Security & Infrastructure Architect

Description

Your Impact

CivicPlus runs across AWS and Azure, and that footprint has grown through new product work, platform expansion, and acquisitions. This role exists so security architecture keeps pace with that growth. You will set a clear definition of secure configuration, carry it consistently across environments, and make sure new designs are reviewed against it before they ship.

About CivicPlus

At CivicPlus, we strive to bring our company vision to life through innovation and collaboration. Supported by approachable leadership and transparent communication, we’re empowered to make an impact on local government and the residents they serve. Grow your career alongside great people, where authenticity is welcome, successes are celebrated, and potential is nurtured.

What You’ll Do

As a Security & Infrastructure Architect, you will:

• Define what secure configuration looks like across AWS and Azure, covering identity and access, network boundaries, encryption, logging, secrets handling, and workload protection
• Baseline cloud environments against those standards and prioritize findings so teams can work through them in a sensible order
• Turn assessment results into specific, actionable work with enough technical detail that teams can act without a second round of analysis
• Partner with DPRE and SRE so security configuration is built into new cloud services and infrastructure as code from the start
• Review cloud architecture and infrastructure as code changes for security impact before they ship
• Keep cloud security standards current as AWS and Azure change and as the company’s footprint grows
• Define and maintain hardened configuration baselines for operating systems, cloud services, and infrastructure drawing on DISA STIGs and CIS Benchmarks
• Design how scan and monitoring coverage maps to authorization boundaries so new systems come into scope as they are created
• Draft architecture standards and reference patterns for decisions made repeatedly across the company
• Review proposed infrastructure, platform, and integration designs against architecture standards, raising concerns while designs can still change
• Develop and maintain current state architecture documentation across cloud, identity, endpoints, SaaS, network, and integrations
• Translate security requirements into technical design and configuration guidance IT Operations and DPRE can implement
• Provide the Compliance team with accurate architecture documentation and technical detail needed for System Security Plans and audits

What We’re Looking For

We know that excellent candidates come from diverse backgrounds. Even if you don’t meet 100% of the listed requirements, we encourage you to apply!

Preferred Qualifications:

• Five or more years working in cloud, infrastructure, systems engineering, or security engineering
• At least three of those years in architecture, senior engineering, or a role centered on technical design and standards
• Real depth in AWS or Azure security configuration, and working knowledge of the other
• Experience reviewing or writing infrastructure as code, Terraform in particular
• Familiarity with cloud security posture tooling and the ability to tell a real finding from noise
• Practical experience applying hardened configuration baselines using DISA STIGs, CIS Benchmarks, or equivalent
• Working knowledge of how continuous monitoring operates under FedRAMP or GovRAMP, including what scan coverage and evidence need to look like
• Comfort automating configuration checks and evidence collection
• Working knowledge of the corporate side: Microsoft 365, Entra ID, Active Directory, Okta, MDM and UEM tooling, EDR, and SIEM
• A track record of writing technical documentation people actually use: diagrams, standards, decision records, and design reviews
• Familiarity with GovRAMP, FedRAMP, SOC 2, PCI DSS, or ISO 27001 compliance frameworks
• The ability to influence a technical decision without owning it, and the judgment to know when to escalate versus when to let the owning team decide
• AI-forward mindset with a demonstrated ability to leverage AI tools to improve productivity, decision-making, and work quality
• Demonstrated ability to effectively use AI tools to enhance productivity and outcomes

Compensation and Benefits

• Estimated Salary Grade Range: $104,400 - $156,600
  • Anticipated Hiring Range: $115,000 - $125,000
  • The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience and is based on a 40-hour work week.
• Benefits: Comprehensive health insurance, dental insurance, vision insurance, Flexible Time Off, 401(k) plan, and more.

Our Hiring Process

• Introductory call with Talent Acquisition
• Interview with the Hiring Manager
• Panel Interview with CivicPlus team members, including an interview project activity
• Offer

Note: The process may vary slightly depending on the role.

Additional Information

• CivicPlus is currently unable to provide visa sponsorship for this position now or in the future. Applicants must be authorized to work in the US.
• We encourage you to apply as soon as possible, as applications will be reviewed on a rolling basis, and the posting may close earlier at the discretion of the Talent Acquisition team.
• At CivicPlus, we embrace AI and automation as tools that help people work smarter, move faster, and focus on higher-value work that strengthens communities. We encourage thoughtful, responsible use of technology to improve efficiency, support innovation, and enhance the employee and customer experience-while keeping human judgment, collaboration, and accountability at the center of what we do.

Equal Opportunity Commitment

CivicPlus is proud to be an Equal Employment Opportunity employer. We celebrate and support diversity for the benefit of our employees, products, clients, and communities. Reasonable accommodations are available during the interview process.