Remote Governance Engineer II - API & AI Security

CSAA Insurance Group; Colorado; Remote; USD 85.000 - 104.000; Vollzeit

Benefits dieser Stelle

Remote-friendly

Annual bonus

Flexible workplace

Zusammenfassung

CSAA Insurance Group seeks a Governance Engineer II to advance API governance, data security, and responsible AI governance across enterprise systems. You will develop governance‑as‑code, reusable standards, and guardrails to enable secure access for APIs and AI agents, collaborating with architecture, security, and data teams.

In this remote role, you will drive policy implementation, lifecycle management, and self‑service governance while ensuring compliance and security across engineering

Qualifikationen

• 2+ years of experience in software engineering, API development, or related technical field.
• Experience designing, developing, testing, and supporting REST APIs and integrations, including OpenAPI/Swagger specifications.
• Experience implementing engineering controls within CI/CD pipelines, including automated testing, API validation, contract testing, security scanning, or other governance-as-code practices.
• Working knowledge of API security concepts, including OAuth, authentication, authorization, access controls, and secure API design principles.
• Experience with modern API lifecycle and governance tools such as Postman, SwaggerHub, API catalogs, developer portals, API gateways, or similar platforms.
• Familiarity with AI-assisted engineering, agentic AI concepts, and the application of governance controls, traceability, approvals, and monitoring for AI-enabled solutions.
• Strong scripting or programming skills and the ability to translate governance, security, and compliance requirements into practical engineering solutions and automation.
• Strong analytical, communication, collaboration, and problem-solving skills.

Aufgaben

• Review API specifications and data contracts for alignment with enterprise REST, security, and data standards.
• Translate enterprise policies into implementable standards, controls, templates, and reusable patterns.
• Promote consistent API design, data definitions, schemas, metadata, error models, and access patterns.
• Maintain governance artifacts, including standards, reference implementations, reusable components, and technical guidance.
• Track compliance, exceptions, adoption, and remediation across engineering teams.
• Establish engineering guardrails for how AI agents discover, access, and invoke APIs, tools, and enterprise data.
• Implement controls for agent identity, authentication, authorization, least-privilege access, approvals, and human oversight.
• Define technical practices for agent evaluations, tool-use validation, traceability, auditability, and monitoring.
• Review agent workflows and AI-generated artifacts for security, quality, compliance, and alignment with approved policies.
• Partner with security, architecture, data, and responsible AI teams to operationalize enterprise policy without independently setting that policy.
• Support safe adoption of AI-assisted development tools and agentic capabilities across engineering teams.

Kenntnisse

REST APIs

OpenAPI/Swagger

CI/CD automation

Scripting

API security

DevSecOps

Analytical skills

Communication

Collaboration

Problem-solving

Tools

Postman

SwaggerHub

API catalogs

Developer portals

API gateways

Jobbeschreibung

CSAA Insurance Group seeks a Governance Engineer II to advance API governance, data security, and responsible AI governance across enterprise systems. You will develop governance‑as‑code, reusable standards, and guardrails to enable secure access for APIs and AI agents, collaborating with architecture, security, and data teams.

In this remote role, you will drive policy implementation, lifecycle management, and self‑service governance while ensuring compliance and security across engineering