Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Governance Engineer II - Remote role.

Rezi rewrites your resume against CSAA Insurance Group, a AAA Insurer's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Governance Engineer II - Remote posting at CSAA Insurance Group, a AAA Insurer — free, in seconds.

About the Role

The Governance Engineer will play a hands-on role in turning enterprise API, data, security, and responsible AI policies into practical, automated engineering solutions. This position will develop governance-as-code, reusable standards, and automated guardrails that enable APIs and emerging AI agents to securely access enterprise data, tools, and MCP resources. Working closely with architecture, security, risk, data, and engineering teams, the Governance Engineer will strengthen API and AI security, automate compliance and approval processes, improve lifecycle management and monitoring, and create self-service solutions that make governance easier to follow while enabling teams to innovate responsibly.

Responsibilities

Review API specifications and data contracts for alignment with enterprise REST, security, and data standards.
Translate enterprise policies into implementable standards, controls, templates, and reusable patterns.
Promote consistent API design, data definitions, schemas, metadata, error models, and access patterns.
Maintain governance artifacts, including standards, reference implementations, reusable components, and technical guidance.
Track compliance, exceptions, adoption, and remediation across engineering teams.
Establish engineering guardrails for how AI agents discover, access, and invoke APIs, tools, and enterprise data.
Implement controls for agent identity, authentication, authorization, least-privilege access, approvals, and human oversight.
Define technical practices for agent evaluations, tool-use validation, traceability, auditability, and monitoring.
Review agent workflows and AI-generated artifacts for security, quality, compliance, and alignment with approved policies.
Partner with security, architecture, data, and responsible AI teams to operationalize enterprise policy without independently setting that policy.
Support safe adoption of AI-assisted development tools and agentic capabilities across engineering teams.
Support API lifecycle activities, including design, review, publishing, versioning, deployment, monitoring, deprecation, and retirement.
Onboard APIs to enterprise catalogs, repositories, developer portals, and governance platforms.
Maintain API inventory, ownership, dependencies, lifecycle status, and supporting documentation.
Implement lifecycle controls for breaking changes, backward compatibility, versioning, and retirement.
Monitor API usage, health, security, compliance, and adoption metrics.
Integrate API and agent governance controls into CI/CD pipelines and development workflows.
Build or configure API linting, contract testing, security scanning, policy validation, and compliance checks.
Develop scripts, reusable pipeline components, and governance-as-code solutions to reduce manual review.
Support API catalogs, developer portals, Postman workspaces, governance repositories, and reporting capabilities.
Create self-service templates, documentation, training materials, and onboarding guidance.
Partner with development teams to resolve findings and drive adoption of governance standards and tools.

Requirements

2 + years of experience in software engineering, API development, systems integration, platform engineering, DevSecOps, or a related technical field.
Demonstrated experience with designing, developing, testing, and supporting REST APIs and integrations, including OpenAPI/Swagger specifications, API testing, and lifecycle management.
Experience implementing engineering controls within CI/CD pipelines, including automated testing, API validation, contract testing, security scanning, or other governance-as-code practices.
Working knowledge of API security concepts, including OAuth, authentication, authorization, access controls, and secure API design principles.
Experience with modern API lifecycle and governance tools such as Postman, SwaggerHub, API catalogs, developer portals, API gateways, or similar platforms.
Familiarity with AI-assisted engineering, agentic AI concepts, and the application of governance controls, traceability, approvals, and monitoring for AI-enabled solutions.
Strong scripting or programming skills and the ability to translate governance, security, and compliance requirements into practical engineering solutions and automation.
Strong analytical, communication, collaboration, and problem-solving skills.
Experience implementing governance-as-code, policy-as-code, reusable pipeline controls, or automated compliance and quality checks.
Knowledge of API security best practices, OWASP API Security Top 10, secure software development, and cloud-native architectures.
Experience with microservices, event-driven architectures, enterprise integration patterns, and platform engineering practices.
Experience building governance, compliance, operational, or adoption metrics and dashboards.
Insurance industry experience is a plus.
Actively shapes our company culture (e.g., participating in employee resource groups, volunteering, etc.)
Lives into cultural norms (e.g., willing to have cameras when it matters: helping onboard new team members, building relationships, etc.)
Travels as needed for role, including divisional / team meetings and other in-person meetings
Fulfills business needs, which may include investing extra time, helping other teams, etc

Skills

REST APIs
OpenAPI/Swagger specifications
API testing
API lifecycle management
CI/CD pipelines
Automated testing
API validation
Contract testing
Security scanning
Governance-as-code
API security
OAuth
Authentication
Authorization
Access controls
Secure API design
Postman
SwaggerHub
API catalogs
Developer portals
API gateways
AI-assisted engineering
Agentic AI
Scripting
Programming
Microservices
Event-driven architectures
Enterprise integration patterns
Platform engineering

Location

Arizona - Home Teleworkers
Alabama - Home Teleworkers
Arkansas - Home Teleworkers
California - Home Teleworkers
Colorado - Home Teleworkers
Connecticut - Home Teleworkers
Delaware - Home Teleworker
District of Columbia - Home Teleworkers
Florida - Home Teleworkers
Georgia - Home Teleworkers
Idaho - Home Teleworkers
Illinois - Home Teleworkers
Indiana - Home Teleworkers
Iowa - Home Teleworkers
Kansas - Home Teleworker
Kentucky - Home Teleworkers
Louisiana - Home Teleworkers
Maine Home Teleworkers
Maryland - Home Teleworkers
Massachusetts - Home Teleworkers
Michigan - Home Teleworkers
Minnesota - Home Teleworkers
Mississippi - Home Teleworker
Missouri - Home Teleworker
Montana - Home Teleworkers
Remote (United States, excluding Hawaii and Alaska)

Work Type

Remote
Home Teleworkers

Experience Level

2+ years of experience

Salary/Compensations

$41.07-$54.76 per hour
$85,410.00 - $104,350.00 (Colorado Specific)
Up to 7% annual discretionary bonus

Benefits

Total compensation package
Annual bonus eligibility
401(k) with a company match

About the Company

CSAA Insurance Group (CSAA IG), a AAA insurer, is one of the leading personal lines property and casualty insurance groups in the United States.
We build innovative, human-centered solutions that help AAA members prevent, prepare for, and recover from life's uncertainties.
We are a mission-driven organization proudly committed to empowering our members, our employees, and our communities to thrive.
We believe in growth for everyone.
An inclusive and welcoming workplace is the cornerstone of our success.
As climate change leads to more frequent and severe weather events, we are taking bold action to build more resilient communities and reduce our environmental impact.

Equal Opportunity

CSAA Insurance Group is an equal opportunity employer.
CSAA is committed to providing reasonable accommodations to qualified applicants and employees with disabilities or other limitations.