Privacy by Design Engineer

General Motors•Austin, TX

10d•$171,700 - $220,500•Hybrid

About The Position

The Privacy by Design Engineer is responsible for designing, implementing, and operationalizing privacy controls that embed privacy, data protection, and regulatory compliance into enterprise data platforms, analytics solutions, AI systems, digital products, and vehicle technologies. This role serves as a technical practitioner within a dedicated Privacy Engineering function, ensuring privacy requirements are incorporated early, consistently, and at scale throughout the software development lifecycle. The engineer collaborates closely with Legal, Privacy, Cybersecurity, Data Governance, Product, and Vehicle Engineering teams to translate regulatory obligations, corporate policies, and privacy risk requirements into practical, reusable technical controls and engineering solutions. This role focuses on building privacy capabilities that enable the compliant use of personal, sensitive, and regulated data while minimizing risk, improving audit readiness, and supporting innovation. This role explicitly includes responsibility for privacy-by-design implementations involving vehicle-generated data and vehicle software systems. The Privacy by Design Engineer partners with vehicle engineering, embedded software, connected vehicle, and systems engineering teams to ensure privacy requirements are incorporated throughout vehicle development processes. This includes designing privacy controls for vehicle identifiers, telemetry, diagnostics, customer data, sensor data, connected services, and downstream data ecosystems. The role supports the complete vehicle data lifecycle—from in-vehicle data generation and collection through cloud ingestion, analytics, AI processing, data sharing, retention, and disposal—ensuring privacy protections are engineered into vehicle platforms and services from the outset.

Requirements

Bachelor's degree in Computer Science, Engineering, Information Systems, Cybersecurity, or a related technical field.
7+ years of experience in software engineering, platform engineering, cybersecurity, architecture, or related technical disciplines.
Experience implementing privacy, security, data protection, or governance controls.
Strong understanding of Privacy by Design principles and data protection concepts.
Experience working with cross-functional stakeholders including Legal, Privacy, Compliance, Cybersecurity, or Data Governance teams.
Strong analytical, problem-solving, and software development skills.

Nice To Haves

Experience implementing privacy engineering, security engineering, or governance solutions in enterprise environments.
Familiarity with global privacy regulations and frameworks including GDPR, CCPA/CPRA, and similar data protection requirements.
Experience with cloud platforms, enterprise data platforms, analytics ecosystems, and API architectures.
Experience supporting AI, machine learning, or data platform solutions with embedded governance controls.
Experience with connected vehicle, automotive software, or embedded engineering environments.
Knowledge of privacy-enhancing technologies, consent management, and data lifecycle management practices.

Responsibilities

Design, develop, test, deploy, and maintain privacy-by-design solutions across enterprise platforms and vehicle systems.
Engineer privacy controls that protect personal, sensitive, and regulated data throughout its lifecycle.
Build and operationalize privacy-enhancing technologies and reusable privacy services.
Design and develop technical privacy solutions for current, emerging, and strategic enterprise and vehicle programs.
Analyze business, data, and system requirements to identify privacy risks and control requirements.
Perform detailed design analysis and recommend privacy-by-design implementation approaches.
Develop technical specifications and engineering artifacts for privacy capabilities.
Participate in software design reviews and provide privacy engineering guidance.
Support development teams with implementation and troubleshooting of privacy controls.
Contribute to the correction of software design issues and privacy-related defects.
Communicate privacy engineering best practices across the software engineering community.
Serve as a Privacy Engineering Subject Matter Expert (SME) within assigned programs and initiatives.
Implement privacy-preserving solutions such as: Pseudonymization and alternate identifiers, Tokenization and encryption, Data masking and obfuscation, Consent and preference management controls, Access control and authorization mechanisms, Data minimization solutions, Data loss prevention (DLP) integrations, Privacy-enhancing technologies (PETs).
Embed privacy requirements into data, analytics, AI, software, and vehicle development processes.
Partner with engineering teams to integrate privacy controls into applications, platforms, APIs, and data pipelines.
Collaborate with product and platform teams to ensure privacy requirements are addressed during solution design and development.
Support privacy reviews and solution assessments for new initiatives and technologies.
Contribute to privacy engineering standards, reference architectures, frameworks, and best practices.
Translate regulatory, policy, and governance requirements into technical implementation requirements.
Support privacy impact assessments, control validation activities, and compliance reviews.
Create technical documentation and implementation guidance for engineering teams.
Support audits, regulatory reviews, and compliance assessments through implementation of demonstrable technical controls.
Assist in gathering evidence and documenting privacy control effectiveness.
Monitor privacy controls and support remediation of identified risks or gaps.