You make ownership visible in everyday operations: access, correction, export, sharing and deletion, turned from promises on a page into systems that actually do it. The difficulty is reconciling a promise a person can understand with the reality of distributed storage, caches, replicas and backups. Delete my data is a sentence anyone can say and a genuinely hard thing to make true, and this role is where that gap gets closed.
Open for applications. Starts at: Pilot expansion.
We are taking applications for this role now and building the pipeline for it. The stage above is when the work itself is expected to begin, which is something you deserve to know before you apply rather than after. It is context, not a gate.
Where
In the office together five days a week, in one of our garages, and remote-friendly around your family, arranged one person at a time. We hire across the United States 🇺🇸, India 🇮🇳 and the UAE 🇦🇪.
The work
Map data across vaults, indexes, logs, backups, connectors and model artifacts. Implement minimization, retention and user controls with verifiable behavior. Explain where external recipients or trained model parameters prevent an absolute deletion guarantee.
The milestone
In your first 90 days, deliver an end-to-end lifecycle map and tested export and deletion workflows for the pilot.
Required
Nice to have
Evidence
Bring privacy engineering, data systems or security experience. You should be able to reconcile an understandable user promise with the realities of distributed storage.
Evidence, not credentials. We are describing work you can point at, in whatever form it exists.
The exercise
Trace a deletion request through a cached summary, an offline device, a backup and a previously authorized external recipient.
The package
Indicative pay ranges by market and level are on the compensation page. Plan numbers are confirmed in your offer letter.
Apply
One short form. A person reads every application and you hear back either way. You will get your own link to check where things stand, and you can withdraw or delete your application from it at any time, without an account.