CLOUD9
JOB DESCRIPTION: PRIVACY ENGINEER / ARCHITECT
POSITION: Privacy Engineer and Architect
LOCATION: Toronto, ON (Hybrid)
ROLE TYPE: Contract, Permanent
EXPERIENCE LEVEL: Senior (8+ years)
REPORTS TO: CEO and Chief Product and Security Officer
═══════════════════════════════════════════════════════════════════════════════
ABOUT CLOUD9
Cloud9 is an enterprise privacy engineering consultancy helping blue-chip
organizations access, analyze, and collaborate on regulated data without
exposing personal information.
We don't advise on privacy, we engineer it. We design and implement
privacy-preserving systems that actually work, combining de-identification,
differential privacy, threat modeling, and regulatory compliance into
defensible, verifiable solutions.
We're backed by experienced founders and serving healthcare systems, financial
institutions, and research organizations across North America.
═══════════════════════════════════════════════════════════════════════════════
THE ROLE
We're seeking an experienced Senior Privacy Engineer to lead our technical
practice. You'll architect privacy-engineering solutions, mentor the team,
serve as a key advisor to clients, and shape how Cloud9 approaches privacy
as a core business capability.
This is a leadership role. You'll own technical strategy, oversee delivery on
high-stakes engagements, and represent Cloud9's expertise to regulatory
bodies and enterprise clients.
You'll report directly to the CEO and Chief Product and Security Officer.
═══════════════════════════════════════════════════════════════════════════════
YOUR RESPONSIBILITIES
Strategy and Architecture
• Design privacy-by-design systems for regulated data environments
• Architect de-identification, differential privacy, and threat modeling solutions
• Set technical standards and best practices for the team
• Evaluate emerging privacy-enhancing technologies and assess applicability
Client Leadership
• Lead discovery and scoping for enterprise engagements
• Serve as trusted technical advisor to CDOs, Privacy Officers, healthcare IT leaders
• Present findings to regulators, auditors, and boards
• Defend technical conclusions under regulatory scrutiny
Team Leadership and Mentorship
• Oversee work of privacy engineers, statisticians, threat modelers
• Mentor junior team members on privacy engineering methodology
• Review technical work for rigor, compliance, and defensibility
• Recruit and onboard new team members
Delivery Excellence
• Own technical delivery on high-value engagements
• Ensure Expert Determination letters, threat models, and risk assessments
meet regulatory standards
• Red-team validate privacy guarantees
• Drive projects from discovery through sign-off
Thought Leadership
• Publish or speak on privacy engineering topics (conferences, industry forums)
• Develop training and educational materials for clients
• Contribute to Cloud9's intellectual property and methodologies
• Stay current on regulatory developments and technical innovations
═══════════════════════════════════════════════════════════════════════════════
REQUIRED QUALIFICATIONS
Experience
• 8+ years in privacy, security, data governance, or related fields
• Proven track record de-identifying healthcare or financial datasets in production
• 5+ years managing technical teams or leading complex technical projects
• Deep hands-on experience with HIPAA (Safe Harbor de-identification)
• Experience with k-anonymity, differential privacy, or privacy-enhancing technologies
• Track record communicating complex privacy concepts to non-technical stakeholders
Technical Skills
• Expert-level knowledge of data architecture and data flows
• Strong statistical background (ability to assess re-identification risk quantitatively)
• Proficiency with Python or R for data analysis
• Experience with SQL and database concepts
• Understanding of cryptography, encryption, and secure systems design
• Familiarity with cloud platforms (AWS, Azure, GCP)
Regulatory and Compliance Knowledge
• Deep HIPAA compliance knowledge (not just policy, technical requirements)
• Understanding of GDPR, CCPA, PIPEDA, and state privacy regulations
• Experience with regulatory audits and compliance evidence gathering
• Familiarity with Expert Determination requirements (HIPAA Section 164.514(b)(1))
• Knowledge of privacy threat modeling (LINDDUN or similar frameworks)
═══════════════════════════════════════════════════════════════════════════════
EDUCATION and CERTIFICATIONS
Required
• Bachelor's degree in Computer Science, Engineering, Statistics, Information
Security, or related field
Strongly Preferred
• Master's degree in Computer Science, Cybersecurity, Data Science, or related
discipline
• PhD in Privacy, Security, or Statistics
• CIPP (Certified Information Privacy Professional) or CISSP
• Published research or significant technical contributions to privacy field
═══════════════════════════════════════════════════════════════════════════════
WHAT YOU'LL BRING
• Intellectual curiosity about privacy problems and deep technical solutions
• Comfort working in ambiguous, regulated environments
• Ability to balance competing demands (privacy vs. utility, security vs. usability)
• Strong communication skills, explain complex concepts clearly to executives, auditors, engineers
• Ownership mentality, you take accountability for technical conclusions
• Practical engineering mindset, theory is good, working systems are better
═══════════════════════════════════════════════════════════════════════════════
COMPENSATION
Contract-based engagement with competitive rates.
═══════════════════════════════════════════════════════════════════════════════
WHAT WE OFFER
• Professional development budget
• Flexible work environment (Toronto-based, hybrid)
• Work on meaningful, high-impact problems
• Autonomy and leadership opportunity
• Access to cutting-edge privacy research and academic partnerships
• Mentorship from experienced founders
• Direct impact on enterprise privacy initiatives
═══════════════════════════════════════════════════════════════════════════════
HOW TO APPLY
Interested? Send us:
• Your resume
• A brief cover letter (1 page) explaining why privacy engineering excites you
• Link to your LinkedIn profile
• Any published work, patents, or technical contributions (optional but encouraged)
Send to: info@cloud9security.ai
Subject: "Senior Privacy Engineer Application"
We review applications on a rolling basis.
═══════════════════════════════════════════════════════════════════════════════
Cloud9 | Toronto, ON
- www.cloud9security.ai | info@cloud9security.ai
