Privacy Program EngineerActive$166K–$175K

Fireworks AI
Apply now

The opportunity

We're looking for a Privacy Program Engineer to own the technical core of our privacy program. We've achieved ISO 27001, ISO 27701, ISO 42001, and SOC 2 Type II, and we run active GDPR and CCPA/CPRA programs - now we need someone to run the machinery that keeps all of it…

What you'll do

  • Build the privacy automation layer: scripts, scheduled jobs, API integrations, and LLM-based agents that handle request routing, evidence collection, assessment intake, and control monitoring.

  • Own the data subject rights (DSR) program and the system behind it: build the intake, identity verification, fan-out across data stores, and fulfillment tracking as an automated pipeline rather than a checklist, with the audit trail generated as a byproduct.

  • Build and maintain a data inventory and ROPA that derives from the: environment rather than from interviews: pull from cloud APIs, warehouse metadata, IaC, and service catalogs so the map updates when the systems do, and reconcile drift.

  • Embed privacy into how we build: review designs and PRs for data handling, advise on de-identification, pseudonymization, tokenization, field-level encryption, and access scoping, and give engineers a concrete pattern to use rather than a policy to read.

  • Own retention and deletion as an engineering problem: translate retention requirements into concrete rules per data store, work with engineering on enforcement in pipelines and backups, and build the verification that proves deletion actually happened.

  • Support consent management and preference handling across our web properties and product surfaces.

What they're looking for

  • –7 years of experience in privacy, GRC, IT audit, information security, or a: closely related field, with meaningful hands-on privacy work.
  • Working knowledge of GDPR and CCPA/CPRA, and familiarity with ISO 27701, ISO: 27001, ISO 42001, SOC 2, and NIST.
  • Hands-on experience with technical privacy operations: data subject requests, ROPA or data inventory maintenance, privacy impact assessments, or retention enforcement.
  • Evidence that you automate your own work: AI tooling, scripts, workflow builders, or aggressive use of a privacy/GRC platform's automation features. Tell us what you built and what it replaced.
  • Working proficiency in SQL and at least one scripting language: enough to query a warehouse, call an API, parse a schema, and automate a recurring task without help.
  • Hands-on familiarity with cloud environments (AWS, GCP, or Azure): IAM and access scoping, logging, data stores and their retention behavior, and how to find where data actually lives and how it’s used.
  • Strong written communication; you can translate privacy requirements into: language engineers, customers, and non-technical employees understand.