Infrastructure & Security Engineer

Title: Infrastructure & Security Engineer

Location: Boston, MA

Reporting Structure: This role reports to the Head of Product & Engineering

Company Description

CivilGrid is a venture-backed SaaS construction tech company building the "Google Maps for the Underground." Come help us disrupt a $4.7T US industry segment that desperately needs innovation. This opportunity has tremendous upside as it scales.

CivilGrid aggregates public and proprietary utility, geotechnical, environmental, and jurisdictional data. The consolidated information is sold via our collaborative SaaS mapping platform to engineers and developers who need it to make early-stage decisions on real estate and infrastructure projects. Real time data access reduces labor and project delays, accelerates decision making and reduces project risk. Collaborative features ensure faster information flow and decisioning inside and outside the organization and better project insight retention over time.

Role Summary

We're looking for an Infrastructure & Security Engineer to own our cloud platform, reliability, and security posture as we scale into large utilities and civil engineering firms. You'll be the first dedicated infra and security hire, working across engineering, IT, and leadership. The role spans DevOps, SRE, and security in equal parts.

Responsibilities

• Own our AWS environment end to end: VPC architecture, ECS, RDS, secrets management, IAM, networking, and cost optimization
• Define and improve reliability practices: SLOs, observability, alerting, on-call rotation, runbooks, and blameless post-incident reviews
• Lead incident response for both reliability and security events, from detection through resolution and follow-up
• Define and enforce policies for identity, secrets, data handling, and production access across the company
• Partner with engineering to embed reliability and security into the SDLC and infrastructure decisions
• Run our security program: SOC 2 readiness and audits, vendor reviews, access controls, endpoint security, and threat modeling
  
  

Is this you?

• 4 years of experience across DevOps, SRE, platform, or security engineering, with hands-on ownership of production AWS infrastructure
• Deep working knowledge of AWS (VPC, ECS, RDS, IAM, Secrets Manager, CloudWatch) and infrastructure-as-code (Terraform, CDK, or equivalent)
• Track record of improving reliability in production: defining SLOs, building observability, running on-call, and leading post-incident reviews
• Experience running or supporting a SOC 2 program, including evidence collection, control design, and auditor coordination
• Startup ready: autonomous, moves fast, takes initiative without being asked
• Strong verbal and written communication, able to articulate ideas clearly and collaborate effectively
• Bonus: experience supporting B2B products sold into regulated industries (utilities, energy, public sector)
  
  

The tech

• AWS ECS, Postgres on RDS
• GitHub, Slack, Notion, Figma
  
  

Benefits And Perks

• Interesting and challenging work
• Lots of room for growth
• Competitive salary and equity
• Health insurance
• Flexible and remote-friendly work environment
• FSA (health and dependent care)
• Unlimited PTO
  
  

Compensation Range: $155,544 - $175,320