Governance Engineer II - Remote

External candidates: In order for your application to be correctly processed please sign-in before you apply Internal candidates: Please go to Workday and click "Find Jobs" link under Career Thank you for considering opportunities with us! Job Title Governance Engineer II - Remote Requisition Number R7942 Governance Engineer II - Remote (Open) Location Arizona - Home Teleworkers Additional Locations Alabama - Home Teleworkers, Alabama - Home Teleworkers, Arkansas - Home Teleworkers, California - Home Teleworkers, Colorado - Home Teleworkers, Connecticut - Home Teleworkers, Delaware - Home Teleworker, District of Columbia - Home Teleworkers, Florida - Home Teleworkers, Georgia - Home Teleworkers, Idaho - Home Teleworkers, Illinois - Home Teleworkers, Indiana - Home Teleworkers, Iowa - Home Teleworkers, Kansas - Home Teleworker, Kentucky - Home Teleworkers, Louisiana - Home Teleworkers, Maine Home Teleworkers, Maryland - Home Teleworkers, Massachusetts - Home Teleworkers, Michigan - Home Teleworkers, Minnesota - Home Teleworkers, Mississippi - Home Teleworker, Missouri - Home Teleworker, Montana - Home Teleworkers {+ 21 more} Job Information CSAA Insurance Group (CSAA IG), a AAA insurer, is one of the leading personal lines property and casualty insurance groups in the United States. Here, every employee shapes our mission. We build innovative, human-centered solutions that help AAA members prevent, prepare for, and recover from life's uncertainties. You will join a collaborative, inclusive culture where your strengths have room to grow and your ideas can drive real impact. Step into a role where you can contribute to our shared success through meaningful work. We are actively hiring for a Governance Engineer II - Remote Your Role: The Governance Engineer will play a hands-on role in turning enterprise API, data, security, and responsible AI policies into practical, automated engineering solutions. This position will develop governance-as-code, reusable standards, and automated guardrails that enable APIs and emerging AI agents to securely access enterprise data, tools, and MCP resources. Working closely with architecture, security, risk, data, and engineering teams, the Governance Engineer will strengthen API and AI security, automate compliance and approval processes, improve lifecycle management and monitoring, and create self-service solutions that make governance easier to follow while enabling teams to innovate responsibly. Your Work: API Governance Standards • Review API specifications and data contracts for alignment with enterprise REST, security, and data standards. • Translate enterprise policies into implementable standards, controls, templates, and reusable patterns. • Promote consistent API design, data definitions, schemas, metadata, error models, and access patterns. • Maintain governance artifacts, including standards, reference implementations, reusable components, and technical guidance. • Track compliance, exceptions, adoption, and remediation across engineering teams. • Agentic AI Governance & Responsible AI • Establish engineering guardrails for how AI agents discover, access, and invoke APIs, tools, and enterprise data. • Implement controls for agent identity, authentication, authorization, least-privilege access, approvals, and human oversight. • Define technical practices for agent evaluations, tool-use validation, traceability, auditability, and monitoring. • Review agent workflows and AI-generated artifacts for security, quality, compliance, and alignment with approved policies. • Partner with security, architecture, data, and responsible AI teams to operationalize enterprise policy without independently setting that policy. • Support safe adoption of AI-assisted development tools and agentic capabilities across engineering teams. Agentic AI Governance & Responsible AI • Establish engineering guardrails for how AI agents discover, access, and invoke APIs, tools, and enterprise data. • Implement controls for agent identity, authentication, authorization, least-privilege access, approvals, and human oversight. • Define technical practices for agent evaluations, tool-use validation, traceability, auditability, and monitoring. • Review agent workflows and AI-generated artifacts for security, quality, compliance, and alignment with approved policies. • Partner with security, architecture, data, and responsible AI teams to operationalize enterprise policy without independently setting that policy. • Support safe adoption of AI-assisted development tools and agentic capabilities across engineering teams. API Lifecycle Management • Support API lifecycle activities, including design, review, publishing, versioning, deployment, monitoring, deprecation, and retirement. • Onboard APIs to enterprise catalogs, repositories, developer portals, and governance platforms. • Maintain API inventory, ownership, dependencies, lifecycle status, and supporting documentation. • Implement lifecycle controls for breaking changes, backward compatibility, versioning, and retirement. • Monitor API usage, health, security, compliance, and adoption metrics. • Automation, Platform Enablement & Developer Adoption • Integrate API and agent governance controls into CI/CD pipelines and development workflows. • Build or configure API linting, contract testing, security scanning, policy validation, and compliance checks. • Develop scripts, reusable pipeline components, and governance-as-code solutions to reduce manual review. • Support API catalogs, developer portals, Postman workspaces, governance repositories, and reporting capabilities. • Create self-service templates, documentation, training materials, and onboarding guidance. • Partner with development teams to resolve findings and drive adoption of governance standards and tools. Automation, Platform Enablement & Developer Adoption • Integrate API and agent governance controls into CI/CD pipelines and development workflows. • Build or co