Principal Product Manager - Compliance Development Kit (CDK)
Seattle, United StatesAll locationsSeattle, United StatesUnited States Remote
Salary not listedJobFig found this opening at its original source and checks that it remains available.
About the role
CDK is k-ID's compliance engine. It turns regulation into developer primitives – age assurance, parental consent, permissions, jurisdictional rule resolution, entitlements – that any platform can configure in Compliance Studio, power with our regulatory intelligence engine (neimo), and enforce at runtime through clean APIs and drop-in widgets. Today CDK is pointed at the fastest-moving regulatory category on earth: child safety and online safety law. But the engine is regulation-agnostic by design. The same machinery that resolves what a 13-year-old can do in Brazil resolves an age-restricted purchase, an AI-companion safeguard, or a rule that doesn't exist yet. That's the premise – and it's why platforms across gaming, social, AI, and commerce build on CDK, and why compliance is becoming infrastructure the way payments became an API. We're hiring a Product Lead – a principal-level role – to own CDK end-to-end and run it like its own business. There is no playbook for this product; you will write it. You treat CDK as a platform, not a feature: you see the pattern across enterprise requests and build the abstraction, not the one-off, and you make global regulatory complexity disappear for the developer integrating you in an afternoon. This is not a backlog-grooming role. You'll be simultaneously in the weeds on product behavior intricacies and driving overall business strategy and direction. You own the "what" and the "why," then you own the build – the cadence, the unblocking, the in-the-weeds calls with engineering, not a deck you hand off. Pure strategists who delegate execution won't last here; neither will pure executors who don't want to own the bet.
What you'll bring
- 8+ years of product management experience, with a track record of owning technically complex platforms, infrastructure, or developer tools.
- Exceptional product and operational judgment in high-ambiguity environments.
- The ability to read API documentation, engage on system architecture tradeoffs, and think in systems.
- A productization instinct: you understand the difference between "one customer wants this" and "the market needs this."
- Extreme speed and clarity in communication, proactively sharing status, blockers, and tradeoffs with leadership.
- World-class product taste and strong opinions on what great developer and end-user platforms look like.
- You hold alignment across Legal, Engineering, GTM, and customers without waiting for consensus – and you say no well.
- You've shipped product against actual regulation, such as children's privacy or online safety (COPPA, GDPR-K, the UK Online Safety Act, the DSA, Australia's Online Safety Act), or an adjacent regime like KYC, payments, or restricted goods – and can say exactly what your product had to change because of it.
- You've owned a rules or policy engine where the same input resolves differently by jurisdiction, age, or risk level and you know how hard it is to keep that correct as the law keeps moving.
- You've built verifiable parental consent, age assurance / estimation, or age-gating flows and you've moved completion rates through a multi-step funnel, not just shipped the flow.
- You've owned a developer product (APIs, SDKs, or drop-in widgets) and measured yourself on integration time and time-to-first-value, not feature count.
- You've worked with config-as-code, entitlement systems, or versioned configuration (branches, diffs, test → live promotion), and you know the difference between hardcoding rules and building systems that adapt.