Senior Systems Engineer; AWS GovCloud

At
Broadway Ventures
, we transform challenges into opportunities with expert program management, cutting-edge technology, and innovative consulting solutions. As an 8(a), HUBZone, and Service-Disabled Veteran-Owned Small Business (SDVOSB), we empower government and private sector clients by delivering tailored solutions that drive operational success, sustainability, and growth. Built on integrity, collaboration, and excellence, we’re more than a service provider—we’re your trusted partner in innovation.

The Senior Systems Engineer builds and operates the AWS Gov Cloud infrastructure that hosts the Project Argos pipeline: containerized ingestion, validation, endpoint observation, and evidence-assembly services running in Broadway's contractor-owned Gov Cloud tenancy. You own infrastructure as code, CI/CD, monitoring, and tamper-evident evidence storage, and you produce the technical control evidence that supports the project's Authority to Operate (ATO).

Works with: Technical Lead, Application Developer, and the project security lead.

Employment Type
:

• Part-time on either a W2 or 1099 B2B basis

Pay
:

• W2
  : $65 - $76/hr.
• 1099
  : $75 - $87/hr.

Duration
:

• 1 year contract

Broadway Ventures, LLC is a Service-Disabled Veteran-Owned Small Business (SDVOSB) and HUBZone federal contractor headquartered in Vicksburg, Mississippi, with operations in the Madison/Huntsville, Alabama area.

Project Argos is an agentic AI proof of concept for the Office of the National Coordinator for Health IT (ONC). The pipeline pulls published API endpoint data for roughly 290 certified health IT products from the Certified Health IT Product List (CHPL), tests those endpoints on a repeatable schedule, and builds reproducible evidence cases for compliance gaps under 45 CFR Part 170.

It runs in a contractor-hosted AWS Gov Cloud environment, and a qualified human reviews every finding before it becomes a confirmed issue.

• Build and maintain the Gov Cloud environment (ECS/Fargate, DynamoDB, S3, VPC, IAM, Cloud Watch) through Terraform or equivalent infrastructure as code, following a secure deployment pattern aligned with Government hosting and security requirements.
• Design and run the CI/CD pipeline for container image build, vulnerability scanning, and deployment, with release versioning that lets a reviewer identify which code, model, prompt, and source version produced a given result.
• Implement immutable or tamper-evident storage and logging for data ingestion, agent decisions, human review, evidence packaging, and release versions, including S3 Object Lock or equivalent controls.
• Configure and manage outbound traffic so the endpoint observation cadence stays configurable and respects source rate limits across roughly 290 certified products.
• Stand up monitoring, alerting, and incident response for production services, and support the contract requirement to report suspected or confirmed security incidents within one hour.
• Manage secrets, TLS/PKI, DNS, and network segmentation for the pipeline and its connections to CHPL, Lantern, and developer-published endpoints.
• Write control implementation narratives and supply technical evidence for the System Security Plan and the independent security assessment, working with the project security lead.
• Plan capacity and autoscaling so each monitoring cycle meets the contract targets of at least 95% coverage of applicable CHPL listings and at least 95% evidence completeness.
• Keep architecture, runbooks, and configuration documentation current for knowledge transfer.

• AWS: ECS/Fargate, DynamoDB, S3, VPC networking, IAM, Cloud Watch
• Infrastructure as code (Terraform or equivalent)
• CI/CD pipeline design and…