> Markdown version of [/jobs/ext/4542390-security-infrastructure-architect](https://www.wearedevelopers.com/jobs/ext/4542390-security-infrastructure-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security & Infrastructure Architect - **Company:** CivicPlus, LLC - **Location:** United States (Remote available) - **Experience:** Experienced - **Salary:** $104,400.0 - $156,600.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Artificial Intelligence, Amazon Web Services, Systems Engineering, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Computing Security, Cloud Engineering, Information Technology Operations, PCI Data Security Standards, Cloud Services, Security Information and Event Management, Systems Integration, Data Logging, Okta, CIS Benchmarks, Terraform - **Published:** November 3, 2026 - **Apply:** https://startup.jobs/security-infrastructure-architect-civicplus-llc-10655197 ## About the Role * Five or more years working in cloud, infrastructure, systems engineering, or security engineering * At least three of those years in architecture, senior engineering, or a role centered on technical design and standards * Real depth in AWS or Azure security configuration, and working knowledge of the other * Experience reviewing or writing infrastructure as code, Terraform in particular * Familiarity with cloud security posture tooling and the ability to tell a real finding from noise * Practical experience applying hardened configuration baselines using DISA STIGs, CIS Benchmarks, or equivalent * Working knowledge of how continuous monitoring operates under FedRAMP or GovRAMP, including what scan coverage and evidence need to look like * Comfort automating configuration checks and evidence collection * Working knowledge of the corporate side: Microsoft 365, Entra ID, Active Directory, Okta, MDM and UEM tooling, EDR, and SIEM * A track record of writing technical documentation people actually use: diagrams, standards, decision records, and design reviews * Familiarity with GovRAMP, FedRAMP, SOC 2, PCI DSS, or ISO 27001 compliance frameworks * The ability to influence a technical decision without owning it, and the judgment to know when to escalate versus when to let the owning team decide * AI-forward mindset with a demonstrated ability to leverage AI tools to improve productivity, decision-making, and work quality * Demonstrated ability to effectively use AI tools to enhance productivity and outcomes ## Description * Define what secure configuration looks like across AWS and Azure, covering identity and access, network boundaries, encryption, logging, secrets handling, and workload protection * Baseline cloud environments against those standards and prioritize findings so teams can work through them in a sensible order * Turn assessment results into specific, actionable work with enough technical detail that teams can act without a second round of analysis * Partner with DPRE and SRE so security configuration is built into new cloud services and infrastructure as code from the start * Review cloud architecture and infrastructure as code changes for security impact before they ship * Keep cloud security standards current as AWS and Azure change and as the company's footprint grows * Define and maintain hardened configuration baselines for operating systems, cloud services, and infrastructure drawing on DISA STIGs and CIS Benchmarks * Design how scan and monitoring coverage maps to authorization boundaries so new systems come into scope as they are created * Draft architecture standards and reference patterns for decisions made repeatedly across the company * Review proposed infrastructure, platform, and integration designs against architecture standards, raising concerns while designs can still change * Develop and maintain current state architecture documentation across cloud, identity, endpoints, SaaS, network, and integrations * Translate security requirements into technical design and configuration guidance IT Operations and DPRE can implement * Provide the Compliance team with accurate architecture documentation and technical detail needed for System Security Plans and audits, * CivicPlus is currently unable to provide visa sponsorship for this position now or in the future. Applicants must be authorized to work in the US. * We encourage you to apply as soon as possible, as applications will be reviewed on a rolling basis, and the posting may close earlier at the discretion of the Talent Acquisition team. * At CivicPlus, we embrace AI and automation as tools that help people work smarter, move faster, and focus on higher-value work that strengthens communities. We encourage thoughtful, responsible use of technology to improve efficiency, support innovation, and enhance the employee and customer experience-while keeping human judgment, collaboration, and accountability at the center of what we do.