Remote Governance Engineer II: API & AI Security

CSAA; Alabama; Remote; USD 56,000 - 76,000; Full time

Benefits offered by this job

Annual bonus

401(k) match

Job summary

CSAA Insurance Group is actively hiring a Governance Engineer II - Remote to translate enterprise API, data, security, and responsible AI policies into automated governance solutions. You will develop governance-as-code, reusable standards, and automated guardrails enabling secure API access and responsible AI use.

The role collaborates with architecture, security, risk, data, and engineering teams to strengthen API security, automate compliance, improve lifecycle management, and create

Qualifications

• 2+ years of experience in software engineering, API development, systems integration, platform engineering, DevSecOps, or a related technical field.
• Demonstrated experience with designing, developing, testing, and supporting REST APIs and integrations, including OpenAPI/Swagger specifications, API testing, and lifecycle management.
• Experience implementing engineering controls within CI/CD pipelines, including automated testing, API validation, contract testing, security scanning, or other governance-as-code practices.
• Working knowledge of API security concepts, including OAuth, authentication, authorization, access controls, and secure API design principles.
• Experience with modern API lifecycle and governance tools such as Postman, SwaggerHub, API catalogs, developer portals, API gateways, or similar platforms.
• Familiarity with AI-assisted engineering, agentic AI concepts, and the application of governance controls, traceability, approvals, and monitoring.
• Strong scripting or programming skills and the ability to translate governance, security, and compliance requirements into practical engineering solutions and automation.
• Strong analytical, communication, collaboration, and problem-solving skills.

Responsibilities

• Translate enterprise policies into implementable standards, controls, templates, and reusable patterns.
• Promote consistent API design, data definitions, schemas, metadata, error models, and access patterns.
• Maintain governance artifacts, including standards, reference implementations, reusable components, and technical guidance.
• Track compliance, exceptions, adoption, and remediation across engineering teams.
• Establish engineering guardrails for how AI agents discover, access, and invoke APIs, tools, and enterprise data.
• Implement controls for agent identity, authentication, authorization, least-privilege access, approvals, and human oversight.
• Define technical practices for agent evaluations, tool-use validation, traceability, auditability, and monitoring.
• Review agent workflows and AI-generated artifacts for security, quality, compliance, and alignment with approved policies.
• Partner with security, architecture, data, and responsible AI teams to operationalize enterprise policy without independently setting that policy.
• Support safe adoption of AI-assisted development tools and agentic capabilities across engineering teams.
• Onboard APIs to enterprise catalogs, repositories, developer portals, and governance platforms.
• Maintain API inventory, ownership, dependencies, lifecycle status, and supporting documentation.
• Implement lifecycle controls for breaking changes, backward compatibility, versioning, and retirement.
• Monitor API usage, health, security, compliance, and adoption metrics.
• Integrate API and agent governance controls into CI/CD pipelines and development workflows.
• Build or configure API linting, contract testing, security scanning, policy validation, and compliance checks.
• Develop scripts, reusable pipeline components, and governance-as-code solutions to reduce manual review.
• Support API catalogs, developer portals, Postman workspaces, governance repositories, and reporting capabilities.
• Create self-service templates, documentation, training materials, and onboarding guidance.
• Partner with development teams to resolve findings and drive adoption of governance standards and tools.

Skills

API governance

Security concepts

CI/CD controls

Scripting skills

OpenAPI/Swagger

Tools

Postman

SwaggerHub

API gateways

Job description

CSAA Insurance Group is actively hiring a Governance Engineer II - Remote to translate enterprise API, data, security, and responsible AI policies into automated governance solutions. You will develop governance-as-code, reusable standards, and automated guardrails enabling secure API access and responsible AI use.

The role collaborates with architecture, security, risk, data, and engineering teams to strengthen API security, automate compliance, improve lifecycle management, and create