Remote Governance Engineer II: API & AI Security

CSAA; North Carolina; Teletrabalho; USD 117 785 000 - 157 046 000; Tempo integral

Resumo da oferta

CSAA Insurance Group is seeking a Governance Engineer II - Remote to transform enterprise API, data, security, and responsible AI policies into practical, automated governance solutions. You’ll build governance-as-code, reusable standards, and guardrails enabling secure API and AI access across the organization.

You will work with architecture, security, risk, data, and engineering teams to automate compliance, improve lifecycle management, and empower teams to innovate responsibly while

Qualificações

• 2+ years of experience in software engineering, API development, or related field.
• Experience with designing REST APIs and OpenAPI specifications.
• Experience implementing CI/CD pipelines with automated testing and security scanning.
• Knowledge of API security concepts (OAuth, authentication, authorization).
• Familiarity with governance tools such as Postman and SwaggerHub.

Responsabilidades

• Translate enterprise policies into implementable governance standards, controls, templates, and reusable patterns.
• Review API specs for alignment with REST, security, and data standards.
• Define engineering guardrails for AI agents to securely discover, access, and invoke APIs and data.
• Collaborate with security, architecture, data, and responsible AI teams to operationalize policy without overreach.
• Automate governance checks and lifecycle management within CI/CD pipelines.

Conhecimentos

REST APIs

OpenAPI/Swagger

CI/CD pipelines

Security concepts

Ferramentas

Postman

SwaggerHub

API gateways

Descrição da oferta de emprego

CSAA Insurance Group is seeking a Governance Engineer II - Remote to transform enterprise API, data, security, and responsible AI policies into practical, automated governance solutions. You’ll build governance-as-code, reusable standards, and guardrails enabling secure API and AI access across the organization.

You will work with architecture, security, risk, data, and engineering teams to automate compliance, improve lifecycle management, and empower teams to innovate responsibly while