Remote Governance Engineer II — API & AI Guardrails

CSAA Insurance Group; Wisconsin; Remote; USD 56,000 - 76,000; Full time

Benefits offered by this job

Annual bonus eligibility

401(k) with company match

Remote-first culture

Flexible workplace

Job summary

CSAA Insurance Group is seeking a Governance Engineer II - Remote to translate enterprise API, data, security, and responsible AI policies into practical, automated governance solutions.

You will develop governance-as-code, reusable standards, and automated guardrails that enable secure access to enterprise data, tools, and MCP resources, collaborating with architecture, security, risk, data, and engineering teams.

Qualifications

• 2+ years of experience in software engineering, API development, systems integration, platform engineering, DevSecOps, or a related technical field.
• Experience with designing, developing, testing, and supporting REST APIs and integrations, including OpenAPI/Swagger specifications, API testing, and lifecycle management.
• Experience implementing engineering controls within CI/CD pipelines, including automated testing, API validation, contract testing, security scanning, or other governance-as-code practices.
• Working knowledge of API security concepts, including OAuth, authentication, authorization, access controls, and secure API design principles.
• Experience with modern API lifecycle and governance tools such as Postman, SwaggerHub, API catalogs, developer portals, API gateways, or similar platforms.
• Familiarity with AI-assisted engineering, agentic AI concepts, and the application of governance controls, traceability, approvals, and monitoring for AI-enabled solutions.
• Strong scripting or programming skills and the ability to translate governance, security, and compliance requirements into practical engineering solutions and automation.
• Strong analytical, communication, collaboration, and problem-solving skills.

Responsibilities

• Review API specifications and data contracts for alignment with enterprise REST, security, and data standards.
• Translate enterprise policies into implementable standards, controls, templates, and reusable patterns.
• Promote consistent API design, data definitions, schemas, metadata, error models, and access patterns.
• Maintain governance artifacts, including standards, reference implementations, reusable components, and technical guidance.
• Track compliance, exceptions, adoption, and remediation across engineering teams.
• Establish engineering guardrails for how AI agents discover, access, and invoke APIs, tools, and enterprise data.
• Implement controls for agent identity, authentication, authorization, least-privilege access, approvals, and human oversight.
• Define technical practices for agent evaluations, tool-use validation, traceability, auditability, and monitoring.
• Review agent workflows and AI-generated artifacts for security, quality, compliance, and alignment with approved policies.
• Partner with security, architecture, data, and responsible AI teams to operationalize enterprise policy without independently setting that policy.
• Support safe adoption of AI-assisted development tools and agentic capabilities across engineering teams.

Job description

CSAA Insurance Group is seeking a Governance Engineer II - Remote to translate enterprise API, data, security, and responsible AI policies into practical, automated governance solutions.

You will develop governance-as-code, reusable standards, and automated guardrails that enable secure access to enterprise data, tools, and MCP resources, collaborating with architecture, security, risk, data, and engineering teams.