Governance Engineer II - Remote

CSAA Insurance Group, a AAA Insurer•Washington, NV

8d•$85,410 - $113,900•Remote

About The Position

CSAA Insurance Group is hiring a remote Governance Engineer II to turn enterprise API, data, security, and responsible AI policies into practical, automated engineering solutions. The role develops governance-as-code, reusable standards, and automated guardrails so APIs and AI agents can securely access enterprise data, tools, and MCP resources. It partners with architecture, security, risk, data, and engineering teams to strengthen security, automate compliance and approvals, improve lifecycle management and monitoring, and provide self-service governance capabilities. The engineer supports API standards and lifecycle management, including specification and data-contract reviews, API catalog onboarding, versioning, monitoring, and retirement. The role also establishes engineering controls for AI agents, including identity and access controls, approvals, human oversight, evaluations, traceability, auditability, and monitoring. Governance controls are integrated into CI/CD pipelines and development workflows through automation, testing, scanning, policy validation, documentation, templates, and developer enablement. This is a remote role available in the United States except Hawaii and Alaska. The role may require travel for divisional, team, and other in-person meetings. Compensation varies by location; the posted starting range across hiring states is $41.07–$54.76 per hour, and the position is eligible for an annual discretionary bonus of up to 7% of eligible pay. The Colorado-specific range is $85,410–$104,350 per year.

Requirements

At least 2 years of experience in software engineering, API development, systems integration, platform engineering, DevSecOps, or a related technical field.
Demonstrated experience designing, developing, testing, and supporting REST APIs and integrations, including OpenAPI/Swagger specifications, API testing, and lifecycle management.
Experience implementing engineering controls within CI/CD pipelines, such as automated testing, API validation, contract testing, security scanning, or governance-as-code practices.
Working knowledge of API security concepts, including OAuth, authentication, authorization, access controls, and secure API design principles.
Experience with API lifecycle and governance tools such as Postman, SwaggerHub, API catalogs, developer portals, API gateways, or similar platforms.
Familiarity with AI-assisted engineering, agentic AI concepts, and governance controls, traceability, approvals, and monitoring for AI-enabled solutions.
Strong scripting or programming skills and ability to translate governance, security, and compliance requirements into practical engineering solutions and automation.
Strong analytical, communication, collaboration, and problem-solving skills.
Must have authorization to work indefinitely in the United States; the employer does not provide visa sponsorship.

Nice To Haves

Experience implementing governance-as-code, policy-as-code, reusable pipeline controls, or automated compliance and quality checks.
Knowledge of API security best practices, OWASP API Security Top 10, secure software development, and cloud-native architectures.
Experience with microservices, event-driven architectures, enterprise integration patterns, and platform engineering practices.
Experience building governance, compliance, operational, or adoption metrics and dashboards.
Insurance industry experience.
Participation in employee resource groups, volunteering, or other contributions to company culture.
Comfort with video calls when useful for onboarding and relationship-building.

Responsibilities

Review API specifications and data contracts for alignment with enterprise REST, security, and data standards.
Translate enterprise policies into implementable standards, controls, templates, and reusable patterns.
Promote consistent API design, data definitions, schemas, metadata, error models, and access patterns.
Maintain governance standards, reference implementations, reusable components, and technical guidance.
Track governance compliance, exceptions, adoption, and remediation across engineering teams.
Establish engineering guardrails for how AI agents discover, access, and invoke APIs, tools, and enterprise data.
Implement controls for agent identity, authentication, authorization, least-privilege access, approvals, and human oversight.
Define technical practices for agent evaluations, tool-use validation, traceability, auditability, and monitoring.
Review agent workflows and AI-generated artifacts for security, quality, compliance, and alignment with approved policies.
Partner with security, architecture, data, and responsible AI teams to operationalize enterprise policy.
Support safe adoption of AI-assisted development tools and agentic capabilities across engineering teams.
Support API lifecycle activities, including design, review, publishing, versioning, deployment, monitoring, deprecation, and retirement.
Onboard APIs to enterprise catalogs, repositories, developer portals, and governance platforms.
Maintain API inventory, ownership, dependencies, lifecycle status, and supporting documentation.
Implement lifecycle controls for breaking changes, backward compatibility, versioning, and retirement.
Monitor API usage, health, security, compliance, and adoption metrics.
Integrate API and agent governance controls into CI/CD pipelines and development workflows.
Build or configure API linting, contract testing, security scanning, policy validation, and compliance checks.
Develop scripts, reusable pipeline components, and governance-as-code solutions to reduce manual review.
Support API catalogs, developer portals, Postman workspaces, governance repositories, and reporting capabilities.
Create self-service templates, documentation, training materials, and onboarding guidance.
Partner with development teams to resolve findings and drive adoption of governance standards and tools.
Contribute to increased automation, faster and more consistent governance reviews, improved lifecycle visibility, stronger API and AI-agent security, earlier identification of quality and compliance issues, broader adoption of reusable standards, and measurable improvements in compliance and developer experience.
Travel as needed for divisional, team, and other in-person meetings.
Meet business needs, which may include investing extra time and helping other teams.

Benefits

Total compensation package
Annual bonus eligibility for most roles; this role offers eligibility for an annual discretionary bonus of up to 7% of eligible pay
401(k) with company match
Career growth and development opportunities
Remote-first flexible workplace

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume