CLOUD9

: PRIVACY ENGINEER / ARCHITECT

POSITION: Privacy Engineer and Architect

LOCATION: Toronto, ON (Hybrid)

ROLE TYPE: Contract, Permanent

EXPERIENCE LEVEL: Senior (8+ years)

REPORTS TO: CEO and Chief Product and Security Officer

═══════════════════════════════════════════════════════════════════════════════

ABOUT CLOUD9

Cloud9 is an enterprise privacy engineering consultancy helping blue-chip organizations access, analyze, and collaborate on regulated data without exposing personal information.

We don't advise on privacy, we engineer it. We design and implement privacy-preserving systems that actually work, combining de-identification,

differential privacy, threat modeling, and regulatory compliance into defensible, verifiable solutions.

We're backed by experienced founders and serving healthcare systems, financial institutions, and research organizations across North America.

═══════════════════════════════════════════════════════════════════════════════

THE ROLE

We're seeking an experienced Senior Privacy Engineer to lead our technical practice. You'll architect privacy-engineering solutions, mentor the team,

serve as a key advisor to clients, and shape how Cloud9 approaches privacy as a core business capability.

This is a leadership role. You'll own technical strategy, oversee delivery on high-stakes engagements, and represent Cloud9's expertise to regulatory bodies and enterprise clients.

You'll report directly to the CEO and Chief Product and Security Officer.

═══════════════════════════════════════════════════════════════════════════════

YOUR RESPONSIBILITIES

Strategy and Architecture

- Design privacy-by-design systems for regulated data environments
- Architect de-identification, differential privacy, and threat modeling solutions
- Set technical standards and best practices for the team
- Evaluate emerging privacy-enhancing technologies and assess applicability

Client Leadership

- Lead discovery and scoping for enterprise engagements
- Serve as trusted technical advisor to CDOs, Privacy Officers, healthcare IT leaders
- Present findings to regulators, auditors, and boards
- Defend technical conclusions under regulatory scrutiny

Team Leadership and Mentorship

- Oversee work of privacy engineers, statisticians, threat modelers
- Mentor junior team members on privacy engineering methodology
- Review technical work for rigor, compliance, and defensibility




- Recruit and onboard new team members

Delivery Excellence

- Own technical delivery on high-value engagements
- Ensure Expert Determination letters, threat models, and risk assessments meet regulatory standards
- Red-team validate privacy guarantees
- Drive projects from discovery through sign-off

Thought Leadership

- Publish or speak on privacy engineering topics (conferences, industry forums)
- Develop training and educational materials for clients
- Contribute to Cloud9's intellectual property and methodologies
- Stay current on regulatory developments and technical innovations

═══════════════════════════════════════════════════════════════════════════════

REQUIRED QUALIFICATIONS

Experience

- 8+ years in privacy, security, data governance, or related fields
- Proven track record de-identifying healthcare or financial datasets in production
- 5+ years managing technical teams or leading complex technical projects
- Deep hands-on experience with HIPAA (Safe Harbor de-identification)
- Experience with k-anonymity, differential privacy, or privacy-enhancing technologies
- Track record communicating complex privacy concepts to non-technical stakeholders

Technical Skills

- Expert-level knowledge of data architecture and data flows
- Strong statistical background (ability to assess re-identification risk quantitatively)
- Proficiency with Python or R for data analysis
- Experience with SQL and database concepts
- Understanding of cryptography, encryption, and secure systems design
- Familiarity with cloud platforms (AWS, Azure, GCP)

Regulatory and Compliance Knowledge

- Deep HIPAA compliance knowledge (not just policy, technical requirements)
- Understanding of GDPR, CCPA, PIPEDA, and state privacy regulations
- Experience with regulatory audits and compliance evidence gathering
- Familiarity with Expert Determination requirements (HIPAA Section 164.514(b)(1))
- Knowledge of privacy threat modeling (LINDDUN or similar frameworks)

═══════════════════════════════════════════════════════════════════════════════

EDUCATION and CERTIFICATIONS

Required

- Bachelor's degree in Computer Science, Engineering, Statistics, Information

Security, or related field





Strongly Preferred

- Master's degree in Computer Science, Cybersecurity, Data Science, or related discipline
- PhD in Privacy, Security, or Statistics
- CIPP (Certified Information Privacy Professional) or CISSP
- Published research or significant technical contributions to privacy field

═══════════════════════════════════════════════════════════════════════════════

WHAT YOU'LL BRING

- Intellectual curiosity about privacy problems and deep technical solutions
- Comfort working in ambiguous, regulated environments
- Ability to balance competing demands (privacy vs. utility, security vs. usability)
- Strong communication skills, explain complex concepts clearly to executives, auditors, engineers
- Ownership mentality, you take accountability for technical conclusions
- Practical engineering mindset, theory is valuable, working systems are better

═══════════════════════════════════════════════════════════════════════════════

COMPENSATION

Contract-based engagement with competitive rates.

═══════════════════════════════════════════════════════════════════════════════

WHAT WE OFFER

- Professional development budget
- Flexible work environment (Toronto-based, hybrid)
- Work on meaningful, high-impact problems
- Autonomy and leadership opportunity
- Access to cutting-edge privacy research and academic partnerships
- Mentorship from experienced founders
- Direct impact on enterprise privacy initiatives

═══════════════════════════════════════════════════════════════════════════════

HOW TO APPLY

Interested? Send us:
- Your resume
- A brief cover letter (1 page) explaining why privacy engineering excites you
- Link to your LinkedIn profile
- Any published work, patents, or technical contributions (optional but encouraged)

Send to: [email protected]

Subject: "Senior Privacy Engineer Application"

We review applications on a rolling basis.

═══════════════════════════════════════════════════════════════════════════════

Cloud9 | Toronto, ON

- www.cloud9security.ai | [email protected]

📌 Privacy Engineer/Architect (Toronto)
🏢 Cloud9
📍 Toronto