Job description

At Broadway Ventures , we transform challenges into opportunities with expert program management, cutting-edge technology, and innovative consulting solutions. As an 8(a), HUBZone, and Service-Disabled Veteran-Owned Small Business (SDVOSB), we empower government and private sector clients by delivering tailored solutions that drive operational success, sustainability, and growth. Built on integrity, collaboration, and excellence, we’re more than a service provider—we’re your trusted partner in innovation. Position Summary The Senior Systems Engineer builds and operates the AWS GovCloud infrastructure that hosts the Project Argos pipeline: containerized ingestion, validation, endpoint observation, and evidence-assembly services running in Broadway's contractor-owned GovCloud tenancy. You own infrastructure as code, CI/CD, monitoring, and tamper-evident evidence storage, and you produce the technical control evidence that supports the project's Authority to Operate (ATO). Works with: Technical Lead, Application Developer, and the project security lead. Employment Type : Part-time on either a W2 or 1099 B2B basis Pay : W2 : $65 - $76/hr. 1099 : $75 - $87/hr. Duration : 1 year contract About Broadway Ventures and Project Argos Broadway Ventures, LLC is a Service-Disabled Veteran-Owned Small Business (SDVOSB) and HUBZone federal contractor headquartered in Vicksburg, Mississippi, with operations in the Madison/Huntsville, Alabama area. Project Argos is an agentic AI proof of concept for the Office of the National Coordinator for Health IT (ONC). The pipeline pulls published API endpoint data for roughly 290 certified health IT products from the Certified Health IT Product List (CHPL), tests those endpoints on a repeatable schedule, and builds reproducible evidence cases for compliance gaps under 45 CFR Part 170. It runs in a contractor-hosted AWS GovCloud environment, and a qualified human reviews every finding before it becomes a confirmed issue. Key Responsibilities Build and maintain the GovCloud environment (ECS/Fargate, DynamoDB, S3, VPC, IAM, CloudWatch) through Terraform or equivalent infrastructure as code, following a secure deployment pattern aligned with Government hosting and security requirements. Design and run the CI/CD pipeline for container image build, vulnerability scanning, and deployment, with release versioning that lets a reviewer identify which code, model, prompt, rule, and source version produced a given result. Implement immutable or tamper-evident storage and logging for data ingestion, agent decisions, human review, evidence packaging, and release versions, including S3 Object Lock or equivalent controls. Configure and manage outbound traffic so the endpoint observation cadence stays configurable and respects source rate limits across roughly 290 certified products. Stand up monitoring, alerting, and incident response for production services, and support the contract requirement to report suspected or confirmed security incidents within one hour. Manage secrets, TLS/PKI, DNS, and network segmentation for the pipeline and its connections to CHPL, Lantern, and developer-published endpoints. Write control implementation narratives and supply technical evidence for the System Security Plan and the independent security assessment, working with the project security lead. Plan capacity and autoscaling so each monitoring cycle meets the contract targets of at least 95% coverage of applicable CHPL listings and at least 95% evidence completeness. Keep architecture, runbooks, and configuration documentation current for knowledge transfer. Required Qualifications AWS: ECS/Fargate, DynamoDB, S3, VPC networking, IAM, CloudWatch Infrastructure as code (Terraform or equivalent) CI/CD pipeline design and container image build, scanning, and deployment Operating containerized services in production Monitoring, alerting, and incident response Networking fundamentals: TLS/PKI, DNS, HTTP, troubleshooting Security controls in a regulated or federal environment (NIST 800-53 or similar) Technical documentation Ability to obtain U.S. Public Trust Preferred Qualifications Active Public Trust or Secret clearance highly preferred ATO or third-party security assessment experience Capacity planning and autoscaling Monitoring or outbound traffic management at scale Secrets management and S3 Object Lock or immutable storage Familiarity with HL7 FHIR, SMART on FHIR, or ONC certification programs AWS professional-level certification Training Provided After Start FHIR, certified health IT regulatory content (45 CFR Part 170), and ONC program context are taught on the job. AWS production operations and federal security control experience must already be in hand. What to Expect Next: After submitting your application, our recruiting team will review your qualifications. This may include a brief telephone interview or email communication to verify resume details and discuss compensation expectations. Interviews will be conducted with the most qualified candidates. Broadway Ventures conducts background checks and drug testing prior to the start of employment. Some positions may also require fingerprinting. Broadway Ventures is an equal opportunity employer and a VEVRAA federal contractor. We do not discriminate against applicants or employees on the basis of race, color, religion, sex, national origin, age, disability, protected veteran status, or any other status protected by applicable law. Reasonable accommodations are available for applicants with disabilities. Broadway Ventures utilizes the OFCCP-approved Voluntary Self-Identification of Disability Form (CC-305). The pay range shown is a good-faith estimate of the compensation Broadway Ventures reasonably expects to pay for this position at the time of posting. It is not a guarantee of any particular wage, salary, or total compensation. Actual pay offered depends on job-related factors, which may include skills, experience, education, certifications and licensure, geographic work location, contract funding and budget. For positions covered by the Service Contract Act, pay is also governed by the applicable Department of Labor wage determination, which the government may revise. Location Eligibility: Broadway Ventures cannot consider applicants who live in, or would work from, any of the following locations: California, Colorado, Connecticut, the District of Columbia, Hawaii, Illinois, Maryland, Massachusetts, New Jersey, New York, North Dakota, Ohio, Oregon, Rhode Island, Washington State, and Wyoming. Candidates must live in and work from an eligible U.S. state when they are hired and for as long as they are employed. Applications from residents of the locations listed above will not be considered. Notice: Use of Artificial Intelligence in Our Hiring Process Broadway Ventures uses an artificial intelligence (AI) tool to help review applications for this position. Who built it: Broadway Ventures developed the tool in-house. What it does: It compares your resume to the requirements in this job posting and gives a score from 0 to 100 showing how closely your qualifications match. What information it uses: The text of your resume, your name, your current or most recent job title, your location, and this job posting. What it cannot see: Your answers to voluntary demographic or equal employment opportunity questions, interview feedback, or offer information. How it is used: The score is one factor in our initial review of applications. The tool does not reject anyone. A member of our recruiting team reviews every application before any decision is made. Your options: If you would like your application reviewed without the AI tool, or you need a reasonable accommodation at any point in the hiring process, contact us at recruiting@broadwayventures.net. Making a request will not affect whether you are considered for this position. Some positions are posted in support of a contract proposal that has not yet been awarded. Where that is the case, the position and its final compensation are contingent upon award of the contract to Broadway Ventures and on the terms of the awarded contract, including any government-approved labor rates and the applicable wage determination. Broadway Ventures offers a comprehensive benefits package. A general description of benefits is below. 401(k) and company match PTO that grows the longer you stay Health, Vision, Dental Company provided Life Insurance and Voluntary Life Insurance Short Term Disability and Long Term Disability

Requirements

Must-haves

Works with: Technical Lead, Application Developer, and the project security lead.
Part-time on either a W2 or 1099 B2B basis
1 year contract
About Broadway Ventures and Project Argos
Broadway Ventures, LLC is a Service-Disabled Veteran-Owned Small Business (SDVOSB) and HUBZone federal contractor headquartered in Vicksburg, Mississippi, with operations in the Madison/Huntsville, Alabama area.
Implement immutable or tamper-evident storage and logging for data ingestion, agent decisions, human review, evidence packaging, and release versions, including S3 Object Lock or equivalent controls.
Configure and manage outbound traffic so the endpoint observation cadence stays configurable and respects source rate limits across roughly 290 certified products.
Stand up monitoring, alerting, and incident response for production services, and support the contract requirement to report suspected or confirmed security incidents within one hour.
Manage secrets, TLS/PKI, DNS, and network segmentation for the pipeline and its connections to CHPL, Lantern, and developer-published endpoints.
Write control implementation narratives and supply technical evidence for the System Security Plan and the independent security assessment, working with the project security lead.
Plan capacity and autoscaling so each monitoring cycle meets the contract targets of at least 95% coverage of applicable CHPL listings and at least 95% evidence completeness.
Keep architecture, runbooks, and configuration documentation current for knowledge transfer.
AWS: ECS/Fargate, DynamoDB, S3, VPC networking, IAM, CloudWatch
Infrastructure as code (Terraform or equivalent)

Nice-to-haves

Active Public Trust or Secret clearance highly preferred
ATO or third-party security assessment experience
Capacity planning and autoscaling
Monitoring or outbound traffic management at scale
Secrets management and S3 Object Lock or immutable storage
Familiarity with HL7 FHIR, SMART on FHIR, or ONC certification programs
AWS professional-level certification
Training Provided After Start
FHIR, certified health IT regulatory content (45 CFR Part 170), and ONC program context are taught on the job.
AWS production operations and federal security control experience must already be in hand.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsci/cdaiapi

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto