Senior Systems Engineer (AWS GovCloud)

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior Systems Engineer (AWS GovCloud) based in the United States.

Take ownership of the secure cloud infrastructure powering an innovative AI-driven healthcare technology proof of concept designed to strengthen compliance monitoring and evidence generation. As a Senior Systems Engineer, you will build, deploy, and maintain an AWS GovCloud environment supporting containerized data ingestion, validation, endpoint monitoring, and evidence assembly. You will lead infrastructure automation, CI/CD pipelines, observability, and secure data storage while ensuring reliable, repeatable, and auditable system operations. Working closely with application development, technical leadership, and security stakeholders, you will help establish the technical controls required for federal authorization and compliance. Your work will directly support the collection and validation of evidence related to certified health IT products and regulatory requirements. This remote, part-time contract offers an opportunity to apply advanced AWS engineering and federal security expertise to a mission-driven project at the intersection of AI, healthcare technology, and regulatory compliance. You will have substantial technical ownership, with a focus on security, operational reliability, documentation, and measurable system performance.

Accountabilities

• AWS GovCloud Infrastructure: Build, configure, and maintain secure cloud infrastructure using services such as Amazon ECS/Fargate, DynamoDB, S3, VPC, IAM, and CloudWatch. Implement infrastructure as code using Terraform or an equivalent solution, following federal hosting and security requirements.
• CI/CD and Deployment Automation: Design and operate CI/CD pipelines for container image building, vulnerability scanning, version control, and deployment. Ensure every release can be traced to the specific code, model, prompt, rule, and source versions that generated a given result.
• Secure and Tamper-Evident Evidence Storage: Implement immutable or tamper-evident storage and logging for ingestion activities, automated agent decisions, human reviews, evidence packages, and release records. Configure S3 Object Lock or equivalent controls to support auditability and evidence integrity.
• Network and Endpoint Monitoring: Configure outbound traffic management and monitoring schedules for approximately 290 certified health IT products. Ensure monitoring frequency is configurable and that requests respect source-system rate limits.
• Monitoring and Incident Response: Establish production monitoring, alerting, and incident response procedures. Support the requirement to report suspected or confirmed security incidents within one hour.
• Security and Connectivity Management: Manage secrets, TLS/PKI, DNS, network segmentation, and secure connectivity between the pipeline and external data sources, including CHPL, Lantern, and developer-published endpoints.
• Federal Security Compliance: Develop control implementation narratives and provide technical evidence for the System Security Plan (SSP), Authority to Operate (ATO) documentation, and independent security assessments. Collaborate with the project security lead to demonstrate implementation of applicable security controls.
• Capacity Planning and Scalability: Design capacity management and autoscaling strategies to meet monitoring performance targets, including at least 95% coverage of applicable Certified Health IT Product List listings and at least 95% evidence completeness per monitoring cycle.
• Architecture and Technical Documentation: Maintain accurate architecture diagrams, infrastructure configurations, operational runbooks, and implementation documentation to support system maintenance, audit readiness, and knowledge transfer.
• Cross-Functional Collaboration: Work closely with the technical lead, application developer, and security lead to coordinate infrastructure changes, resolve technical challenges, and ensure reliable project delivery.

Requirements

• AWS Expertise: Demonstrated hands-on experience with AWS infrastructure, particularly ECS/Fargate, DynamoDB, S3, VPC networking, IAM, and CloudWatch. Direct experience with AWS GovCloud is highly relevant.
• Infrastructure as Code: Practical experience developing and maintaining infrastructure using Ter…