Member of Technical Staff Privacy Engineer, Health
Job Location:
Yearly Salary:
Posted:
Application Deadline:
Vacancies:
Department:
Job Summary
Microsoft AI (MAI) is building consumer health experiences - including Copilot Health - that bring trustworthy AI-powered guidance to millions of people. Health information is among the most sensitive data anyone shares and the trust people place in us depends on getting privacy security and regulatory compliance right from the very first line of code.
We are looking to hire our engineering teams anchor for all things privacy compliance and regulatory. This is a senior individual-contributor role for a hands-on engineer who can set technical direction build privacy-preserving systems and serve as the trusted point of contact who keeps our products on the right side of a fast-evolving regulatory landscape. You will work at the intersection of privacy engineering health technology and applied AI - partnering closely with product security legal and compliance to make privacy-by-design the default rather than an afterthought.
If you are energized by hard problems where protecting people and shipping great products are equally non-negotiable this role offers outsized impact on how responsible AI in health is built.
Responsibilities
Be the primary point of contact for privacy compliance and regulatory matters within the engineering team - the person product and engineering turn to for guidance design review and decisions.
Ensure products such as Copilot Health are designed and built in a privacy-preserving way embedding data minimization purpose limitation and privacy-by-design into architecture from the outset.
Translate complex health and data-protection regulations - including UK and EU GDPR HIPAA and the EU AI Act - into concrete technical requirements engineering guardrails and automated continuously verifiable controls.
Lead privacy and security design reviews and threat modeling for new features and models identifying risks early and architecting practical scalable mitigations.
Design and build foundational privacy infrastructure: data classification policy-driven access controls consent and preference management audit logging data lineage and retention and lifecycle controls.
Evaluate and apply privacy-enhancing technologies - such as differential privacy de-identification secure enclaves and federated approaches - where they meaningfully reduce risk to users.
Build reusable libraries patterns and tooling that let every engineer ship privacy-preserving features by default and raise the teams privacy and compliance fluency through mentorship and clear standards.
Partner across legal compliance security and product to balance strong user protections with product velocity and to support audits certifications and regulator-facing evidence.
Stay ahead of emerging health-privacy regulation and industry practice bringing that perspective into roadmaps before requirements become blockers.
Qualifications
Required qualifications
Extensive professional software engineering experience building and operating production systems at scale with significant depth in privacy security or data protection.
Strong programming skills in at least one major language (e.g. C# Python Go Java or similar) and a track record of shipping reliable backend and infrastructure systems.
Demonstrated ability to translate privacy and regulatory requirements (such as GDPR or HIPAA) into technical designs and enforceable controls.
Hands-on command of privacy and security fundamentals: privacy-by-design data minimization access-control models (RBAC/ABAC) encryption audit logging and data lifecycle management.
Experience conducting privacy and security reviews threat modeling and risk assessments.
Excellent cross-functional communication - able to influence product engineering legal and compliance stakeholders and explain trade-offs clearly.
Bachelors degree in Computer Science or a related field or equivalent practical experience.
Preferred qualifications
Experience in health technology (strongly preferred) or in another highly regulated industry such as financial services government or insurance (acceptable).
Familiarity with health-data standards and governance frameworks (e.g. HIPAA HITRUST ISO 27001/27701 NHS data governance FHIR and clinical data handling).
Practical experience applying privacy-enhancing technologies - differential privacy anonymization/de-identification secure enclaves or federated learning.
Experience with AI/ML systems and the privacy considerations of training and inference on sensitive data.
Experience with cloud platforms (Azure preferred) and large-scale data systems.
Relevant certifications such as CIPP/E or CIPT.
Software Engineering IC5 - The typical base pay range for this role across United Kingdom is 93500.00 - 161800.00 per year. Certain roles may be eligible for benefits and other compensation.
Find additional benefits and pay information here:
position will be open for a minimum of 5 days with applications accepted on an ongoing basis until the position is filled.
Microsoft is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age ancestry citizenship color family or medical care leave gender identity or expression genetic information immigration status marital status medical condition national origin physical or mental disability political affiliation protected veteran or military status race ethnicity religion sex (including pregnancy) sexual orientation or any other characteristic protected by applicable local laws regulations and ordinances. If you need assistance with religious accommodations and/or a reasonable accommodation due to a disability during the application process read more about requesting accommodations.
Required Experience:
IC
