 2 program (evidence collection, control design, auditor coordination) - Deep working knowledge of AWS (VPC, ECS, RDS, IAM, Secrets Manager, CloudWatch) and infrastructure-as-code (Terraform, CDK, or equivalent) - Experience running vulnerability management (scanner findings and outside reports through fixes shipped) - Track record improving reliability in production (SLOs, observability, on-call, post-incident reviews) - Startup-ready mindset: autonomous, fast-moving, initiative-driven - Strong verbal and written communication ## Bonus points - Experience supporting B2B products sold into regulated industries (utilities, energy, public sector) ## How we work We’re a small, rapidly growing team that ships. Expect direct feedback, real ownership from day one, and proximity to customers. We default to in-person collaboration where it matters, with remote-friendly flexibility otherwise. ## Compensation & benefits - **Base salary range:**
Listing freshness
CronJobs last confirmed this listing 1h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.