Remote Governance Engineer II: API & AI Security

CSAA Insurance Group; Oklahoma City (OK); Remote; USD 57,000 - 75,000; Full time

Benefits offered by this job

Annual bonus eligibility

401(k) with company match

Remote-first culture

Job summary

CSAA Insurance Group is seeking a Governance Engineer II to remotely implement governance for APIs and AI agents. You will build governance-as-code, automate guardrails, and collaborate with security, data, and development teams to enable secure data access and responsible AI usage.

Responsibilities include defining standards, automating compliance, and integrating governance controls into CI/CD pipelines, while advancing API lifecycle management and developer adoption.

Qualifications

• 2+ years of experience in software engineering, API development, or related field.
• Experience designing, developing, testing, and supporting REST APIs and integrations (OpenAPI/Swagger).
• Experience implementing governance controls within CI/CD pipelines (testing, API validation, security scanning).
• Familiarity with API security concepts (OAuth, authentication, authorization, least-privilege).
• Experience with governance tools like Postman, SwaggerHub, API catalogs, and developer portals.

Responsibilities

• Translate policies into implementable API/governance standards and reusable patterns.
• Develop governance-as-code and automated guardrails for APIs and AI agents.
• Support API lifecycle activities: design, publishing, versioning, deployment and retirement.
• Implement tooling for linting, contract testing, security checks, and policy validation.
• Collaborate with security, architecture, data, and responsible AI teams to operationalize policy.

Skills

REST APIs

OpenAPI/Swagger

CI/CD pipelines

Security concepts

Agentic AI concepts

Scripting

Tools

Postman

SwaggerHub

API gateways

Job description

CSAA Insurance Group is seeking a Governance Engineer II to remotely implement governance for APIs and AI agents. You will build governance-as-code, automate guardrails, and collaborate with security, data, and development teams to enable secure data access and responsible AI usage.

Responsibilities include defining standards, automating compliance, and integrating governance controls into CI/CD pipelines, while advancing API lifecycle management and developer adoption.