AI Engineer

M9 Solutions is seeking an AI Engineer to work hybrid remote/on-site in support of a government contract for a client located in Washington, DC. An active Secret clearance is required.

Responsibilities

• Designs and develops AI-enabled applications supporting FISMA audit readiness, GAO audit response activities, NFR and POA&M management, Corrective Action Plan (CAP) generation, audit evidence and PBC analysis, and control testing support.
• Builds custom GPT and RAG-based solutions that automate audit research, findings analysis, and recommendation development.
• Develops capabilities to identify recurring compliance deficiencies, thematic risks, and control weaknesses across audit artifacts.
• Develops secure AI copilots that leverage organizational repositories, policies, standards, procedures, and prior audit documentation.
• Implements vector databases, semantic search, and knowledge retrieval architectures to improve auditor productivity.
• Develops AI capabilities that support NIST CSF mapping, FISMA control assessments, policy review and comparison, audit narrative generation, and executive reporting.
• Creates solutions to automate review and clearance of cybersecurity directives, policies, standards, and procedures.
• Enhances existing initiatives focused on AI-driven reviews of regulatory and policy documentation.
• Develops automated compliance mapping against NIST, FISMA, OMB, and federal cybersecurity requirements.
• Designs data pipelines that integrate audit data, findings repositories, POA&M tracking systems, and compliance datasets.
• Develops dashboards that provide audit readiness metrics, open finding trends, control deficiency analysis, and program risk indicators.
• Implements predictive analytics to identify emerging compliance and cyber governance risks.
• Ensures AI solutions comply with federal cybersecurity requirements and AI governance standards.
• Implements model evaluation frameworks, prompt security controls, audit logging, and explainability mechanisms.
• Supports alignment with NIST AI RMF, federal AI policy guidance, and federal governance requirements.
• Identifies opportunities to reduce manual audit effort through automation.
• Supports the transition from static reporting toward AI-enabled decision support and data-driven governance.
• Develops proof-of-concepts and production-ready capabilities that enhance cybersecurity oversight functions.

Required Skills and Qualifications

• Secret security clearance.
• 5+ years of software engineering experience.
• 3+ years developing AI/ML-enabled applications.
• Experience with Python, FastAPI or Flask, React or modern front-end frameworks, Azure OpenAI, LangChain, Semantic Kernel, LlamaIndex or equivalent, REST APIs, SQL and NoSQL databases, and Git-based DevSecOps pipelines.
• Experience developing RAG architectures, agentic workflows, vector databases, prompt engineering frameworks, and document intelligence solutions.
• Experience working with unstructured content including policies, audit reports, findings, and compliance documentation.
• Understanding of FISMA, NIST Cybersecurity Framework, NIST SP 800-53, Continuous Monitoring, POA&M processes, cyber audit lifecycle, risk assessments, and Governance, Risk, and Compliance (GRC).
• Ability to engage directly with senior government stakeholders and translate complex cybersecurity requirements into technical solutions.

Preferred Skills and Qualifications

• Experience supporting federal civilian agencies.
• Exposure to federal civilian cybersecurity environments.
• Knowledge of audit finding management, Notification of Findings & Recommendations (NFRs), Corrective Action Plan development, and audit evidence collection and analysis.
• Experience building AI solutions for compliance, governance, or risk management programs.
• Familiarity with Microsoft Power Platform, Fabric, Purview, Copilot Studio, and Azure AI services.

GH 1071