Remote Governance Engineer II: API & AI Security

CSAA; Maine; Remote; USD 56,000 - 76,000; Full time

Benefits offered by this job

Annual bonus (7% of eligible pay)

Remote-first / Flexible workplace

Job summary

CSAA Insurance Group is seeking a Governance Engineer II to turn enterprise API, data, security, and responsible AI policies into practical, automated solutions. You will develop governance-as-code, reusable standards, and guardrails enabling secure access to enterprise data and tools, collaborating with security, data, and engineering teams.

The role emphasizes API governance, lifecycle management, and agentic AI governance to support secure, compliant, and scalable AI-enabled development

Qualifications

• 2+ years of experience in software engineering, API development, or related field.
• Experience designing, developing, testing, and supporting REST APIs and integrations, including OpenAPI/Swagger specifications, API testing, and lifecycle management.
• Experience implementing governance controls within CI/CD pipelines and automation tooling.
• Knowledge of API security concepts (OAuth, authentication, authorization, access controls).

Responsibilities

• Translate policies into implementable governance standards, controls, templates, and reusable components.
• Maintain governance artifacts including standards and reference implementations.
• Review agent workflows and AI-generated artifacts for security, quality, and compliance.
• Partner with security, architecture, data, and responsible AI teams to operationalize enterprise policy.
• Develop scripts and governance-as-code solutions to automate reviews and compliance checks.

Skills

REST APIs

OpenAPI/Swagger

CI/CD pipelines

Security scanning

Governance-as-code

Scripting

Tools

Postman

SwaggerHub

API catalogs

Developer portals

Job description

CSAA Insurance Group is seeking a Governance Engineer II to turn enterprise API, data, security, and responsible AI policies into practical, automated solutions. You will develop governance-as-code, reusable standards, and guardrails enabling secure access to enterprise data and tools, collaborating with security, data, and engineering teams.

The role emphasizes API governance, lifecycle management, and agentic AI governance to support secure, compliant, and scalable AI-enabled development