Senior Privacy Engineer

Roblox•San Mateo, CA

4h•$224,310 - $271,710

About The Position

As a Senior Privacy Engineer on Roblox's Security and Privacy GRC team, you will shepherd and grow the Privacy Review Program, the technical and process backbone for ensuring privacy is engineered into products before they ship. This hands-on role sets standards for privacy-enhancing technologies, serves as the subject matter expert for policy-as-code, and partners with Product teams, Trust & Safety, Legal, and Regulatory Compliance as part of Roblox's broader cross-functional privacy program. The role reports to the Sr Engineering Manager for Privacy Governance and Operations. You will develop consistent privacy review workflows and guidance, translate privacy and regulatory requirements into automated engineering controls, and drive privacy-by-design through tooling, consultation, and enablement. You will also communicate privacy risks and program health to product stakeholders and cross-functional partners.

Requirements

5+ years of relevant professional experience in privacy engineering, privacy program management, or a related security or compliance discipline.
Experience owning or significantly shaping a privacy review process, privacy governance function, or equivalent, including designing workflows, managing stakeholder intake, and driving decisions to closure.
Deep expertise in privacy-enhancing technologies, such as differential privacy, homomorphic encryption, k-anonymity, federated learning, and secure multi-party computation, and sound judgment about their production trade-offs.
Experience identifying and mitigating privacy vulnerabilities in data systems, including inference, linkage, and homogeneity attacks.
Hands-on experience with policy-as-code tooling for automating compliance enforcement in engineering pipelines, such as OPA/Rego, Cedar, or similar policy engines.
Strong understanding of global data protection regulations, including GDPR, CCPA/CPRA, COPPA, and LGPD, and their technical implications for product and infrastructure design.
Demonstrated ability to align engineering, legal, policy, and compliance stakeholders without direct management authority.
Bachelor's degree or equivalent experience in Computer Science, Information Security, or a similar technical field.
Ability to explain technical privacy trade-offs to legal and compliance audiences and regulatory requirements to engineering teams.
Organized and process-oriented, with the ability to manage concurrent program tracks in a fast-moving environment.
Comfort with ambiguity, ownership of outcomes, and judgment about when to work autonomously or escalate.
Collaborative approach and ability to build trust and move work forward across teams.
Genuine investment in user privacy as a product and platform value.

Responsibilities

Shepherd and evolve the Privacy Review Program by designing intake workflows, evaluation criteria, and documentation to assess privacy risks across products, features, and infrastructure changes.
Develop standards and guidelines for product teams adopting privacy-enhancing technologies, including differential privacy, k-anonymity, data minimization, and secure computation, with guidance on trade-offs and implementation patterns.
Serve as the Privacy subject matter expert for policy-as-code, translating privacy requirements and regulatory obligations into automated, enforceable controls in engineering workflows and infrastructure.
Partner with Regulatory Compliance, Trust & Safety, and Legal to align Privacy Review Program outcomes with compliance obligations and global privacy frameworks.
Drive privacy-by-design adoption across product and engineering through self-service tooling, consultation, and scalable enablement programs.
Communicate privacy risk posture and program health to stakeholders, turning technical findings into clear, actionable guidance.