Security & Infrastructure Architect

Description

Your Impact

CivicPlus runs across AWS and Azure, and that footprint has grown through new product work, platform expansion, and acquisitions. This role exists so security architecture keeps pace with that growth. You will set a clear definition of secure configuration, carry it consistently across environments, and make sure new designs are reviewed against it before they ship.

About CivicPlus

At CivicPlus, we strive to bring our company vision to life through innovation and collaboration. Supported by approachable leadership and transparent communication, we’re empowered to make an impact on local government and the residents they serve. Grow your career alongside great people, where authenticity is welcome, successes are celebrated, and potential is nurtured.

What You’ll Do

As a Security & Infrastructure Architect, you will:

Define what secure configuration looks like across AWS and Azure, covering identity and access, network boundaries, encryption, logging, secrets handling, and workload protection

Baseline cloud environments against those standards and prioritize findings so teams can work through them in a sensible order

Turn assessment results into specific, actionable work with enough technical detail that teams can act without a second round of analysis

Partner with DPRE and SRE so security configuration is built into new cloud services and infrastructure as code from the start

Review cloud architecture and infrastructure as code changes for security impact before they ship

Keep cloud security standards current as AWS and Azure change and as the company’s footprint grows

Define and maintain hardened configuration baselines for operating systems, cloud services, and infrastructure drawing on DISA STIGs and CIS Benchmarks

Design how scan and monitoring coverage maps to authorization boundaries so new systems come into scope as they are created

Draft architecture standards and reference patterns for decisions made repeatedly across the company

Review proposed infrastructure, platform, and integration designs against architecture standards, raising concerns while designs can still change

Develop and maintain current state architecture documentation across cloud, identity, endpoints, SaaS, network, and integrations

Translate security requirements into technical design and configuration guidance IT Operations and DPRE can implement

Provide the Compliance team with accurate architecture documentation and technical detail needed for System Security Plans and audits

What We’re Looking For

We know that excellent candidates come from diverse backgrounds. Even if you don’t meet 100% of the listed requirements, we encourage you to apply!

Preferred Qualifications:

Five or more years working in cloud, infrastructure, systems engineering, or security engineering

At least three of those years in architecture, senior engineering, or a role centered on technical design and standards

Real depth in AWS or Azure security configuration, and working knowledge of the other

Experience reviewing or writing infrastructure as code, Terraform in particular

Familiarity with cloud security posture tooling and the ability to tell a real finding from noise

Practical experience applying hardened configuration baselines using DISA STIGs, CIS Benchmarks, or equivalent

Working knowledge of how continuous monitoring operates under FedRAMP or GovRAMP, including what scan coverage and evidence need to look like

Comfort automating configuration checks and evidence collection

Working knowledge of the corporate side: Microsoft 365, Entra ID, Active Directory, Okta, MDM and UEM tooling, EDR, and SIEM

A track record of writing technical documentation people actually use: diagrams, standards, decision records, and design reviews

Familiarity with GovRAMP, FedRAMP, SOC 2, PCI DSS, or ISO 27001 compliance frameworks

The ability to influence a technical decision without owning it, and the judgment to know when to escalate versus when to let the owning team decide

AI-forward mindset with a demonstrated ability to leverage AI tools to improve productivity, decision-making, and work quality

Demonstrated ability to effectively use AI tools to enhance productivity and outcomes

Compensation and Benefits

Estimated Salary Grade Range: $104,400 - $156,600 Anticipated Hiring Range: $115,000 - $125,000

The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience and is based on a 40-hour work week.

Benefits: Comprehensive health insurance, dental insurance, vision insurance, Flexible Time Off, 401(k) plan, and more.

Our Hiring Process

Introductory call with Talent Acquisition

Interview with the Hiring Manager

Panel Interview with CivicPlus team members, including an interview project activity

Offer

Note: The process may vary slightly depending on the role.

Additional Information

CivicPlus is currently unable to provide visa sponsorship for this position now or in the future. Applicants must be authorized to work in the US.

We encourage you to apply as soon as possible, as applications will be reviewed on a rolling basis, and the posting may close earlier at the discretion of the Talent Acquisition team.

At CivicPlus, we embrace AI and automation as tools that help people work smarter, move faster, and focus on higher-value work that strengthens communities. We encourage thoughtful, responsible use of technology to improve efficiency, support innovation, and enhance the employee and customer experience—while keeping human judgment, collaboration, and accountability at the center of what we do.

Equal Opportunity Commitment

CivicPlus is proud to be an Equal Employment Opportunity employer. We celebrate and support diversity for the benefit of our employees, products, clients, and communities. Reasonable accommodations are available during the interview process.