Senior Systems Engineer (AWS GovCloud)
New
B
Broadway VenturesFederal IT
Remote - United StatesContractSenior
Salary65 - 76 USD per hour
Apply NowOpens the employer's application page
Job Details
- Required Skills
- CI/CDTerraform
Requirements
- Experience with AWS ECS/Fargate, DynamoDB, S3, VPC networking, IAM, and CloudWatch.
- Infrastructure-as-code experience with Terraform or an equivalent tool.
- Experience designing CI/CD pipelines and building, scanning, and deploying container images.
- Experience operating containerized services in production.
- Experience with monitoring, alerting, and incident response.
- Networking fundamentals, including TLS/PKI, DNS, HTTP, and troubleshooting.
- Experience with security controls in a regulated or federal environment, such as NIST 800-53 or similar.
- Technical documentation skills.
- Ability to obtain U.S. Public Trust.
- Preferred: ATO or third-party security assessment experience, capacity planning and autoscaling, secrets management, S3 Object Lock or immutable storage, and monitoring or outbound traffic management at scale.
- Preferred: Familiarity with HL7 FHIR, SMART on FHIR, or ONC certification programs; AWS professional-level certification.
Responsibilities
- Build and maintain the GovCloud environment using ECS/Fargate, DynamoDB, S3, VPC, IAM, and CloudWatch through Terraform or equivalent infrastructure as code.
- Design and operate CI/CD for container image builds, vulnerability scanning, and deployment, with release versioning that identifies the code, model, prompt, rule, and source version behind each result.
- Implement immutable or tamper-evident storage and logging for ingestion, agent decisions, human review, evidence packaging, and release versions.
- Configure outbound traffic and endpoint observation cadence to respect source rate limits across roughly 290 certified products.
- Establish monitoring, alerting, and incident response for production services, including support for reporting security incidents within one hour.
- Manage secrets, TLS/PKI, DNS, and network segmentation for the pipeline and its connections to CHPL, Lantern, and developer-published endpoints.
- Write control implementation narratives and provide technical evidence for the System Security Plan and independent security assessment with the project security lead.
- Plan capacity and autoscaling to meet monitoring-cycle coverage and evidence-completeness targets.
- Maintain architecture, runbooks, and configuration documentation for knowledge transfer.
View Full Description & ApplyYou'll be redirected to the employer's site
