Remote Governance Engineer II — API & AI Security

CSAA Insurance Group; Charleston (WV); Remote; USD 57,000 - 63,000; Full time

Benefits offered by this job

Remote-first culture

Annual bonus eligibility

401(k) with company match

Job summary

CSAA Insurance Group seeks a Governance Engineer II to translate enterprise governance policies into practical, automated solutions for APIs, data, security, and responsible AI. This remote role collaborates across architecture, security, data, and engineering to implement guardrails, standards, and reusable components.

You will develop governance-as-code, automate compliance, and enable safer, scalable access to enterprise data and MCP resources while supporting AI-enabled development tools and

Qualifications

• Experience designing, developing, testing, and supporting REST APIs and integrations, including OpenAPI/Swagger specifications, API testing, and lifecycle management.
• Experience implementing engineering controls within CI/CD pipelines, including automated testing, API validation, contract testing, security scanning, or other governance-as-code practices.
• Strong scripting or programming skills and the ability to translate governance, security, and compliance requirements into practical engineering solutions and automation.

Responsibilities

• Review API specifications and data contracts for alignment with enterprise REST, security, and data standards.
• Translate enterprise policies into implementable standards, controls, templates, and reusable patterns.
• Promote consistent API design, data definitions, schemas, metadata, error models, and access patterns.
• Maintain governance artifacts, including standards, reference implementations, reusable components, and technical guidance.
• Track compliance, exceptions, adoption, and remediation across engineering teams.
• Establish engineering guardrails for how AI agents discover, access, and invoke APIs, tools, and enterprise data.
• Implement controls for agent identity, authentication, authorization, least-privilege access, approvals, and human oversight.
• Define technical practices for agent evaluations, tool-use validation, traceability, auditability, and monitoring.
• Review agent workflows and AI-generated artifacts for security, quality, compliance, and alignment with approved policies.
• Partner with security, architecture, data, and responsible AI teams to operationalize enterprise policy without independently setting that policy.
• Support safe adoption of AI-assisted development tools and agentic capabilities across engineering teams.
• Support API lifecycle activities, including design, review, publishing, versioning, deployment, monitoring, deprecation, and retirement.
• Onboard APIs to enterprise catalogs, repositories, developer portals, and governance platforms.
• Maintain API inventory, ownership, dependencies, lifecycle status, and supporting documentation.
• Implement lifecycle controls for breaking changes, backward compatibility, versioning, and retirement.
• Monitor API usage, health, security, compliance, and adoption metrics.
• Integrate API and agent governance controls into CI/CD pipelines and development workflows.
• Build or configure API linting, contract testing, security scanning, policy validation, and compliance checks.
• Develop scripts, reusable pipeline components, and governance-as-code solutions to reduce manual review.
• Support API catalogs, developer portals, Postman workspaces, governance repositories, and reporting capabilities.
• Create self-service templates, documentation, training materials, and onboarding guidance.
• Partner with development teams to resolve findings and drive adoption of governance standards and tools.

Skills

REST APIs

OpenAPI/Swagger

CI/CD pipelines

Security controls

Governance-as-code

Agentic AI

Scripting

Communication

Tools

Postman

SwaggerHub

API gateways

Job description

CSAA Insurance Group seeks a Governance Engineer II to translate enterprise governance policies into practical, automated solutions for APIs, data, security, and responsible AI. This remote role collaborates across architecture, security, data, and engineering to implement guardrails, standards, and reusable components.

You will develop governance-as-code, automate compliance, and enable safer, scalable access to enterprise data and MCP resources while supporting AI-enabled development tools and