Privacy Program Engineer

Overview

Own the technical core of Fireworks AI's privacy program, including privacy automation, data subject rights, data inventory and ROPA, privacy reviews, retention and deletion, consent management, and AI data privacy controls. Report to the Privacy Lead and serve as the technical expert on the privacy team.

What you'll do

• Build the privacy automation layer using scripts, scheduled jobs, API integrations, and LLM-based agents for request routing, evidence collection, assessment intake, and control monitoring.
• Own the data subject rights program and build automated intake, identity verification, data-store fan-out, fulfillment tracking, and audit trails.
• Build and maintain a data inventory and ROPA using cloud APIs, warehouse metadata, IaC, and service catalogs, and reconcile drift.
• Review designs and pull requests for data handling and advise on de-identification, pseudonymization, tokenization, field-level encryption, and access scoping.
• Translate retention requirements into rules for each data store, work with engineering on enforcement in pipelines and backups, and verify that deletion occurred.
• Support consent management and preference handling across web properties and product surfaces.
• Trace customer data through training, fine-tuning, inference, and logging; validate zero-retention and isolation claims; and build checks that keep those claims true.
• Take on additional privacy projects as the program evolves.
• Own privacy workstreams end to end, lead privacy tooling and agent design, advise product and engineering teams on privacy-by-design decisions, represent privacy in cross-functional projects, and serve as the technical privacy SME.

What you'll need

• 4–7 years of experience in privacy, GRC, IT audit, information security, or a closely related field, with meaningful hands-on privacy work.
• Working knowledge of GDPR and CCPA/CPRA.
• Familiarity with ISO 27701, ISO 27001, ISO 42001, SOC 2, and NIST.
• Hands-on experience with technical privacy operations, including data subject requests, ROPA or data inventory maintenance, privacy impact assessments, or retention enforcement.
• Evidence of automating your own work using AI tooling, scripts, workflow builders, or automation features of a privacy/GRC platform.
• Working proficiency in SQL and at least one scripting language, sufficient to query a warehouse, call an API, parse a schema, and automate a recurring task without help.
• Hands-on familiarity with AWS, GCP, or Azure, including IAM and access scoping, logging, data stores and their retention behavior, and finding where data lives and how it is used.
• Strong written communication and the ability to translate privacy requirements for engineers, customers, and non-technical employees.

Nice to have

• Built something with an LLM API or agent framework that other people relied on.
• Experience with de-identification or synthetic data techniques.
• Exposure to data lineage or catalog tooling such as dbt, DataHub, Atlan, Monte Carlo, or OpenMetadata.
• Worked on a privacy or security problem at an AI/ML company, including model data flows, inference logging, or training data provenance.
• Startup or fast-growing SaaS background.

Details

• Remote role in the United States.