Governance Engineer II

This is a fully remote position, open to applicants in Alabama, +41 more states.

📋 Description

• Assess API specifications and data contracts to ensure compliance with enterprise standards.

• Convert enterprise policies into actionable standards, controls, templates, and reusable patterns.

• Set up engineering guardrails for AI agents interacting with APIs, tools, and enterprise data.

• Enforce controls for agent identity, authentication, authorization, least-privilege access, approvals, and human oversight.

• Establish practices for agent evaluations, tool-use validation, traceability, auditability, and monitoring.

• Assist in API lifecycle activities, including design, review, publishing, versioning, deployment, monitoring, deprecation, and retirement.

• Manage API inventories, ownership, dependencies, lifecycle status, and documentation.

• Incorporate governance controls into CI/CD pipelines and development workflows.

• Develop or configure API linting, contract testing, security scanning, policy validation, and compliance checks.

• Create scripts, reusable pipeline components, and governance-as-code solutions.

• Produce self-service templates, documentation, training materials, and onboarding guidance.

• Collaborate with development, architecture, security, risk, data, and responsible AI teams.

• Travel as necessary for divisional, team, and other in-person meetings.

⛳️ Requirements

• A minimum of 2 years of experience in software engineering, API development, systems integration, platform engineering, DevSecOps, or a related technical field.

• Proven experience in designing, developing, testing, and supporting REST APIs and integrations.

• Familiarity with OpenAPI/Swagger specifications, API testing, and lifecycle management.

• Experience in implementing engineering controls within CI/CD pipelines.

• Working knowledge of OAuth, authentication, authorization, access controls, and secure API design principles.

• Proficient with Postman, SwaggerHub, API catalogs, developer portals, API gateways, or similar platforms.

• Understanding of AI-assisted engineering and agentic AI concepts.

• Strong scripting or programming abilities.

• Excellent analytical, communication, collaboration, and problem-solving skills.

• Knowledge of OWASP API Security Top 10, secure software development, and cloud-native architectures is preferred.

• Experience with microservices, event-driven architectures, enterprise integration patterns, and platform engineering practices is advantageous.

• Background in the insurance industry is a plus.

• Must be authorized to work indefinitely in the United States.

• Must not require immigration support or visa sponsorship.

🏝️ Benefits

• Eligibility for annual bonuses for most roles.

• 401(k) with a company match.

• Opportunities for career growth and development.

• Remote-first, flexible workplace.

• Ability to work from various locations, including CSAA offices.

• Reasonable accommodations for qualified applicants and employees with disabilities.