Software Engineer

Booz Allen Hamilton•McLean, VA

About The Position

As an AI software engineer, you know that good software is more than just a nice-looking interface + data. Today, you need to develop user-focused solutions that increase organizational efficiency and enable better decision-making. Booz Allen is the leading provider of AI services to the nation—we’re looking for a software engineer like you to create artificial intelligence and machine learning solutions that help solve industry's toughest problems. Here, you’ll lead a team as they create and implement complete end-to-end solutions that modernize client systems. You’ll ensure that your team’s solutions consider the broader ecosystem and operating environment as well as future functionality and enhancements. You will architect the patterns, templates, and automation that empower teams across the enterprise to start projects quickly while meeting the highest standards for security, compliance, and delivery excellence—without sacrificing developer velocity.

Requirements

7+ years of experience with software engineering, DevSecOps, or platform engineering
Experience with GitHub Enterprise administration at scale
Experience with GitHub Actions, reusable workflows, and pipeline security controls
Experience with scripting and programming, such as Python or Go, for automation and tooling
Experience with IaC tools, such as Terraform and Pulumi, and API-driven configuration management
Experience with SBOM standards, such as SPDX and CycloneDX, and artifact signing, such as Sigstore and Cosign
Knowledge of secure software supply chain principles, SLSA, SSDF, and NIST 800-218
Secret clearance
HS diploma or GED

Nice To Haves

Experience in a large, regulated environment, such as DoD, FedRAMP, CMMC, SOX, or HIPAA
Experience with multi-org governance, cross-repo code reuse, and enterprise-scale GitHub migration and modernization
Experience with container security, policy-as-code, such as OPA or Kyverno, and compliance automation tooling
Knowledge of OpenSSF best practices and secure software maturity models
Possession of strong interpersonal and communication skills to communicate with engineering and leadership stakeholders

Responsibilities

Design and implement a repeatable, automated process to create new GitHub organizations pre-configured for secure software delivery.
Configure default repository, branch, and team settings aligned with SLSA Level 3, NIST Secure Software Development Framework (SSDF), and other applicable security standards.
Establish governance controls, access management patterns, and audit logging capabilities to ensure compliance at scale.
Create and maintain reusable GitHub Actions workflows and pipeline components for common software delivery scenarios.
Integrate code scanning, dependency scanning, artifact signing, provenance generation, and release workflows into the default templates.
Ensure CI/CD workflows produce cryptographically verifiable build artifacts compliant with SLSA provenance requirements.
Implement organization-wide enforcement of branch protection rules, mandatory reviews, security scanning, and secrets detection.
Integrate GitHub Advanced Security features into templates to enforce code scanning, Dependabot alerts, and secret scanning by default.
Automate compliance evidence collection for internal audits and external frameworks such as SOC 2, FedRAMP, or CMMC.
Develop tooling such as Terraform, GitHub CLI, REST, or GraphQL APIs to provision and configure GitHub orgs at scale.
Integrate GitHub org provisioning into enterprise onboarding workflows.
Establish guardrails that allow autonomy for product teams while maintaining enterprise security baselines.
Stay ahead of evolving software supply chain security requirements.
Recommend and implement improvements for developer experience, security posture, and operational efficiency.
Mentor engineering teams on secure software development and delivery practices.