Principal Data Privacy Architect

HP•Spring, TX

6d•$154,400 - $227,750

About The Position

This role will design and implement scalable, AI-ready data privacy architecture across enterprise data environments, applications, and AI-enabled workflows. The Principal Data Privacy Architect will serve as a hands-on subject matter expert responsible for embedding privacy-by-design, consent enforcement, data sovereignty, data loss prevention, and compliance controls into large, complex global data environments. The architect will partner closely with Data Engineering, Cybersecurity, Legal, Privacy, AI Governance, Product, and Enterprise Architecture teams to ensure customer, employee, partner, and sensitive enterprise data is accessed, processed, shared, retained, and protected in a compliant, secure, and trustworthy manner. Architect for Trust & Scale: Build reusable privacy architecture patterns that enable secure, compliant, and scalable data usage across platforms, products, and regions. Enable Responsible AI: Design privacy guardrails for AI agents, generative AI, RAG pipelines, model inputs and outputs, embeddings, vector stores, and automated data workflows. Reduce Risk While Enabling Innovation: Translate privacy, consent, regulatory, and data sovereignty obligations into practical engineering controls that accelerate business outcomes.

Requirements

Bachelor’s or master’s degree in Computer Science, Engineering, Information Systems, Cybersecurity, Data Engineering, or related field.
10+ years of progressive experience in data privacy, data protection, cybersecurity, data architecture, or enterprise data platforms.
Proven experience architecting privacy and data protection solutions in large, complex, global environments.
Hands-on experience implementing privacy-by-design, consent management, data sovereignty, DLP, and sensitive data protection controls.
Strong understanding of global privacy regulations and frameworks, including GDPR, CCPA/CPRA, LGPD, PIPL, India DPDP Act, NIST, ISO 27001, and related privacy/security standards.
Experience with cloud platforms such as AWS, Azure, or GCP, and enterprise data platforms including data warehouses, lakehouses, data catalogs, metadata platforms, and big data environments.
Working knowledge of privacy and data protection technologies such as BigID, OneTrust, Securiti, Collibra, Informatica, Microsoft Purview, AWS Macie, Google Cloud DLP, Azure Information Protection, DLP, DSPM, CASB, IAM, and KMS capabilities.
Strong technical skills in Python, Java, SQL, APIs, Spark, data pipelines, infrastructure-as-code, and policy-as-code.
Experience with AI/ML, generative AI, AI agents, RAG architectures, vector databases, feature stores, model governance, or AI-enabled data products.
Ability to translate legal, privacy, compliance, and business requirements into scalable technical architecture.
Strong communication and influencing skills with engineers, architects, legal teams, privacy teams, product leaders, and senior executives.
Demonstrated ability to balance customer trust, regulatory compliance, engineering practicality, and business agility.

Nice To Haves

Certifications such as CIPP/E, CIPP/US, CIPM, CIPT, CISSP, CCSP, CDPSE, or equivalent.
Experience building consent management platforms, privacy preference centers, data subject rights automation, or customer data governance capabilities.
Experience implementing purpose-based access control, attribute-based access control, zero-trust data architecture, or data-centric security models.
Active industry participation, publications, or memberships related to privacy engineering, AI governance, cybersecurity, or customer trust.

Responsibilities

Embed customer trust, transparency, and privacy-by-design principles into enterprise data platforms and customer-facing applications.
Design consent-aware data access and usage patterns across analytics, personalization, marketing, product telemetry, support, and AI use cases.
Ensure customer data is collected, processed, shared, retained, and deleted according to approved purposes, consent preferences, and regulatory obligations.
Architect reusable privacy engineering components, including APIs, SDKs, reference architectures, automation patterns, and policy-as-code controls.
Design privacy controls for AI agents and AI-enabled workflows that access, process, summarize, or publish sensitive data.
Build technical patterns for data minimization, anonymization, pseudonymization, tokenization, encryption, masking, and secure data sharing.
Partner with Legal, Privacy, Cybersecurity, and Compliance teams to translate global privacy regulations and internal policies into enforceable technical controls.
Support compliance with GDPR, CCPA/CPRA, LGPD, PIPL, India DPDP Act, data sovereignty mandates, cross-border transfer requirements, and regional data residency obligations.
Define auditable controls for consent enforcement, access monitoring, retention, deletion, lineage, and compliance evidence collection.
Establish privacy architecture patterns across data warehouses, lakehouses, metadata platforms, customer data platforms, AI/ML environments, vector databases, and cloud platforms.
Integrate sensitive data discovery, classification, lineage, DLP, DSPM, IAM, KMS, and monitoring capabilities into the enterprise data ecosystem.
Advance automated compliance monitoring, privacy control validation, and risk detection across the data lifecycle.
Collaborate with Data Engineering, Product, AI Governance, Cybersecurity, Legal, Privacy, and Enterprise Architecture teams to embed privacy controls into delivery workflows.
Provide hands-on architecture guidance for high-risk data initiatives, AI programs, customer data products, and platform modernization efforts.
Mentor engineers, architects, data scientists, and product teams on privacy engineering best practices.