Security & Infrastructure Architect at CivicPlus

About this role

Your Impact CivicPlus runs across AWS and Azure, and that footprint has grown through new product work, platform expansion, and acquisitions. This role exists so security architecture keeps pace with that growth. You will set a clear definition of secure configuration, carry it consistently across environments, and make sure new designs are reviewed against it before they ship. About CivicPlus
At CivicPlus , we strive to bring our company vision to life through innovation and collaboration. Supported by approachable leadership and transparent communication, we’re empowered to make an impact on local government and the residents they serve. Grow your career alongside great people, where authenticity is welcome, successes are celebrated, and potential is nurtured. What You’ll Do As a Security & Infrastructure Architect, you will:
Define what secure configuration looks like across AWS and Azure, covering identity and access, network boundaries, encryption, logging, secrets handling, and workload protection
Baseline cloud environments against those standards and prioritize findings so teams can work through them in a sensible order
Turn assessment results into specific, actionable work with enough technical detail that teams can act without a second round of analysis
Partner with DPRE and SRE so security configuration is built into new cloud services and infrastructure as code from the start
Review cloud architecture and infrastructure as code changes for security impact before they ship
Keep cloud security standards current as AWS and Azure change and as the company’s footprint grows
Define and maintain hardened configuration baselines for operating systems, cloud services, and infrastructure drawing on DISA STIGs and CIS Benchmarks
Design how scan and monitoring coverage maps to authorization boundaries so new systems come into scope as they are created
Draft architecture standards and reference patterns for decisions made repeatedly across the company
Review proposed infrastructure, platform, and integration designs against architecture standards, raising concerns while designs can still change
Develop and maintain current state architecture documentation across cloud, identity, endpoints, SaaS, network, and integrations
Translate security requirements into technical design and configuration guidance IT Operations and DPRE can implement
Provide the Compliance team with accurate architecture documentation and technical detail needed for System Security Plans and audits
What We’re Looking For We know that excellent candidates come from diverse backgrounds. Even if you don’t meet 100% of the listed requirements, we encourage you to apply! Preferred Qualifications:
Five or more years working in cloud, infrastructure, systems engineering, or security engineering
At least three of those years in architecture, senior engineering, or a role centered on technical design and standards
Real depth in AWS or Azure security configuration, and working knowledge of the other
Experience reviewing or writing infrastructure as code, Terraform in particular
Familiarity with cloud security posture tooling and the ability to tell a real finding from noise
Practical experience applying hardened configuration baselines using DISA STIGs, CIS Benchmarks, or equivalent
Working knowledge of how continuous monitoring operates under FedRAMP or GovRAMP, including what scan coverage and evidence need to look like
Comfort automating configuration checks and evidence collection
Working knowledge of the corporate side: Microsoft 365, Entra ID, Active Directory, Okta, MDM and UEM tooling, EDR, and SIEM
A track record of writing technical documentation people actually use: diagrams, standards, decision records, and design reviews
Familiarity with GovRAMP, FedRAMP, SOC 2, PCI DSS, or ISO 27001 compliance frameworks
The ability to influence a technical decision without owning it, and the judgment to know when to escalate versus when to let the owning team decide
AI-forward mindset with a demonstrated ability to leverage AI tools to improve productivity, decision-making, and work quality
Demonstrated ability to effectively use AI tools to enhance productivity and outcomes
Compensation and Benefits

Estimated Salary Grade Range: $104,400 - $156,600
Anticipated Hiring Range: $115,000 - $125,000
The actual salary offer will carefully consider a wide range of factors, including your skills, qualifications, experience and is based on a 40-hour work week.



Benefits: Comprehensive health insurance, dental insurance, vision insurance, Flexible Time Off, 401(k) plan, and more.
Our Hiring Process
Introductory call with Talent Acquisition
Interview with the Hiring Manager
Panel Interview with CivicPlus team members, including an interview project activity
Offer
Note: The process may vary slightly depending on the role. Additional Information

CivicPlus is currently unable to provide visa sponsorship for this position now or in the future. Applicants must be authorized to work in the US.
We encourage you to apply as soon as possible, as applications will be reviewed on a rolling basis, and the posting may close earlier at the discretion of the Talent Acquisition team.
At CivicPlus , we embrace AI and automation as tools that help people work smarter, move faster, and focus on higher-value work that strengthens communities. We encourage thoughtful, responsible use of technology to improve efficiency, support innovation, and enhance the employee and customer experience—while keeping human judgment, collaboration, and accountability at the center of what we do.
Equal Opportunity Commitment CivicPlus is proud to be an Equal Employment Opportunity employer. We celebrate and support diversity for the benefit of our employees, products, clients, and communities. Reasonable accommodations are available during the interview process. Originally posted on Himalayas