AI Engineer

M9 Solutions•Washington, DC

6d•$60,000 - $180,000•Hybrid

About The Position

M9 Solutions is seeking an AI Engineer to work hybrid remote/on-site in support of a government contract for a client located in Washington, DC. An active Secret clearance is required. This role involves designing and developing AI-enabled applications to support various government audit and compliance functions, including FISMA audit readiness, GAO audit response, NFR and POA&M management, and control testing. The engineer will build custom GPT and RAG-based solutions, develop capabilities to identify compliance deficiencies, and create secure AI copilots leveraging organizational data. Responsibilities also include implementing vector databases, semantic search, and knowledge retrieval architectures, developing AI capabilities for NIST CSF mapping and policy review, and creating solutions for automating cybersecurity directive reviews. The role enhances existing AI-driven reviews of regulatory documentation, develops automated compliance mapping, designs data pipelines for audit data integration, and develops dashboards for audit readiness metrics. Additionally, the engineer will implement predictive analytics for risk identification, ensure AI solutions comply with federal cybersecurity and AI governance standards, and support the transition to AI-enabled decision support.

Requirements

Secret security clearance.
5+ years of software engineering experience.
3+ years developing AI/ML-enabled applications.
Experience with Python, FastAPI or Flask, React or modern front-end frameworks, Azure OpenAI, LangChain, Semantic Kernel, LlamaIndex or equivalent, REST APIs, SQL and NoSQL databases, and Git-based DevSecOps pipelines.
Experience developing RAG architectures, agentic workflows, vector databases, prompt engineering frameworks, and document intelligence solutions.
Experience working with unstructured content including policies, audit reports, findings, and compliance documentation.
Understanding of FISMA, NIST Cybersecurity Framework, NIST SP 800-53, Continuous Monitoring, POA&M processes, cyber audit lifecycle, risk assessments, and Governance, Risk, and Compliance (GRC).
Ability to engage directly with senior government stakeholders and translate complex cybersecurity requirements into technical solutions.

Nice To Haves

Experience supporting federal civilian agencies.
Exposure to federal civilian cybersecurity environments.
Knowledge of audit finding management, Notification of Findings & Recommendations (NFRs), Corrective Action Plan development, and audit evidence collection and analysis.
Experience building AI solutions for compliance, governance, or risk management programs.
Familiarity with Microsoft Power Platform, Fabric, Purview, Copilot Studio, and Azure AI services.

Responsibilities

Designs and develops AI-enabled applications supporting FISMA audit readiness, GAO audit response activities, NFR and POA&M management, Corrective Action Plan (CAP) generation, audit evidence and PBC analysis, and control testing support.
Builds custom GPT and RAG-based solutions that automate audit research, findings analysis, and recommendation development.
Develops capabilities to identify recurring compliance deficiencies, thematic risks, and control weaknesses across audit artifacts.
Develops secure AI copilots that leverage organizational repositories, policies, standards, procedures, and prior audit documentation.
Implements vector databases, semantic search, and knowledge retrieval architectures to improve auditor productivity.
Develops AI capabilities that support NIST CSF mapping, FISMA control assessments, policy review and comparison, audit narrative generation, and executive reporting.
Creates solutions to automate review and clearance of cybersecurity directives, policies, standards, and procedures.
Enhances existing initiatives focused on AI-driven reviews of regulatory and policy documentation.
Develops automated compliance mapping against NIST, FISMA, OMB, and federal cybersecurity requirements.
Designs data pipelines that integrate audit data, findings repositories, POA&M tracking systems, and compliance datasets.
Develops dashboards that provide audit readiness metrics, open finding trends, control deficiency analysis, and program risk indicators.
Implements predictive analytics to identify emerging compliance and cyber governance risks.
Ensures AI solutions comply with federal cybersecurity requirements and AI governance standards.
Implements model evaluation frameworks, prompt security controls, audit logging, and explainability mechanisms.
Supports alignment with NIST AI RMF, federal AI policy guidance, and federal governance requirements.
Identifies opportunities to reduce manual audit effort through automation.
Supports the transition from static reporting toward AI-enabled decision support and data-driven governance.
Develops proof-of-concepts and production-ready capabilities that enhance cybersecurity oversight functions.