Governance Engineer II - Remote API & AI Security

CSAA; Washington; Remote; USD 56,000 - 76,000; Full time

Benefits offered by this job

Annual bonus eligibility

401(k) with company match

Flexible workplace (remote-first)

Job summary

CSAA Insurance Group is seeking a Governance Engineer II - Remote to turn enterprise API, data, security, and responsible AI policies into practical, automated engineering solutions. You will develop governance-as-code, reusable standards, and guardrails enabling secure API and AI access across data, tools, and MCP resources.

You will collaborate with architecture, security, risk, data, and engineering teams to automate compliance, improve lifecycle management, and build self-service governance

Qualifications

• 2+ years in software engineering or API development.
• Experience with REST APIs, OpenAPI/Swagger, and lifecycle management.
• Familiarity with CI/CD pipelines and governance-as-code.

Responsibilities

• Review API specifications for alignment with REST, security, and data standards.
• Translate policies into standards, controls, templates, and reusable patterns.
• Promote consistent API design, data definitions, schemas, and access patterns.
• Maintain governance artifacts and reference implementations.
• Track compliance and remediation across teams.
• Establish guardrails for AI agents discovering and accessing APIs and data.
• Define identity, authentication, and least-privilege controls for agents.
• Monitor and audit AI-generated artifacts for security and compliance.
• Collaborate with security, architecture, data and responsible AI teams.

Skills

REST APIs

OpenAPI/Swagger

API lifecycle

Scripting

CI/CD pipelines

Tools

Postman

SwaggerHub

API catalogs

Developer portals

API gateways

Job description

CSAA Insurance Group is seeking a Governance Engineer II - Remote to turn enterprise API, data, security, and responsible AI policies into practical, automated engineering solutions. You will develop governance-as-code, reusable standards, and guardrails enabling secure API and AI access across data, tools, and MCP resources.

You will collaborate with architecture, security, risk, data, and engineering teams to automate compliance, improve lifecycle management, and build self-service governance