Senior Systems Engineer (AWS GovCloud)

Job description

**This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Systems Engineer (AWS GovCloud) based in the United States.** Take ownership of the secure cloud infrastructure powering an innovative AI-driven healthcare technology proof of concept designed to strengthen compliance monitoring and evidence generation. As a Senior Systems Engineer, you will build, deploy, and maintain an AWS GovCloud environment supporting containerized data ingestion, validation, endpoint monitoring, and evidence assembly. You will lead infrastructure automation, CI/CD pipelines, observability, and secure data storage while ensuring reliable, repeatable, and auditable system operations. Working closely with application development, technical leadership, and security stakeholders, you will help establish the technical controls required for federal authorization and compliance. Your work will directly support the collection and validation of evidence related to certified health IT products and regulatory requirements. This remote, part-time contract offers an opportunity to apply advanced AWS engineering and federal security expertise to a mission-driven project at the intersection of AI, healthcare technology, and regulatory compliance. You will have substantial technical ownership, with a focus on security, operational reliability, documentation, and measurable system performance. ### Accountabilities - **AWS GovCloud Infrastructure:** Build, configure, and maintain secure cloud infrastructure using services such as Amazon ECS/Fargate, DynamoDB, S3, VPC, IAM, and CloudWatch. Implement infrastructure as code using Terraform or an equivalent solution, following federal hosting and security requirements. - **CI/CD and Deployment Automation:** Design and operate CI/CD pipelines for container image building, vulnerability scanning, version control, and deployment. Ensure every release can be traced to the specific code, model, prompt, rule, and source versions that generated a given result. - **Secure and Tamper-Evident Evidence Storage:** Implement immutable or tamper-evident storage and logging for ingestion activities, automated agent decisions, human reviews, evidence packages, and release records. Configure S3 Object Lock or equivalent controls to support auditability and evidence integrity. - **Network and Endpoint Monitoring:** Configure outbound traffic management and monitoring schedules for approximately 290 certified health IT products. Ensure monitoring frequency is configurable and that requests respect source-system rate limits. - **Monitoring and Incident Response:** Establish production monitoring, alerting, and incident response procedures. Support the requirement to report suspected or confirmed security incidents within one hour. - **Security and Connectivity Management:** Manage secrets, TLS/PKI, DNS, network segmentation, and secure connectivity between the pipeline and external data sources, including CHPL, Lantern, and developer-published endpoints. - **Federal Security Compliance:** Develop control implementation narratives and provide technical evidence for the System Security Plan (SSP), Authority to Operate (ATO) documentation, and independent security assessments. Collaborate with the project security lead to demonstrate implementation of applicable security controls. - **Capacity Planning and Scalability:** Design capacity management and autoscaling strategies to meet monitoring performance targets, including at least 95% coverage of applicable Certified Health IT Product List listings and at least 95% evidence completeness per monitoring cycle. - **Architecture and Technical Documentation:** Maintain accurate architecture diagrams, infrastructure configurations, operational runbooks, and implementation documentation to support system maintenance, audit readiness, and knowledge transfer. - **Cross-Functional Collaboration:** Work closely with the technical lead, application developer, and security lead to coordinate infrastructure changes, resolve technical challenges, and ensure reliable project delivery. ## Requirements - **AWS Expertise:** Demonstrated hands-on experience with AWS infrastructure, particularly ECS/Fargate, DynamoDB, S3, VPC networking, IAM, and CloudWatch. Direct experience with AWS GovCloud is highly relevant. - **Infrastructure as Code:** Practical experience developing and maintaining infrastructure using Terraform or an equivalent infrastructure-as-code tool. - **CI/CD Engineering:** Experience designing and operating CI/CD pipelines for container image builds, vulnerability scanning, deployment automation, and release versioning. - **Containerized Production Systems:** Proven ability to deploy, operate, troubleshoot, and maintain containerized services in production environments. - **Monitoring and Incident Management:** Experience implementing monitoring, alerting, operational diagnostics, and incident response procedures for production systems. - **Networking Fundamentals:** Strong understanding of TLS/PKI, DNS, HTTP, network segmentation, secure connectivity, and systematic troubleshooting of network-related issues. - **Federal and Regulated Security:** Experience implementing security controls in a federal, government, or regulated environment, with knowledge of NIST SP 800-53 or comparable security frameworks. - **Technical Documentation:** Ability to produce clear, accurate technical documentation, including architecture descriptions, operational runbooks, security control narratives, and audit evidence. - **Public Trust Eligibility:** Ability to obtain a U.S. Public Trust. An active Public Trust or Secret clearance is strongly preferred. - **Security and Storage Controls:** Familiarity with secrets management, immutable storage, S3 Object Lock, and audit-ready logging practices is an advantage. - **Scalability and Performance:** Experience with capacity planning, autoscaling, monitoring large numbers of external endpoints, or managing outbound traffic at scale is beneficial. - **Healthcare Technology Knowledge:** Familiarity with HL7 FHIR, SMART on FHIR, ONC certification programs, or healthcare interoperability standards is advantageous. Training on FHIR and relevant healthcare regulatory requirements will be provided after starting. - **Professional Certifications:** AWS professional-level certification is a plus. - **Collaboration and Ownership:** Strong problem-solving skills, attention to detail, security-conscious judgment, and the ability to work independently while coordinating effectively with technical and security stakeholders. - **Location Eligibility:** Candidates must reside and work within an eligible U.S. state at the time of hire and throughout employment. Applicants residing in or working from California, Colorado, Connecticut, the District of Columbia, Hawaii, Illinois, Maryland, Massachusetts, New Jersey, New York, North Dakota, Ohio, Oregon, Rhode Island, Washington State, or Wyoming are not eligible. - **Employment Arrangement:** Candidates must be comfortable with a part-time, one-year contract and the applicable W-2 or 1099 B2B engagement structure. ## Benefits - **Competitive Hourly Compensation:** $65–$76 per hour for W-2 employees or $75–$87 per hour for 1099 B2B contractors. - **Contract Flexibility:** Part-time engagement with a one-year contract duration. - **Remote Work:** Work remotely from an eligible U.S. state. - **Health Insurance:** Health, dental, and vision coverage for eligible employees, subject to applicable employment terms. - **Retirement Savings:** Access to a 401(k) plan with company matching for eligible employees. - **Paid Time Off:** Paid time off that increases with length of service, subject to applicable employment terms. - **Life Insurance:** Company-provided life insurance, with voluntary life insurance options. - **Disability Coverage:** Short-term and long-term disability benefits for eligible employees. - **Technical Ownership:** Opportunity to lead cloud infrastructure, deployment automation, security controls, and production reliability for a specialized government-focused technology project. - **Professional Development:** Hands-on exposure to AI-enabled healthcare compliance systems, federal security requirements, and modern AWS GovCloud architecture. - **Collaborative Environment:** Work directly with technical leadership, application development, and security professionals in a focused, mission-oriented team.