Member of Technical Staff - Principal Software Engineer - Health Privacy & Compliance

We are hiring a Principal Software Engineer to be our engineering team's anchor for all things privacy, compliance, and regulatory. This is a senior individual-contributor role for a hands-on engineer who can set technical direction, build privacy-preserving systems, and serve as the trusted point of contact who keeps our products on the right side of a fast-evolving regulatory landscape. You will work at the intersection of privacy engineering, health technology, and applied AI - partnering closely with product, security, legal, and compliance to make privacy-by-design the default rather than an afterthought.

If you are energized by hard problems where protecting people and shipping great products are equally non-negotiable, this role offers outsized impact on how responsible AI in health is built.

Responsibilities

• Be the primary point of contact for privacy, compliance, and regulatory matters within the engineering team - the person product and engineering turn to for guidance, design review, and decisions.

• Ensure products such as Copilot Health are designed and built in a privacy-preserving way, embedding data minimization, purpose limitation, and privacy-by-design into architecture from the outset.

• Translate complex health and data-protection regulations - including UK and EU GDPR, HIPAA, and the EU AI Act - into concrete technical requirements, engineering guardrails, and automated, continuously verifiable controls.

• Lead privacy and security design reviews and threat modeling for new features and models, identifying risks early and architecting practical, scalable mitigations.

• Design and build foundational privacy infrastructure: data classification, policy-driven access controls, consent and preference management, audit logging, data lineage, and retention and lifecycle controls.

• Evaluate and apply privacy-enhancing technologies - such as differential privacy, de-identification, secure enclaves, and federated approaches - where they meaningfully reduce risk to users.

• Build reusable libraries, patterns, and tooling that let every engineer ship privacy-preserving features by default, and raise the team's privacy and compliance fluency through mentorship and clear standards.

• Partner across legal, compliance, security, and product to balance strong user protections with product velocity, and to support audits, certifications, and regulator-facing evidence.

• Stay ahead of emerging health-privacy regulation and industry practice, bringing that perspective into roadmaps before requirements become blockers.

• Extensive professional software engineering experience building and operating production systems at scale, with significant depth in privacy, security, or data protection.

• Strong programming skills in at least one major language (e.g., C#, Python, Go, Java, or similar) and a track record of shipping reliable backend and infrastructure systems.

• Demonstrated ability to translate privacy and regulatory requirements (such as GDPR or HIPAA) into technical designs and enforceable controls.

• Hands-on command of privacy and security fundamentals: privacy-by-design, data minimization, access-control models (RBAC/ABAC), encryption, audit logging, and data lifecycle management.

• Experience conducting privacy and security reviews, threat modeling, and risk assessments.

• Excellent cross-functional communication - able to influence product, engineering, legal, and compliance stakeholders and explain trade-offs clearly.

• Bachelor's degree in Computer Science or a related field, or equivalent practical experience.

Preferred qualifications

• Experience in health technology (strongly preferred), or in another highly regulated industry such as financial services, government, or insurance (acceptable).

• Familiarity with health-data standards and governance frameworks (e.g., HIPAA, HITRUST, ISO 27001/27701, NHS data governance, FHIR and clinical data handling).

• Practical experience applying privacy-enhancing technologies - differential privacy, anonymization/de-identification, secure enclaves, or federated learning.

• Experience with AI/ML systems and the privacy considerations of training and inference on sensitive data.

• Experience with cloud platforms (Azure preferred) and large-scale data systems.

• Relevant certifications such as CIPP/E or CIPT.

Software Engineering IC5 - The typical base pay range for this role across United Kingdom is £ 93,500.00 - £ 161,800.00 per year. Certain roles may be eligible for benefits and other compensation.

Microsoft is a global technology company headquartered in Redmond, Washington. Our mission is to empower every person and every organization on the planet to achieve more. We develop, license, and support a wide range of software products, services, and devices that help individuals and businesses realize their full potential.

Our flagship products include the Microsoft 365 productivity cloud, Windows operating system, Azure cloud platform, and Dynamics 365 business applications. We are also a leader in areas such as artificial intelligence, cybersecurity, developer tools, and gaming through Xbox and Game Pass.

With operations in more than 190 countries and over 220,000 employees worldwide, Microsoft is committed to responsible innovation, inclusive economic growth, and sustainability. We work closely with governments, industries, and communities to ensure that technology serves the public good and helps address some of the world’s most pressing challenges.

As we celebrate our 50th anniversary in 2025, we continue to look forward—investing in AI, cloud, and quantum computing to shape the future of work, education, and society at large scale.