Remote Governance Engineer II: API & AI Security

CSAA Insurance Group; Philadelphia (Philadelphia County); Remote; USD 57,000 - 75,000; Full time

Benefits offered by this job

Flexible Workplace

Remote-friendly

401(k) match

Annual bonus eligibility

Career growth opportunities

Job summary

CSAA Insurance Group is hiring a Governance Engineer II - Remote to implement governance-as-code for APIs, data, security, and responsible AI. You will build reusable standards, guardrails, and automated processes enabling secure enterprise access to data and MCP resources.

You will work with architecture, security, risk, data, and engineering teams to automate compliance, lifecycle management, and self-service governance while allowing teams to innovate responsibly.

Qualifications

• 2+ years of software engineering, API development, or related field.
• Experience turning policies into implementable governance artifacts.
• Familiarity with REST, OpenAPI, and API lifecycle management.
• Experience with CI/CD pipelines and governance-as-code practices.
• Understanding of API security concepts and least-privilege access.
• Knowledge of AI governance concepts and responsible AI practices.

Responsibilities

• Define API governance standards and reusable patterns.
• Translate enterprise policies into actual governance artifacts.
• Automate guardrails for secure API and AI agent access.
• Monitor lifecycle, compliance, and adoption across teams.
• Collaborate with security, data, and engineering groups to operationalize policy.

Skills

API governance

OpenAPI/Swagger

CI/CD governance

OAuth/security

Postman/SwaggerHub

AI governance

Tools

Postman

SwaggerHub

API gateways

Job description

CSAA Insurance Group is hiring a Governance Engineer II - Remote to implement governance-as-code for APIs, data, security, and responsible AI. You will build reusable standards, guardrails, and automated processes enabling secure enterprise access to data and MCP resources.

You will work with architecture, security, risk, data, and engineering teams to automate compliance, lifecycle management, and self-service governance while allowing teams to innovate responsibly.