Senior Privacy & Intelligence Boundary Engineer

We're hiring a Senior Privacy & Intelligence Boundary Engineer to build and own the single most important piece of engineering in our platform: the layer that lets external AI systems reason usefully over customer data while that data never actually leaves the customer's own boundary.

This isn't a compliance role. It's a hard, unsolved engineering problem, and you'll be implementing the technical translation layer that scrubs, obfuscates, and de-fingerprints information before it ever reaches an external model, then safely rehydrates results back inside the customer's own environment. Identity continuity has to survive the scrubbing process. Rehydration has to be deterministic and fully auditable. And the whole thing has to survive hostile review from serious enterprise security and legal teams, not just look good in a demo.
What you'll own: the technical implementation of PII detection and removal, deterministic placeholders that preserve identity continuity, semantic aliasing, de-fingerprinting against pattern-based re-identification, and the rehydration process that brings results safely back inside the boundary. You'll also own testing this rigorously: leakage tests, adversarial test corpora, and reasoning-equivalence benchmarks to prove the system actually holds up under attack, not just in the happy path.

What you won't own: the overall system architecture (that's set by our CTO and an approved specification process) - your authority is over how the translation layer is implemented, tested, and hardened, not over redesigning it from scratch.

We're looking for 8+ years of senior software engineering experience, direct hands-on experience implementing privacy-preserving systems in code (not just discussing privacy as a concept), strong NLP background (named entity recognition, semantic transformation), and serious testing discipline - you should understand how information can leak through indirect, non-obvious paths, not just direct identifiers.

This is a fully remote, primarily asynchronous role. We keep live meetings to a minimum - typically just one or two scheduled check-ins per week with our CTO, timed to land at a reasonable hour for both sides.
We're building a long-term core team, not filling a short-term gig - compensation is negotiated individually based on your experience and what you bring to the role, and we intend to grow both pay and benefits as the team and company mature.

Our process: application review, then a short screening call, then a practical technical exercise relevant to the role, then a technical discussion with our CTO, then a final conversational interview, then offer. We aim to move quickly and keep you updated at each stage.