New opportunity

AI Engineer

Booz Allen Hamilton · Washington; McLean, United States

About this role

Design and deliver production-grade AI systems for mission-critical federal environments. Own retrieval-augmented generation (RAG) pipelines, evaluation systems, and performance optimization, building secure, scalable, observable services across the AI application lifecycle.

Responsibilities

  • Build enterprise data ingestion, embedding, indexing, and retrieval pipelines, including document chunking, metadata filtering, hybrid search, and retrieval tuning.
  • Develop AI APIs and services; manage prompts, model configurations, and structured outputs across development and production.
  • Implement logging, tracing, and metrics for latency, throughput, token usage, cache hit rate, and errors. Improve performance through caching, parallelization, and asynchronous workflows.
  • Build automated evaluation using benchmark datasets, LLM-as-a-judge methods, regression tests, and human evaluation. Deploy, monitor, debug, and support production AI services, including incident response.

Required qualifications

  • 3+ years of experience building production systems, including AI/ML applications, and a bachelor’s degree.
  • Experience with LLM systems using RAG frameworks such as LangChain or LlamaIndex, or custom pipelines and vector stores; API development with FastAPI, Flask, or Node.js; cloud-native AWS architectures; and agent orchestration patterns.
  • Experience with observability, performance optimization, evaluation pipelines, and production AI operations. Knowledge of AI security, including prompt injection, jailbreak resistance, data leakage prevention, guardrails, secure prompt design, and responsible AI practices.
  • Ability to obtain a TS/SCI clearance. Selected applicants are subject to a security investigation and may need to meet classified-information access requirements.

Preferred qualifications

  • Experience supporting DoD or other federal missions; high-performance inference with vLLM, Ray Serve, or Triton Inference Server; semantic caching; guardrail frameworks; and enterprise data platforms or knowledge repositories.
  • Experience with AWS GovCloud, IL4 or IL5, other secure cloud environments, event-driven messaging, or Model Context Protocol (MCP).

The role is hybrid, based in Washington, DC, with McLean, Virginia, also listed. Hybrid employees are expected to work frequently from a Booz Allen facility and may need to visit customer facilities. The projected annual salary range is $99,000–$225,000 USD. Benefits may include health, life, disability, financial and retirement offerings, paid leave, professional development, and tuition assistance, subject to eligibility.

For full details about this role, click “Apply on company site” to view the employer’s original posting.

Skills for this role

Retrieval-augmented generation (RAG)Large language models (LLMs)LangChainLlamaIndexPineconeWeaviateFAISSOpenSearch Vector SearchEmbeddingsDocument ingestionChunkingMetadata filteringHybrid searchRetrieval optimizationFastAPIFlaskNode.jsAWS BedrockAmazon SageMakerAmazon EKSAmazon ECSAmazon S3AWS IAMAWS LambdaAmazon CloudWatchAWS Secrets ManagerLangGraphTool callingFunction callingOpenTelemetry

Your skill match

Checking your profile…

YOUR NEXT STEP

Get interview-ready for this role

A focused preparation guide, built around this job’s responsibilities and requirements.

✦ AI-generated guide
Preparation suggestions, not the employer’s actual interview questions. Always check the original posting for current requirements.
01

Understand the role

What matters most

  • Own enterprise RAG pipelines

    Posting: The role covers document ingestion, chunking, embeddings, indexing, metadata filtering, hybrid search, and retrieval tuning. Preparation: Be ready to explain design choices across that pipeline and how retrieval quality would be measured.

  • Deliver AI services across environments

    Posting: The engineer designs APIs and services and manages prompt templates, versions, model configurations, and structured outputs across development and production, using cloud-native AWS architectures. Preparation: Outline how these components fit into a deployable service.

  • Build evaluation into delivery

    Posting: The role calls for benchmark datasets, LLM-as-a-judge techniques, regression tests, and human evaluation workflows. Preparation: Explain what each method can detect and where human review remains useful.

  • Operate and optimize production systems

    Posting: Responsibilities include deployment, monitoring, incident response, debugging, and performance tuning, with metrics for latency, throughput, token usage, cache hits, and errors. Preparation: Connect those signals to specific tuning or debugging decisions.

  • Design for secure federal use

    Posting: The role serves mission-critical federal environments and requires knowledge of prompt injection, jailbreak resistance, data leakage prevention, guardrails, and responsible AI. Preparation: Describe how security considerations shape an AI service design; do not assume a particular classified deployment.

Likely challenges to think through

  • Retrieval quality versus response time

    Possible challenge, not a confirmed employer problem: More elaborate chunking, filtering, and hybrid search may improve relevance while increasing latency or complexity. Prepare to explain how benchmark results and latency traces would guide a retrieval change.

  • Reliable evaluation of variable outputs

    Possible challenge, not a confirmed employer problem: LLM-as-a-judge scores can be difficult to interpret without benchmark cases and human review. Prepare a way to combine those methods with regression tests before promoting a prompt or model configuration.

  • Useful agent behavior versus security controls

    Possible challenge, not a confirmed employer problem: Tool calling and retrieved content can expand functionality while creating prompt-injection or data-leakage risks. Prepare to discuss boundaries, guardrails, and tests that preserve useful behavior without treating model instructions as trusted.

03

Practice your answers

Technical practice

How would you design an enterprise document ingestion and embedding pipeline for a RAG service?

What to coverThe posting names ingestion, chunking, indexing, and metadata filtering. Preparation suggestion: explain how you would handle document updates, choose chunk boundaries, preserve useful metadata, and verify that indexed content remains retrievable.

How would you diagnose and improve poor retrieval results?

What to coverThe role includes hybrid search and retrieval optimization. Preparation suggestion: compare keyword and vector results, inspect filters and chunking, and explain how you would measure whether a tuning change improves relevance.

How would you manage prompts, model configurations, and structured outputs in an AI API?

What to coverThe posting calls for API development and management of these components across development and production. Preparation suggestion: discuss versioning, output validation, and the trade-off between changing a prompt quickly and maintaining reproducible behavior.

When would you use agent orchestration or tool calling instead of a simpler RAG workflow?

What to coverAgent orchestration, tool calling, and function calling are listed in the role. Preparation suggestion: describe when additional steps are justified, how you would constrain tool use, and how you would test failures across steps.

How would you design a cloud-native AWS deployment for a production AI service?

What to coverThe posting lists AWS services including Bedrock, EKS or ECS, S3, IAM, CloudWatch, and Secrets Manager. Preparation suggestion: select only the services your design needs and explain deployment, access control, secret handling, and scaling trade-offs.

What would you instrument to make an AI service observable?

What to coverThe role calls for logging, tracing, and metrics covering latency, throughput, token usage, cache hit rate, and errors. Preparation suggestion: explain how you would connect traces across retrieval and model calls, then use the resulting signals to isolate a problem.

How would you reduce RAG latency without sacrificing answer quality?

What to coverThe posting mentions caching, parallelization, asynchronous workflows, and retrieval tuning. Preparation suggestion: identify the bottleneck first, compare possible optimizations, and describe measurements that would reveal quality regressions or stale cache results.

How would you build an evaluation pipeline for a RAG application?

What to coverThe role includes benchmark datasets, LLM-as-a-judge methods, regression tests, and human evaluation. Preparation suggestion: explain what each method can assess, where judge scores may be unreliable, and how you would compare results across versions.

How would you defend a RAG service against prompt injection and data leakage?

What to coverThe posting explicitly calls for prompt-injection resistance, guardrails, secure prompt design, and responsible AI practices. Preparation suggestion: distinguish trusted instructions from retrieved content, describe access checks and output controls, and explain how you would test the defenses.

How would you investigate a production AI service incident?

What to coverDeployment, monitoring, incident response, debugging, and performance tuning are stated responsibilities. Preparation suggestion: walk through triage using service metrics and traces, mitigation of user impact, and checks before and after a fix.

Behavioural practice

Tell me about a time you owned a production system from design through operations.

What to coverThe role spans the full AI application lifecycle. Preparation suggestion: use situation, action, and result to show the decisions you owned, how you handled handoffs, and what happened after deployment.

Describe a production incident you helped resolve.

What to coverThe posting includes incident response and debugging. Preparation suggestion: state the situation and impact, your specific actions during diagnosis and recovery, and the result or follow-up improvement.

Tell me about a time you balanced performance against quality or reliability.

What to coverThe role combines performance optimization with evaluation and production operations. Preparation suggestion: describe the competing goals, the evidence behind your decision, and the measured result using situation, action, and result.

Describe a time evaluation results challenged your initial approach.

What to coverThe posting calls for automated and human evaluation workflows. Preparation suggestion: explain the situation, how you investigated or reconciled the results, what you changed, and the outcome.

Tell me about a time you addressed a security concern while delivering a technical system.

What to coverThe role emphasizes secure AI solutions for federal environments and names AI security risks. Preparation suggestion: give a real situation, your actions with relevant stakeholders, and the result without disclosing sensitive information.

02

Sharpen your knowledge

Topics to prepare

  • RAG retrieval design

    The posting requires ingestion, embeddings, chunking, indexing, metadata filtering, hybrid search, and retrieval tuning. As preparation, compare two chunking strategies and explain how you would measure whether each improves retrieval.

  • AI evaluation design

    The role calls for benchmark datasets, LLM-as-a-judge methods, regression tests, and human evaluation. As preparation, outline when each method is useful and how you would investigate disagreement between automated and human assessments.

  • Cloud-native AI architecture

    Experience with AWS-based architectures is required; the posting names Bedrock, SageMaker, EKS or ECS, S3, IAM, Lambda, CloudWatch, and Secrets Manager. As preparation, sketch a production RAG service using relevant named services and explain data flow, access control, and deployment trade-offs.

  • Agent orchestration

    The posting specifies LangGraph, tool calling, and function-calling APIs as examples of agent frameworks and patterns. As preparation, diagram a tool-calling flow and identify where inputs, outputs, and failures should be checked.

  • Production performance and operations

    The role requires observability, caching, parallel or asynchronous workflows, deployment, debugging, and incident response. As preparation, reason through a latency spike using latency, throughput, token usage, cache hit rate, and error-rate metrics.

  • AI security and responsible AI

    The posting names prompt injection, jailbreak resistance, data leakage prevention, guardrails, and secure prompt design. As preparation, trace how an untrusted retrieved document could affect an answer and identify controls and residual risks.

Skills to revise

  • Build and tune a retrieval pipeline

    For practice, ingest a small document set, create embeddings and an index, add metadata filtering and hybrid search, then compare retrieval results before and after tuning. These are explicit RAG pipeline responsibilities.

  • Implement an AI service interface

    For practice, create a small endpoint with FastAPI, Flask, or Node.js that accepts a query and returns a structured output. Record a prompt-template version and model configuration; the posting calls for API development and managing these settings across environments.

  • Create an evaluation regression suite

    For practice, assemble a small question-and-answer benchmark, run repeatable checks after a retrieval or prompt change, and flag cases for human review. Automated evaluation and regression testing are explicit requirements.

  • Instrument and optimize requests

    For practice, add request logging and tracing with OpenTelemetry or CloudWatch, track the metrics named in the posting, and compare results before and after a caching or asynchronous-workflow change. This reflects the stated observability and performance work.

  • Test security boundaries

    For practice, place a prompt-injection attempt in a retrieved document, test whether the service follows it or exposes restricted data, and document a mitigation and retest. This exercises the posting’s AI security requirements.

  • Run a production debugging drill

    As preparation, simulate an increase in errors or latency, use logs and traces to narrow the cause, and write a brief mitigation and follow-up test. The role explicitly includes monitoring, incident response, debugging, and production support.

04

Your preparation checklist

  • Build a requirements evidence sheet

    The posting asks for 3+ years building production systems including AI/ML applications, a bachelor’s degree, and ability to obtain TS/SCI clearance. List accurate, specific evidence for each requirement and note anything you need to clarify with the employer.

  • Prepare a RAG project walkthrough

    The role covers ingestion, chunking, embeddings, indexing, metadata filtering, hybrid search, and retrieval tuning. Prepare one architecture diagram and a concise account of your design choices, measured results, and tradeoffs from work you can discuss.

  • Practice a production AI design exercise

    Sketch an API-backed RAG service using relevant AWS components and a framework or custom pipeline you know. Explain prompt and model configuration, structured outputs, access controls, deployment, and where agent orchestration would or would not help.

  • Draft an evaluation plan

    The posting calls for benchmark datasets, LLM-as-a-judge methods, regression tests, and human evaluation. Prepare a sample test matrix showing what each method measures, how failures are reviewed, and how changes are compared before release.

  • Work through a security scenario

    Prepare a threat-and-mitigation table for prompt injection, jailbreaks, and data leakage in a retrieval workflow. Distinguish controls you have used from proposed controls, and explain how you would test them.

  • Rehearse an operations and performance example

    Use a real example, if available, to explain logging and tracing, latency and token metrics, caching or async optimization, and incident debugging. Bring a brief before-and-after account with actual measurements rather than estimated gains.

  • Write targeted questions for the interview

    Ask how this team measures RAG quality, handles production incidents, and sets security constraints for federal work; clarify hybrid facility expectations and clearance requirements. The posting prohibits AI-assisted interview responses unless explicitly permitted, so prepare to answer in your own words.

AI-generated from the job information · Prepared Sep 30, 2026 (UTC)Useful preparation, not a guarantee of eligibility or an offer.

Availability last checked: Sep 30, 2026. Status can change after a check; confirm on the employer’s website. Report an issue · Our checking policy

KEEP EXPLORING

Similar AI jobs

Related skills and specializations in United States. Matched to this role, not your profile.

Explore more jobs
Finding similar opportunities…