Remote Governance Engineer II: API & AI Security

CSAA; Colorado; Remote; USD 120,000 - 160,000; Full time

Job summary

CSAA Insurance Group is hiring a Governance Engineer II for remote work across the United States (excluding Hawaii and Alaska). You will turn enterprise policies into governance-as-code, develop guardrails for APIs and AI agents, and collaborate with security, data, and architecture teams to automate compliance and enable safe innovation.

You will establish standards, templates, and reusable patterns, while maintaining artifacts and monitoring governance across engineering teams.

Qualifications

• 2+ years of experience in software engineering, API development, systems integration, or related tech field.
• Experience designing, developing, testing, and supporting REST APIs and integrations, incl. OpenAPI/Swagger.
• Experience implementing engineering controls within CI/CD pipelines, incl. automated testing & security checks.
• Knowledge of API security concepts (OAuth, authentication, authorization, access controls).
• Experience with governance tools like Postman, SwaggerHub, API catalogs & developer portals.
• Familiarity with AI-assisted engineering, agentic AI concepts and governance controls.
• Strong scripting or programming skills; translate governance requirements into automation.
• Strong analytical, communication, collaboration, and problem-solving skills.

Responsibilities

• Review API specifications and data contracts for alignment with enterprise standards.
• Translate policies into standards, templates, and reusable patterns.
• Promote consistent API design, data definitions, schemas, and access patterns.
• Maintain governance artifacts and reference implementations.
• Track compliance, adoption, and remediation across teams.
• Establish guardrails for AI agents accessing APIs and data.
• Implement identity, authentication, authorization, least-privilege controls.
• Define practices for agent evaluations, tool-use validation, and monitoring.
• Review agent workflows for security, quality, and compliance.
• Partner with security, architecture, data, and Responsible AI teams.
• Support safe adoption of AI-assisted development tools.

Skills

API governance

OpenAPI/Swagger

CI/CD pipelines

Security concepts

OAuth / authn & authz

Scripting

AI governance concepts

Analytical skills

Communication skills

Tools

Postman

SwaggerHub

API gateways

Job description

CSAA Insurance Group is hiring a Governance Engineer II for remote work across the United States (excluding Hawaii and Alaska). You will turn enterprise policies into governance-as-code, develop guardrails for APIs and AI agents, and collaborate with security, data, and architecture teams to automate compliance and enable safe innovation.

You will establish standards, templates, and reusable patterns, while maintaining artifacts and monitoring governance across engineering teams.