> Markdown version of [/jobs/ext/3843950-privacy-engineer-onsite-frisco-tx](https://www.wearedevelopers.com/jobs/ext/3843950-privacy-engineer-onsite-frisco-tx). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Privacy Engineer - onsite Frisco, TX - **Company:** Welltower Inc - **Location:** Frisco, TX, United States - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Amazon Web Services, Data Analysis, Cyber Security, Data Discovery, Information Engineering, Data Governance, Data Mapping, Data Retention, Data Warehousing, Software Design Patterns, Github, Google Analytics, Python (Programming Language), Role-Based Access Control, SQL Databases, Privacy Controls, Data Classification, Snowflake, Infrastructure as Code (IaC), Cloudformation, Terraform, Programming Languages - **Published:** October 20, 2026 - **Apply:** https://www.dice.com/job-detail/983add10-641f-48ef-96b0-23fff0c47c29 ## About the Role * Bachelor's degree in a related field is required. Master's degree is preferred. * 3+ years of experience in privacy engineering, privacy operations, information security, or a related technical compliance role. * Working knowledge of HIPAA, UK GDPR, CCPA/CPRA and other U.S. state privacy laws, including the technical requirements behind them (opt-out preference signals, sensitive data consent and tracking technology guidance) * Familiarity with data mapping, data classification, access controls, and vendor risk assessment. * Experience automating solutions using Python or similar programming and scripting languages. * Experience with GitHub, CI/CD pipelines, and Infrastructure as Code (e.g., Terraform, CloudFormation). * Familiarity with SQL, data warehousing (Snowflake preferred), and AWS or other cloud platforms. * Experience conducting privacy threat modeling (e.g., LINDDUN) and privacy impact assessments. * Experience implementing privacy-by-design patterns and data minimization controls. * Proven ability to partner with technical teams to translate privacy requirements into clear technical specifications. * Hands-on experience configuring a consent management platform (OneTrust strongly preferred), including cookie categorization, geo-rules and script blocking. * Understanding of marketing and analytics technology (e.g., GA4, Meta Pixel, Conversions API, server-side tagging) and the privacy risks each one carries. * Ability to explain technical and regulatory concepts clearly to legal, security, and business audiences. * Privacy certification such as CIPT, CIPP/US, or CIPP/E is a plus. Employment is contingent upon the successful completion of a background check, drug screening, and verification of employment, education, and other credentials relevant to the position. ## Description Welltower is looking for a Privacy Engineer to help build and scale the technical side of our privacy program. This role will work at the intersection of legal, security, and technology, turning privacy requirements into practical, working controls that protect our data and help the business move faster. This role will design and build the technical solutions, in specified platforms, of privacy compliance to reflect the policies, positions and initiatives we are taking. This role will bridge the gap between legal requirements and technical implementation and will build the tools, tests, and controls that put them into practice. This is a hands-on role with high visibility and a real opportunity to shape a growing program., * Privacy risk assessments: Integrate privacy reviews, including privacy impact assessments (PIAs) and privacy threat modeling, into the existing security intake process so that privacy risks are identified early, both for new vendors and for facilities before they are onboarded without duplicating assessments or slowing the business down. * Incident response: Work alongside the security team during incidents, assessing privacy impact in parallel with the technical investigation. Analyze impacted PHI and PII to support fast decision-making and regulatory notification analysis. * Privacy by design: Get involved early in the planning of new systems, products, and initiatives. Working with business and technology teams, this role will identify privacy risks and implement privacy-by-design patterns and data minimization controls such as collecting only the data that's needed, limiting who can access it, setting retention rules, and capturing consent where required, so privacy is built in from day one rather than added later. * Regulatory translation: Interpret what privacy laws such as UK GDPR, HIPAA, CCPA, and other U.S. state privacy laws require in practice, and turn those requirements into specific technical controls and system settings. Examples include access restrictions, data retention and deletion rules, consent capture, and automated checks that confirm we stay compliant over time. * Data governance: Lead and maintain critical initiatives such as data inventories, data mapping, data classification (including distinguishing PHI from PII), and our OneTrust implementation, keeping them current as the business evolves. * Web consent and marketing privacy controls: Configure and maintain privacy controls across Welltower's websites and marketing technology. This includes consent and cookie management in OneTrust, tag and pixel governance, honoring browser opt-out signals such as Global Privacy Control, and making sure consent preferences carry through to analytics, CRM and advertising platforms. Run regular scans and testing to confirm these controls keep working as sites and vendors change, especially on pages where tracking could expose health or other sensitive information. * Privacy operations: Handle the day-to-day technical work that keeps our privacy program running, including: reviewing vendors' privacy and data handling practices as part of procurement; monitoring consent preferences and website cookies; tagging and classifying data (for example, identifying PHI versus PII); analyzing the data involved in potential breaches; and building out role-based access controls (RBAC) so employees can access only the data they need for their roles. * Privacy automation and technical controls: Build and automate the technical side of the privacy program using Python or similar program languages. That means connecting data subject request workflows to the systems where data lives, running automated data discovery and classification, and working with Data Engineering and Security to put in place safeguards such as masking, encryption, and retention and deletion jobs. Manage code and configuration in GitHub, build privacy check into CI/CD pipelines, and use Infrastructure as Code (IaC) to apply privacy controls consistently across environments. Write repeatable tests and scripts that confirm privacy requirements are still being met after system changes and releases. OTHER DUTIES Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of this employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.