[Hiring] Senior Systems Engineer @Broadway Ventures

Role Description

The Senior Systems Engineer builds and operates the AWS GovCloud infrastructure that hosts the Project Argos pipeline: containerized ingestion, validation, endpoint observation, and evidence-assembly services running in Broadway's contractor-owned GovCloud tenancy. You own infrastructure as code, CI/CD, monitoring, and tamper-evident evidence storage, and you produce the technical control evidence that supports the project's Authority to Operate (ATO).

Works with:

• Technical Lead
• Application Developer
• Project Security Lead

Employment Type: Part-time on either a W2 or 1099 B2B basis

Pay:

• W2: $65 - $76/hr.
• 1099: $75 - $87/hr.

Duration: 1 year contract

Key Responsibilities

• Build and maintain the GovCloud environment (ECS/Fargate, DynamoDB, S3, VPC, IAM, CloudWatch) through Terraform or equivalent infrastructure as code, following a secure deployment pattern aligned with Government hosting and security requirements.
• Design and run the CI/CD pipeline for container image build, vulnerability scanning, and deployment, with release versioning that lets a reviewer identify which code, model, prompt, rule, and source version produced a given result.
• Implement immutable or tamper-evident storage and logging for data ingestion, agent decisions, human review, evidence packaging, and release versions, including S3 Object Lock or equivalent controls.
• Configure and manage outbound traffic so the endpoint observation cadence stays configurable and respects source rate limits across roughly 290 certified products.
• Stand up monitoring, alerting, and incident response for production services, and support the contract requirement to report suspected or confirmed security incidents within one hour.
• Manage secrets, TLS/PKI, DNS, and network segmentation for the pipeline and its connections to CHPL, Lantern, and developer-published endpoints.
• Write control implementation narratives and supply technical evidence for the System Security Plan and the independent security assessment, working with the project security lead.
• Plan capacity and autoscaling so each monitoring cycle meets the contract targets of at least 95% coverage of applicable CHPL listings and at least 95% evidence completeness.
• Keep architecture, runbooks, and configuration documentation current for knowledge transfer.

Qualifications

• AWS: ECS/Fargate, DynamoDB, S3, VPC networking, IAM, CloudWatch
• Infrastructure as code (Terraform or equivalent)
• CI/CD pipeline design and container image build, scanning, and deployment
• Operating containerized services in production
• Monitoring, alerting, and incident response
• Networking fundamentals: TLS/PKI, DNS, HTTP, troubleshooting
• Security controls in a regulated or federal environment (NIST 800-53 or similar)
• Technical documentation
• Ability to obtain U.S. Public Trust

Preferred Qualifications

• Active Public Trust or Secret clearance highly preferred
• ATO or third-party security assessment experience
• Capacity planning and autoscaling
• Monitoring or outbound traffic management at scale
• Secrets management and S3 Object Lock or immutable storage
• Familiarity with HL7 FHIR, SMART on FHIR, or ONC certification programs
• AWS professional-level certification

Training Provided After Start

• FHIR, certified health IT regulatory content (45 CFR Part 170), and ONC program context are taught on the job.
• AWS production operations and federal security control experience must already be in hand.

Benefits

• 401(k) and company match
• PTO that grows the longer you stay
• Health, Vision, Dental
• Company provided Life Insurance and Voluntary Life Insurance
• Short Term Disability and Long Term Disability