Staff Software Engineer - Identity and Privacy

Ro•New York, NY

2d•Hybrid

About The Position

As a Staff Software Engineer on Roâs Identity and Privacy team, you will build and scale systems that support secure user identity and privacy-first data practices. This includes authentication, user lifecycle management, consent, and data governanceâensuring Roâs technical foundation supports both patient trust and business growth. You will design, build, and maintain systems that manage customer identity, data preferences, attribution, and event-driven data flows. This work requires strong expertise in distributed systems, event pipelines, and privacy-preserving architectures. Youâll work in a highly cross-functional environment, partnering with security, legal, marketing, and data teams to define solutions that balance compliance, security, and high-quality patient experiences.

Requirements

8+ years of software engineering experience (2+ years at Staff or above level) with a focus on distributed systems, data infrastructure, privacy, or security.
Strong proficiency in Python and experience building scalable, production-grade systems.
Deep experience with distributed systems, including streaming platforms (e.g., Kafka), event-driven architectures, and asynchronous processing.
Experience designing and operating data pipelines, eventing systems, and first-party data platforms.
Familiarity with authentication and identity systems (e.g., OAuth, session management, MFA, user lifecycle management).
Experience using agentic coding tools to improve development velocity, reduce workflow friction, automate repetitive tasks, and increase system visibilityâwhile maintaining strong engineering judgment and ownership of outcomes.
Experience in regulated environments and strong ownership in driving complex, cross-functional technical initiatives.

Responsibilities

Build and maintain privacy-first, distributed data systems and consent management systems that comply with consumer privacy regulations.
Design and operate high-throughput, event-driven architectures (e.g., Kafka, streaming systems) for collection, processing, and distribution of first-party data.
Contribute to authentication and identity systems, including user lifecycle management, access controls, and multi-factor authentication.
Architect and scale asynchronous data pipelines and event processing systems for real-time and batch use cases.
Partner with marketing and growth teams to enable privacy-compliant advertising, CRM, and analytics workflows.
Implement privacy-preserving techniques (e.g., anonymization, tokenization, minimization) and ensure compliant data flows to third-party platforms.
Collaborate with security and legal teams to enforce data governance, retention, and compliance policies.