Job Description: Software Developer, DPDP Compliance Platform
About the role
We are hiring a Software Developer to design and build a software platform that helps organisations comply with India's Digital Personal Data Protection (DPDP) Act, 2023 and the rules made under it. You will turn legal obligations into working product: consent flows, data principal rights handling, breach workflows and audit-ready records.
Detail
Information
Title
Software Developer (DPDP Compliance Platform)
Reports to
CEO
Location
Gurgaon
Employment type
Full-time
Experience
1-2years in software development
Team
Works daily with privacy lawyers and compliance consultants
About us
Aegis Compliance Tech is a data privacy and compliance firm that helps Indian and global organisations meet their DPDP obligations. We combine hands-on legal and regulatory expertise with technology, and we are building a product that automates privacy compliance end to end.
What you will build
The platform covers the core obligations of a Data Fiduciary under the DPDP Act:
• Consent management: itemised notices, multilingual consent capture, withdrawal, and a tamper-evident consent ledger
• Data principal rights: intake and tracking of access, correction, erasure and grievance requests against statutory timelines
• Data discovery and mapping: scanning of databases, SaaS tools and files to build a Record of Processing Activities (RoPA) and data inventory
• Breach management: incident logging, severity assessment and notification workflows for the Data Protection Board and affected individuals
• Children's data: age gating and verifiable parental consent flows
• Retention and erasure: purpose-based retention rules with automated deletion and proof of erasure
• Assessments and audit: DPIA templates, vendor and processor tracking, cross-border transfer records, and exportable audit evidence
• Dashboards and reporting: compliance posture scoring for DPOs and leadership
Key responsibilities
• Translate DPDP Act and Rules requirements, with input from legal and privacy experts, into product specifications and technical designs
• Design and build scalable backend services, APIs and a responsive web front end for the modules above
• Architect for security first: encryption, role-based access control, audit logging, data minimisation and tenant isolation
• Build connectors to common client systems such as CRMs, ERPs, cloud databases, and HR and marketing tools
• Integrate AI and automation features, for example data classification, policy drafting assistance and request triage, with human review where it matters
• Write clean, tested, documented code; own CI/CD, monitoring and release quality
• Support client onboarding, security questionnaires and technical due diligence
• Review the product against regulatory updates and clarifications, and adapt it quickly
Required qualifications
• Bachelor's degree in Computer Science, IT or a related field, or equivalent practical experience
• 4 to 8 years building production SaaS or enterprise software
• Strong in at least one backend language (Python, Node.js/TypeScript, Java or Go) and in REST or GraphQL API design
• Solid front-end skills in React or a comparable framework
• Experience with relational and NoSQL databases (PostgreSQL, MongoDB) and a major cloud (AWS, Azure or GCP)
• Working knowledge of application security: OWASP Top 10, secure authentication and authorisation, encryption at rest and in transit
• Ability to read a legal or regulatory requirement and turn it into clear user stories and system design
• Clear written communication, and comfort working with non-technical colleagues
Preferred qualifications
• Prior work on privacy, GRC, consent management, identity or data governance products
• Familiarity with GDPR, ISO 27001, SOC 2 or the DPDP Act and Rules
• Experience with data discovery or classification, including NLP or LLM-based approaches
• Experience with multilingual interfaces, including Indian languages
• Exposure to Kubernetes, Terraform and event-driven architectures
• Certifications such as CIPP, CIPT, DCPP or a cloud security credential
Indicative tech stack
Python or Node.js/TypeScript, React, PostgreSQL, MongoDB, Docker and Kubernetes, AWS or Azure, and LLM APIs for AI-assisted features.