Remote Governance Engineer II: API & AI Security

CSAA Insurance Group; Illinois; Remote; USD 85,000 - 110,000; Full time

Job summary

CSAA Insurance Group is seeking a Governance Engineer II to implement governance-as-code for APIs, data, security, and responsible AI. This remote role supports enterprise policy across architecture, security, data, and engineering teams to enable secure innovation.

You will build guardrails, automate compliance, and provide self-service governance tooling. The position emphasizes collaboration with security and AI teams to translate policies into practical, scalable solutions while maintaining

Qualifications

• 2+ years of experience in software engineering, API development, systems integration, or related field.
• Experience designing and supporting REST APIs and OpenAPI/Swagger.
• Experience CI/CD pipelines with automated testing and security scanning.
• Knowledge of API security concepts (OAuth, authentication, access controls).
• Familiarity with governance tools like Postman, SwaggerHub, API catalogs.
• Strong scripting or programming skills to automate governance tasks.
• Excellent analytical and collaborative problem-solving.

Responsibilities

• Translate enterprise policies into implementable governance standards and reusable patterns.
• Maintain governance artifacts, references, and guidance.
• Onboard APIs to enterprise catalogs and governance platforms.
• Monitor API usage, security, compliance, and adoption metrics.
• Develop self-service templates and automation to empower teams.
• Collaborate with security, architecture, data, and responsible AI teams.
• Support safe adoption of AI-assisted development tools.

Skills

REST APIs

OpenAPI/Swagger

CI/CD pipelines

Governance-as-code

Security scanning

Policy validation

Postman

Tools

SwaggerHub

API catalogs

Developer portals

API gateways

Postman

Job description

CSAA Insurance Group is seeking a Governance Engineer II to implement governance-as-code for APIs, data, security, and responsible AI. This remote role supports enterprise policy across architecture, security, data, and engineering teams to enable secure innovation.

You will build guardrails, automate compliance, and provide self-service governance tooling. The position emphasizes collaboration with security and AI teams to translate policies into practical, scalable solutions while maintaining