Marc-Antoine Paré

Experience

1. Staff Security Engineer (Privacy Engineering)

   Cruise

   May 2021 — Present

   As the Tech Lead for Cruise Privacy Engineering. I built the foundational systems that enable Cruise to achieve privacy at scale and grew Privacy Engineering from 2 to 12 people, founding the Privacy Infrastructure sub-team along the way. Some notable projects include:* I own Cruise\'s Sensitive Data Map, discovering and classifying personal data across a 14+ PB data warehouse. I gave a talk on this system at PEPR 2022: * I built Cruise\'s Least Access observability platform, which traverses and summarizes complex permissions graphs into topline metrics that quantify risk from over-provisioned access to personal data. Besides guiding senior leadership, this platform also serves as the backbone for Cruise\'s permissions remediation efforts.* I implemented a permissions architecture evolution (OAuth delegated access) across three data processing platforms at Cruise (Looker, dbt, and the in-house Roboflow), both simplifying the process for engineers requesting access to data and greatly reducing the amount of unneeded access to customer personal data.* I broke every major vendor tool for data mapping/cataloguing, leading to the development of an in-house platform for data tagging. I built this platform and have scaled its uptake, uncovering (and fixing) compliance gaps in every system it has been deployed against. Our stack is Python on GCP.