Remote Governance Engineer II: API & AI Security

CSAA Insurance Group; Manchester (NH); Remote; USD 57,000 - 75,000; Full time

Benefits offered by this job

Flexible Workplace

Annual discretionary bonus

Job summary

CSAA Insurance Group is hiring a Governance Engineer II - Remote to turn enterprise API, data, security, and responsible AI policies into practical, automated governance. You will build governance-as-code, reusable standards, and automated guardrails to securely access enterprise data and MCP resources.

Collaborating with security, architecture, data, and engineering teams, you will strengthen API and AI security, automate compliance and approvals, and enable self-service governance while

Qualifications

• 2+ years in software eng, API dev, or related technical field.
• Experience with REST APIs and OpenAPI specs.
• Experience implementing governance in CI/CD pipelines.
• Knowledge of API security concepts (OAuth, authz).
• Experience with lifecycle tools like Postman, SwaggerHub, API catalogs.

Responsibilities

• Review API specs and data contracts for alignment with standards.
• Translate policies into standards, templates, and reusable patterns.
• Promote consistent API design, data definitions, and access patterns.
• Maintain governance artifacts and guidance.
• Track compliance and remediation across teams.
• Establish guardrails for AI governance and agent access.
• Define practices for monitoring, traceability, and auditability.
• Onboard APIs to enterprise catalogs and governance platforms.

Skills

API governance

OpenAPI/Swagger

CI/CD pipelines

Security controls

Scripting

Communication skills

Team collaboration

Tools

Postman

SwaggerHub

API catalogs

Job description

CSAA Insurance Group is hiring a Governance Engineer II - Remote to turn enterprise API, data, security, and responsible AI policies into practical, automated governance. You will build governance-as-code, reusable standards, and automated guardrails to securely access enterprise data and MCP resources.

Collaborating with security, architecture, data, and engineering teams, you will strengthen API and AI security, automate compliance and approvals, and enable self-service governance while