Remote Governance Engineer II — API & AI Security

CSAA; Oklahoma; Remote; USD 117,847,000 - 130,748,000; Full time

Benefits offered by this job

Remote-first culture

Annual bonus eligibility

Flexible work arrangements

Job summary

CSAA Insurance Group is hiring a Governance Engineer II for a remote role. You will translate enterprise API, data, security, and responsible AI policies into practical automated solutions, building governance-as-code, reusable standards, and guardrails to securely access enterprise data and tools.

You will collaborate with security, architecture, data, and engineering teams to automate compliance, improve lifecycle management, and enable teams to innovate responsibly.

Qualifications

• 2+ years of software engineering, API development, or related field.
• Experience designing, developing, testing, and supporting REST APIs and OpenAPI/Swagger specifications.
• Experience with CI/CD pipelines and governance-as-code practices.
• Knowledge of API security concepts (OAuth, authentication, authorization, least-privilege).
• Familiarity with Postman, SwaggerHub, API catalogs and developer portals.

Responsibilities

• Review API specifications and data contracts for alignment with standards.
• Translate policies into implementable standards, controls, and templates.
• Maintain governance artifacts and reference implementations.
• Track compliance, adoption, and remediation across teams.
• Establish guardrails for AI agents and secure access patterns.
• Onboard APIs to enterprise catalogs and governance platforms.
• Integrate governance controls into CI/CD workflows.
• Create self-service templates and onboarding guidance.

Skills

API governance

Security controls

Governance-as-code

Automation

CI/CD pipelines

Responsible AI

Stakeholder collaboration

Tools

Postman

SwaggerHub

API gateways

Developer portals

Job description

CSAA Insurance Group is hiring a Governance Engineer II for a remote role. You will translate enterprise API, data, security, and responsible AI policies into practical automated solutions, building governance-as-code, reusable standards, and guardrails to securely access enterprise data and tools.

You will collaborate with security, architecture, data, and engineering teams to automate compliance, improve lifecycle management, and enable teams to innovate responsibly.