Privacy Engineer Specialist

Koniag Government Services, LLC•Washington, DC

6d•Hybrid

About The Position

Koniag Data Solutions, a Koniag Government Services company, is seeking a Privacy Engineer/ Specialist to support KDS and our government customer in Washington, DC. Currently one day a week required onsite. We offer competitive compensation and an extraordinary benefits package including health, dental and vision insurance, 401K with company matching, flexible spending accounts, paid holidays, three weeks paid time off, and more. Koniag Data Solutions, LLC (KDS), a Koniag Government Services company, is seeking an experienced Privacy Engineer/Specialist to support federal programs requiring advanced privacy compliance and automation capabilities. The ideal candidate will possess deep expertise in federal privacy regulations and frameworks, combined with strong technical skills in privacy automation and engineering. This role requires a professional who can bridge the gap between privacy policy requirements and technical implementation, while developing innovative solutions to streamline privacy operations. Ability to obtain and maintain required federal security clearance. This position may be Remote or on-site depending on contract requirements. The Privacy Engineer/Specialist will serve as a technical privacy expert, responsible for implementing, automating, and maintaining privacy compliance programs within federal government environments. This role combines privacy expertise with engineering skills to develop scalable, automated solutions for privacy operations.

Requirements

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Information Systems, or related field from an accredited college or university
3+ years of experience in privacy engineering, privacy compliance, or related roles within federal government environments
3+ years of experience with automation, scripting, or software development
Professional privacy certification (IAPP CIPM, CIPP/US, or CIPP/G)
Demonstrated experience implementing privacy automation solutions
Current federal security clearance or ability to obtain one
Expert knowledge of federal privacy laws, regulations, and frameworks including: Privacy Act of 1974 E-Government Act Section 208 Federal Information Security Modernization Act (FISMA) OMB Circular A-130 NIST Privacy Framework NIST Special Publications (800-53, 800-37, 800-122) FedRAMP privacy requirements
Strong programming and scripting skills (Python, PowerShell, JavaScript, or similar)
Experience with API development and integration
Proficiency in database management and SQL
Experience with privacy management platforms (OneTrust, TrustArc, BigID, or similar)
Knowledge of data classification, data loss prevention (DLP), and data governance tools
Experience with workflow automation tools (Power Automate, Zapier, or similar)
Familiarity with cloud platforms (AWS, Azure, GCP) and their privacy features
Understanding of data architecture and data modeling
Experience with version control systems (Git, GitHub, GitLab)
Strong analytical and problem-solving skills
Excellent written and verbal communication skills for both technical and non-technical audiences
Ability to translate privacy requirements into technical specifications
Experience working in Agile/Scrum development environments
Proven ability to work independently and as part of cross-functional teams
Strong attention to detail and commitment to accuracy

Nice To Haves

Master's degree in related field
Additional privacy certifications (CIPT, FIP, CDPSE, or similar)
Security certifications (CISSP, CISM, Security+)
Experience with Robotic Process Automation (RPA) tools
Knowledge of artificial intelligence and machine learning privacy considerations
Experience with data visualization tools (Tableau, Power BI)
Familiarity with identity and access management (IAM) systems
Experience with privacy-enhancing technologies (PETs) such as differential privacy, homomorphic encryption
Knowledge of records management and NARA requirements
Experience with ServiceNow or similar ITSM platforms
Background in system architecture or enterprise architecture
Experience supporting Privacy Impact Assessments (PIAs) in FedRAMP environments
Knowledge of Section 508 compliance and accessibility requirements
Experience with continuous monitoring and continuous authorization (ConMon/ConAuth)
Previous experience as a System Owner or Privacy POC for federal systems
Understanding of DoD privacy requirements and IL4/IL5 environments

Responsibilities

Design, develop, and implement automated privacy compliance workflows and tools to support federal privacy requirements
Engineer technical solutions for privacy impact assessments (PIAs), system of records notices (SORNs), and privacy threshold analyses (PTAs)
Develop and maintain privacy automation scripts, tools, and platforms to streamline privacy documentation and compliance processes
Conduct privacy risk assessments and provide technical recommendations for privacy-enhancing technologies
Build and maintain privacy dashboards, reporting tools, and metrics tracking systems
Integrate privacy controls into system development lifecycle (SDLC) processes and DevSecOps pipelines
Automate privacy compliance monitoring, including data mapping, inventory management, and control validation
Collaborate with IT security, development, and operations teams to embed privacy-by-design principles
Develop technical documentation, including privacy architectures, data flow diagrams, and privacy control mappings
Implement and configure privacy management platforms and tools
Create automated solutions for breach notification, incident response, and privacy event management
Support privacy audits and assessments through automated evidence collection and reporting
Provide technical expertise on emerging privacy technologies, including AI/ML privacy considerations
Train technical and non-technical staff on privacy automation tools and processes
Stay current with federal privacy regulations, guidance, and best practices including OMB memoranda, NIST guidelines, and agency-specific requirements