Senior Systems Engineer (AWS GovCloud)
Broadwayventures · Remote - United States
About this role
**Senior Systems Engineer (AWS GovCloud)** **About Broadway Ventures** Broadway Ventures transforms challenges into opportunities through expert program management, cutting-edge technology, and innovative consulting solutions. As an 8(a), HUBZone, and Service-Disabled Veteran-Owned Small Business (SDVOSB), we empower government and private sector clients with tailored solutions that drive operational success, sustainability, and growth. **Position Summary** The Senior Systems Engineer builds and operates the AWS GovCloud infrastructure that hosts the Project Argos pipeline: containerized ingestion, validation, endpoint observation, and evidence-assembly services running in Broadway’s contractor-owned GovCloud tenancy. You will own infrastructure as code, CI/CD, monitoring, and tamper-evident evidence storage, and you will produce technical control evidence that supports the project’s Authority to Operate (ATO). **Works with** - Technical Lead - Application Developer - Project security lead **Employment Type** - Part-time (W2 or 1099 B2B) **Pay** - **W2:** $65–$76/hr - **1099:** $75–$87/hr **Duration** - 1-year contract --- ## About Project Argos Project Argos is an agentic AI proof of concept for the Office of the National Coordinator for Health IT (ONC). The pipeline pulls published API endpoint data for roughly 290 certified health IT products from the Certified Health IT Product List (CHPL), tests those endpoints on a repeatable schedule, and builds reproducible evidence cases for compliance gaps under 45 CFR Part 170. It runs in a contractor-hosted AWS GovCloud environment, and a qualified human reviews every finding before it becomes a confirmed issue. --- ## Key Responsibilities - Build and maintain the GovCloud environment (ECS/Fargate, DynamoDB, S3, VPC, IAM, CloudWatch) using Terraform or equivalent infrastructure as code, following secure deployment patterns aligned with government hosting/security requirements. - Design and run CI/CD for container image build, vulnerability scanning, and deployment, with release versioning that enables traceability of code/model/prompt/rule/source versions for each result. - Implement immutable or tamper-evident storage and logging for ingestion, agent decisions, human review, evidence packaging, and release versions (e.g., S3 Object Lock or equivalent controls). - Configure and manage outbound traffic so endpoint observation cadence remains configurable and respects source rate limits across ~290 certified products. - Stand up monitoring, alerting, and incident response for production services; support reporting of suspected/confirmed security incidents within one hour. - Manage secrets, TLS/PKI, DNS, and network segmentation for the pipeline and its connections to CHPL, Lantern, and developer-published endpoints. - Write control implementation narratives and provide technical evidence for the System Security Plan and independent security assessment (with the project security lead). - Plan capacity and autoscaling to meet contract targets (at least **95% coverage** of applicable CHPL listings and at least **95% evidence completeness**). - Keep architecture, runbooks, and configuration documentation current for knowledge transfer. --- ## Required Qualifications - AWS: ECS/Fargate, DynamoDB, S3, VPC networking, IAM, CloudWatch - Infrastructure as code (Terraform or equivalent) - CI/CD pipeline design and container image build, scanning, and deployment - Operating containerized serv
Listing freshness
CronJobs last confirmed this listing 2h ago. If its source stops confirming the opening for seven days, this page is removed from active inventory.