Software Engineer

Position Overview

As an AI software engineer at Booz Allen, you will lead a team to create end‑to‑end solutions that modernize client systems. Your work will focus on secure software delivery, automation, and compliance with industry standards such as SLSA Level 3, NIST SSDF, SOC 2, FedRAMP, and CMMC. The role requires deep expertise in Git Hub Enterprise administration, Git Hub Actions, and IaC tooling.

• Design and implement a repeatable, automated process to create new Git Hub organizations pre‑configured for secure software delivery.
• Configure default repository, branch, and team settings aligned with SLSA Level 3, NIST SSDF, and other applicable security standards.
• Establish governance controls, access‑management patterns, and audit logging to ensure compliance at scale.
• Develop reusable Git Hub Actions workflows and pipeline components for common software delivery scenarios.
• Integrate code scanning, dependency scanning, artifact signing, provenance generation, and release workflows into default templates.
• Ensure CI/CD workflows produce cryptographically verifiable build artifacts compliant with SLSA provenance requirements.
• Implement organization‑wide enforcement of branch protection rules, mandatory reviews, security scanning, and secrets detection.
• Integrate Git Hub Advanced Security features into templates to enforce code scanning, Dependabot alerts, and secret scanning by default.
• Automate compliance evidence collection for internal audits and external frameworks such as SOC 2, FedRAMP, or CMMC.
• Develop tooling (Terraform, Git Hub CLI, REST, or GraphQL APIs) to provision and configure Git Hub orgs at scale.
• Integrate Git Hub org provisioning into enterprise onboarding workflows.
• Establish guardrails that allow autonomy for product teams while maintaining enterprise security baselines.
• Stay ahead of evolving software supply chain security requirements.
• Recommend and implement improvements for developer experience, security posture, and operational efficiency.
• Mentor engineering teams on secure software development and delivery practices.

• 7+ years of experience with software engineering, Dev Sec Ops , or platform engineering.
• Experience with Git Hub Enterprise administration at scale.
• Experience with Git Hub Actions, reusable workflows, and pipeline security controls.
• Experience with scripting and programming languages such as Python or Go for automation and tooling.
• Experience with IaC tools (Terraform, Pulumi) and API‑driven configuration management.
• Experience with SBOM standards (SPDX, CycloneDX) and artifact signing (Sigstore, Cosign).
• Knowledge of secure software supply chain principles, SLSA, SSDF, and NIST 800‑218.
• Secret clearance or willingness to obtain it.
• HS diploma or GED.

• Experience in a large, regulated environment (DoD, FedRAMP, CMMC, SOX, HIPAA).
• Experience with multi‑org governance, cross‑repo code reuse, and enterprise‑scale Git Hub migration.
• Experience with container security, policy‑as‑code (OPA, Kyverno), and compliance automation tooling.
• Knowledge of OpenSSF best practices and secure software maturity models.
• Strong interpersonal and communication skills to collaborate with engineering and leadership stakeholders.

Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information;
Secret clearance is required.

Projected compensation range: $ to $ (annualized USD). This posting will close within 90 days from the posting date.

Benefits include health, life, disability, financial, and retirement benefits, paid leave, professional development, tuition assistance, work‑life programs, and dependent care. Full‑time and part‑time employees working at least 20 hours a week on a regular basis are eligible for Booz Allen’s benefit programs.

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran, or any other status protected by applicable federal, state, local, or international law.