Broadway Ventures - Senior Systems Engineer (AWS GovCloud)
Requirements
• AWS: ECS/Fargate, DynamoDB, S3, VPC networking, IAM, CloudWatch • Infrastructure as code (Terraform or equivalent) • CI/CD pipeline design and container image build, scanning, and deployment • Operating containerized services in production • Monitoring, alerting, and incident response • Networking fundamentals: TLS/PKI, DNS, HTTP, troubleshooting • Security controls in a regulated or federal environment (NIST 800-53 or similar) • Technical documentation • Ability to obtain U.S. Public Trust • Active Public Trust or Secret clearance highly preferred • ATO or third-party security assessment experience • Capacity planning and autoscaling • Monitoring or outbound traffic management at scale • Secrets management and S3 Object Lock or immutable storage • Familiarity with HL7 FHIR, SMART on FHIR, or ONC certification programs • AWS professional-level certification • Training Provided After Start • FHIR, certified health IT regulatory content (45 CFR Part 170), and ONC program context are taught on the job. • AWS production operations and federal security control experience must already be in hand. • What to Expect Next: • After submitting your application, our recruiting team will review your qualifications. This may include a brief telephone interview or email communication to verify resume details and discuss compensation expectations. Interviews will be conducted with the most qualified candidates. Broadway Ventures conducts background checks and drug testing prior to the start of employment. Some positions may also require fingerprinting.
Responsibilities
• Build and maintain the GovCloud environment (ECS/Fargate, DynamoDB, S3, VPC, IAM, CloudWatch) through Terraform or equivalent infrastructure as code, following a secure deployment pattern aligned with Government hosting and security requirements. • Design and run the CI/CD pipeline for container image build, vulnerability scanning, and deployment, with release versioning that lets a reviewer identify which code, model, prompt, rule, and source version produced a given result. • Implement immutable or tamper-evident storage and logging for data ingestion, agent decisions, human review, evidence packaging, and release versions, including S3 Object Lock or equivalent controls. • Configure and manage outbound traffic so the endpoint observation cadence stays configurable and respects source rate limits across roughly 290 certified products. • Stand up monitoring, alerting, and incident response for production services, and support the contract requirement to report suspected or confirmed security incidents within one hour. • Manage secrets, TLS/PKI, DNS, and network segmentation for the pipeline and its connections to CHPL, Lantern, and developer-published endpoints. • Write control implementation narratives and supply technical evidence for the System Security Plan and the independent security assessment, working with the project security lead. • Plan capacity and autoscaling so each monitoring cycle meets the contract targets of at least 95% coverage of applicable CHPL listings and at least 95% evidence completeness. • Keep architecture, runbooks, and configuration documentation current for knowledge transfer.
Apply in one click
Upload My Resume
Drop here or click to browse · Tap to choose · PDF, DOCX, DOC, RTF, TXT