[Hiring] Privacy Program Engineer @Fireworks

Role Description

We're looking for a Privacy Program Engineer to own the technical core of our privacy program. We've achieved ISO 27001, ISO 27701, ISO 42001, and SOC 2 Type II, and we run active GDPR and CCPA/CPRA programs - now we need someone to run the machinery that keeps all of it working, and to make that machinery largely run itself.

This is a privacy role with real technical depth - you'll write scripts, queries, and automation. From day one you'll own real workstreams:

• Data subject requests
• The data inventory and ROPA
• Hands-on privacy reviews for new vendors and features

You'll report to our Privacy Lead and be a key owner of large portions of our privacy program, as well as the key technical expert on the privacy team.

This is not a ticket queue with a title. We're a small team at a company that builds AI infrastructure, and we intend to leverage it - you'll own the direction and design of the technical systems, automations, and tools that help us meet our privacy obligations at Fireworks.

Qualifications

• 4–7 years of experience in privacy, GRC, IT audit, information security, or a closely related field, with meaningful hands-on privacy work.
• Working knowledge of GDPR and CCPA/CPRA, and familiarity with ISO 27701, ISO 27001, ISO 42001, SOC 2, and NIST.
• Hands-on experience with technical privacy operations: data subject requests, ROPA or data inventory maintenance, privacy impact assessments, or retention enforcement.
• Evidence that you automate your own work - AI tooling, scripts, workflow builders, or aggressive use of a privacy/GRC platform's automation features.
• Working proficiency in SQL and at least one scripting language.
• Hands-on familiarity with cloud environments (AWS, GCP, or Azure).
• Strong written communication; you can translate privacy requirements into language engineers, customers, and non-technical employees understand.

Requirements

• Build the privacy automation layer: scripts, scheduled jobs, API integrations, and LLM-based agents that handle request routing, evidence collection, assessment intake, and control monitoring.
• Own the data subject rights (DSR) program and the system behind it: build the intake, identity verification, fan-out across data stores, and fulfillment tracking as an automated pipeline.
• Build and maintain a data inventory and ROPA that derives from the environment rather than from interviews.
• Embed privacy into how we build: review designs and PRs for data handling, advise on de-identification, pseudonymization, tokenization, field-level encryption, and access scoping.
• Own retention and deletion as an engineering problem: translate retention requirements into concrete rules per data store.
• Support consent management and preference handling across our web properties and product surfaces.
• Solve AI data problems directly: trace how customer data moves through training, fine-tuning, inference, and logging.
• Take on additional privacy projects as the program evolves.

Benefits

• Solve Hard Problems: Tackle challenges at the forefront of AI infrastructure.
• Build What’s Next: Work with bleeding-edge technology that impacts how businesses and developers harness AI globally.
• Ownership & Impact: Join a fast-growing, passionate team where your work directly shapes the future of AI.
• Learn from the Best: Collaborate with world-class engineers and AI researchers who thrive on curiosity and innovation.