Software Engineer

Software Engineer

The Opportunity: 
As an AI software engineer, you know that good software is more than just a nice-looking interface + data. Today, you need to develop user-focused solutions that increase organizational efficiency and enable better decision-making. Booz Allen is the leading provider of AI services to the nation and we’re looking for a software engineer like you to create artificial intelligence and machine learning solutions that help solve industry's toughest problems.

Here, you’ll lead a team as they create and implement complete end-to-end solutions that modernize client systems. You’ll ensure that your team’s solutions consider the broader ecosystem and operating environment as well as future functionality and enhancements.

You will architect the patterns, templates, and automation that empower teams across the enterprise to start projects quickly while meeting the highest standards for security, compliance, and delivery excellence without sacrificing developer velocity.

What You'll Do:

• ​Design and implement a repeatable, automated process to create new GitHub organizations pre-configured for secure software delivery.

• Configure default repository, branch, and team settings aligned with SLSA Level 3, NIST Secure Software Development Framework (SSDF), and other applicable security standards.

• Establish governance controls, access management patterns, and audit logging capabilities to ensure compliance at scale.

• Create and maintain reusable GitHub Actions workflows and pipeline components for common software delivery scenarios.

• Integrate code scanning, dependency scanning, artifact signing, provenance generation, and release workflows into the default templates.

• Ensure CI/CD workflows produce cryptographically verifiable build artifacts compliant with SLSA provenance requirements.

• Implement organization-wide enforcement of branch protection rules, mandatory reviews, security scanning, and secrets detection.

• Integrate GitHub Advanced Security features into templates to enforce code scanning, Dependabot alerts, and secret scanning by default.

• Automate compliance evidence collection for internal audits and external frameworks such as SOC 2, FedRAMP, or CMMC.

• Develop tooling such as Terraform, GitHub CLI, REST, or GraphQL APIs to provision and configure GitHub orgs at scale.

• Integrate GitHub org provisioning into enterprise onboarding workflows.

• Establish guardrails that allow autonomy for product teams while maintaining enterprise security baselines.

• Stay ahead of evolving software supply chain security requirements.

• Recommend and implement improvements for developer experience, security posture, and operational efficiency.

• Mentor engineering teams on secure software development and delivery practices.

Join us. The world can't wait.

You Have:

• 7+ years of experience with software engineering, DevSecOps, or platform engineering

• Experience with GitHub Enterprise administration at scale

• Experience with GitHub Actions, reusable workflows, and pipeline security controls

• Experience with scripting and programming, such as Python or Go, for automation and tooling

• Experience with IaC tools, such as Terraform and Pulumi, and API-driven configuration management

• Experience with SBOM standards, such as SPDX and CycloneDX, and artifact signing, such as Sigstore and Cosign

• Knowledge of secure software supply chain principles, SLSA, SSDF, and NIST 800-218

• Secret clearance

• HS diploma or GED

Nice If You Have:

• Experience in a large, regulated environment, such as DoD, FedRAMP, CMMC, SOX, or HIPAA

• Experience with multi-org governance, cross-repo code reuse, and enterprise-scale GitHub migration and modernization

• Experience with container security, policy-as-code, such as OPA or Kyverno, and compliance automation tooling

• Knowledge of OpenSSF best practices and secure software