Remote Governance Engineer II — API & AI Security

CSAA; Town of Texas (WI); Remote; USD 85,000 - 114,000; Full time

Benefits offered by this job

Remote-first

401(k) with company match

Annual bonus eligibility

Job summary

CSAA Insurance Group is seeking a Governance Engineer II - Remote to translate enterprise API, data, security, and Responsible AI policies into practical, automated governance solutions. You will build governance-as-code, guardrails, and reusable components enabling secure access to APIs, data, and MCP resources across teams.

Collaborate with architecture, security, risk, data, and engineering to strengthen API and AI security, automate compliance, and streamline lifecycle management while

Qualifications

• Experience designing, developing, testing, and supporting REST APIs and integrations (OpenAPI/Swagger).
• Experience implementing controls within CI/CD pipelines and governance-as-code practices.
• Knowledge of API security concepts (OAuth, authentication, authorization).
• Ability to translate governance, policy, and compliance requirements into automation and tooling.

Responsibilities

• Turn enterprise policies into standards, templates, and reusable components.
• Develop governance-as-code and automated guardrails for API and AI access.
• Collaborate with security, architecture, data, and engineering teams to operationalize policies.
• Establish lifecycle management and monitoring for APIs and AI-enabled tools.

Skills

REST APIs

OpenAPI/Swagger

CI/CD pipelines

Security controls

Automation

Scripting

Tools

Postman

SwaggerHub

API catalogs

Job description

CSAA Insurance Group is seeking a Governance Engineer II - Remote to translate enterprise API, data, security, and Responsible AI policies into practical, automated governance solutions. You will build governance-as-code, guardrails, and reusable components enabling secure access to APIs, data, and MCP resources across teams.

Collaborate with architecture, security, risk, data, and engineering to strengthen API and AI security, automate compliance, and streamline lifecycle management while