> Markdown version of [/jobs/ext/4364680-software-engineer-ai-governance](https://www.wearedevelopers.com/jobs/ext/4364680-software-engineer-ai-governance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Software Engineer, AI Governance

- **Company:** Retool, Inc.
- **Location:** San Francisco, CA, United States
- **Experience:** Experienced
- **Salary:** $163,800.0 - $306,000.0
- **Contract:** Permanent contract
- **Skills:** Adobe InDesign, Artificial Intelligence, Audit Trail, User Authentication, Software Quality, Code Review, Cyber Security, Databases, Control Panels, Information Engineering, Data Governance, Data Security, OAuth, Raw Data, Role-Based Access Control, Security Assertion Markup Language (SAML), Security Software, Software Engineering, Backend, Agentic-AI, Build Management
- **Published:** October 8, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=5920798c1d3deb65

## About the Role

* 2-8 years of professional software engineering experience on high impact teams; ideally some of which has been at startups
 * Experience owning technically challenging, cross-functional projects from start to finish
 * Strong fundamentals across the entire stack, with a strong grasp of backend systems design, data modeling, and building reliable, scalable software
 * You communicate clearly in design docs, code reviews, and cross-functional discussions
 * You care about code quality, testing, and leaving the codebase better than you found it
 * You're motivated by solving real customer problems, not just writing clever code

NICE TO HAVE

 * Experience building authorization, access control, or security systems
 * Experience with policy engines, query rewriting, or data governance platforms
 * Familiarity with RBAC, ABAC, or relationship-based access control models (Zanzibar, OPA, Cedar)
 * Familiarity with authentication and authorization protocols (OAuth, SAML, SCIM, or similar)
 * Experience designing taming complexity in admin-facing UIs or platform management tools

## Description

AI is making it possible for anyone to build software in minutes. But building fast and building safely are two very different things. As development democratizes and more people across an organization create apps, agents, and workflows, the risk surface expands dramatically. The question enterprises are asking isn't "can we build it?" but rather "can we trust what's been built?"
On the AI Governance team, we're solving this problem by building the foundational layer that sits between builders and data. This is the policies, access controls, audit trails, and security infrastructure that make Retool the platform enterprises trust to scale across their entire organization.
Your work will span the stack, from full-stack web development to product infrastructure. You'll focus on the problems that matter most to customers with thousands of employees on Retool: What slows them down? What keeps their security teams up at night? How do we make the right thing easy and the wrong thing hard? This team is responsible for making Retool deeply trusted by our largest customers.
PROJECTS YOU MIGHT WORK ON

 * Data Access Control Layer: Design and build the system that enforces table-level, column-level, and row-level access controls across Retool's database connectors. You might work on: policy modeling, query rewriting to inject security constraints at the data engine, and building the admin UX that makes complex rules intuitive to configure. The goal: when a builder creates an app, the data security is already handled, automatically.
 * Agentic Governance: When does human authority need to back agent actions? How does this evolve as more parts of day to day work are automated over time? What does an admin need to answer "what's the worst this agent could do?" at a glance? Design & build the primitives that ensure agents are soundly permissioned and observable.
 * Automated Security Center & Admin Control Panel: Build the intelligent layer that proactively keeps Retool secure and well-governed. Surface under-authenticated resources, flag potentially dangerous access patterns, monitor usage analytics and spend, and integrate with compliance and DLP tools so security and admin teams get actionable insights instead of raw data, and Retool gets smarter about protecting customers the more they use it.