The skills privacy engineering roles ask for
A plain account of what employers look for in privacy engineers: the engineering foundations, the privacy-specific techniques and the working habits that matter.
Privacy engineering job adverts can read like two roles joined together. In practice, employers are hiring a software engineer who understands personal data unusually well. This is what they tend to ask for.
Engineering foundations
Nearly every role requires solid experience in a mainstream language and with data systems at scale: pipelines, warehouses, event streams and the services around them. You will be changing shared infrastructure, so testing, code review and operational reliability matter as much here as in any platform team.
Privacy-specific techniques
- Data discovery and classification: finding personal data in systems that were not designed to declare it.
- Deletion and retention: building deletion that reaches backups, caches and derived datasets, and can prove it ran.
- Pseudonymisation and anonymisation: knowing the difference, and how re-identification happens.
- Access control: purpose-based access, audit logging and separation between environments.
- Privacy-enhancing technologies: differential privacy, synthetic data and secure computation, including when they are not worth the cost.
Translating requirements
The defining skill is turning a legal or policy requirement into a design. “Keep data no longer than necessary” has to become a retention service with owners, schedules and exceptions. Employers look for people who can ask a privacy counsel the right questions and then explain the answer to an engineering team.
How to move across
If you are an engineer today, the most direct route is to take on privacy work where you are: the deletion pipeline, the data map, the consent service. If you come from the privacy side, a move usually means building real engineering experience first, often through a data or platform role.
The IAPP’s CIPT certificate appears in some adverts as desirable. As with most certificates in this field, it supports experience rather than replacing it.