S. Justin Gengo

[email protected]

Oshkosh, WI

(920) 426-4942

Privacy Engineering | Privacy Architecture | Enterprise Data Governance

Professional Summary

Privacy Engineering and Enterprise Solution Architecture leader with 20+ years of experience designing enterprise digital platforms and translating complex regulatory obligations into implementable technical controls. Expertise in privacy-by-design, DSAR architecture, consumer-data lifecycle controls, OneTrust governance, and global website compliance. Trusted partner to Legal, Privacy, Security, and Engineering teams, with a record of identifying systemic risks, coordinating remediation, and delivering measurable business value.

Core Expertise

Privacy Engineering: Privacy by Design, DSAR, Consumer Data Deletion, Data Minimization, Retention Controls, Identity Resolution, Consent Management, Privacy Risk Assessment

Regulatory & Governance: GDPR, CCPA/CPRA, Global Privacy Governance, Global Privacy Control (GPC), Compliance Monitoring, Audit Readiness, Regulatory Requirements Translation

Platforms & Technologies: OneTrust, Snowflake, Hightouch, SAP CDC, Consumer Identity/CIAM, Sitecore v5–10, C#/.NET, JavaScript, SQL, Azure DevOps, Git/TFS, Jenkins; familiarity with TrustArc, BigID, and Collibra

Architecture & Leadership: Enterprise/Solution Architecture, Secure SDLC, Global Web Platforms, Architecture Reviews, Cross-Functional Risk Resolution, Technical Standards, Reusable Patterns, Stakeholder Alignment

Professional Experience

Kimberly-Clark Corporation — Neenah, WI

October 2011–Present

Lead Solution Architect (Global)

October 2024–Present

  • Advise on privacy architecture and consumer-data controls across enterprise initiatives, including Pegasus (business separation), SAP CDC consumer identity transformation, Snowflake/Hightouch implementation, and DSAR modernization.
  • Helped operationalize the Snowflake/Hightouch DSAR production flow and validate end-to-end deletion; identified remaining control gaps and coordinated remediation with Engineering, Legal, Privacy, Security, and Digital teams.
  • Led technical analysis and remediation planning for linked consumer identities, complete system-wide deletion, data-access gaps, retention, reinsertion risk, and Get My Data processes, defining interim safeguards and Legal decision points.
  • Advance privacy governance across 400+ websites through proactive monitoring, regulatory updates, compliance-risk identification, and audit readiness.
  • Improved OneTrust governance through standardization, account hygiene, and automation, including disabling 1,285 inactive accounts.
  • Apply privacy-by-design principles across DSAR and website initiatives, contributing to a reported reduction of approximately 60% in privacy compliance gaps across 30+ websites.
  • Promoted reusable architecture and development practices, contributing to approximately $800K in projected development savings and $1M+ in website production savings.
  • Contributed privacy architecture expertise to broader organizational risk-reduction efforts associated with an estimated $32M+ in cost avoidance.

Technical Lead / Solutions Architect (North America)

January 2016–September 2024

  • Led solution architecture and delivery across a large portfolio of brand websites, balancing scalability, security, privacy, maintainability, and business needs.
  • Partnered with Legal, Security, Marketing, and regional teams to translate regulatory requirements into technical solutions, including CCPA/CPRA delivery.
  • Led the transition from a homegrown DSAR solution to OneTrust, covering workflow mapping, portal configuration, process design, version upgrades, and regional consultation.
  • Established reusable technical patterns and cross-functional practices that improved delivery consistency, reduced duplication, and supported security and compliance objectives.

Earlier Kimberly-Clark Roles

October 2011–December 2015

Mobile Application Architect; Senior Systems Developer; Technical Specialist; Functional Analyst

  • Progressed through development, analysis, and architecture roles supporting enterprise digital platforms, mobile applications, and business technology initiatives.

Earlier Experience

Avastone Technologies LLC — Little Chute, WI

Web Team Lead

August 2009–October 2011

  • Standardized requirements and shared code libraries; developed an upgrade-safe Ektron administration layer that enabled non-programmers to manage content.

Miles Kimball Inc. — Oshkosh, WI

Web Analyst

April 2007–August 2009

  • Developed web services integrating Microsoft Commerce Server and Dynamics; redesigned checkout workflows to reduce steps and improve the customer experience.

Avastone Technologies LLC — Little Chute, WI

Senior Systems Developer

May 2006–April 2007

  • Upgraded a major medical application from .NET 1.0 to 2.0 and SQL Server 2000 to 2005, improving the platform's performance and reliability.

F+W Publications Inc. — Iola, WI

Web Developer

March 2001–April 2006

  • Built systems for automated advertising placement, shared content management, newsletters, and online surveys.

Personal Software Projects

Time to Fly? — Paramotor Weather & Flyability Planner

fly.justingengo.com

  • Designed and developed a web application integrating external weather data to help paramotor pilots evaluate flying conditions and potential flight windows.

SkyGauge — Apple Watch Altitude-Tracking App

  • Developed an experimental watchOS app using Swift, SwiftData, CoreMotion, and WatchKit to track and record altitude data.

Custom Built Personal CMS & Multi-Site Platform

www.justingengo.com

  • Built and maintain a custom .NET MVC CMS supporting multiple subwebsites from a shared codebase.

Education & Certifications

Education: B.S., University of Wisconsin–Oshkosh

Certifications: Microsoft Certified (70-305) | Sitecore Certified Developer (v5–9, including eCommerce) | Kentico Certified Developer | Ektron Certified Developer

Professional Development

  • Cloudflare TLS Hardening (2025): Migrated personal site from Flexible SSL to Full (Strict) with Origin Certificates, HSTS, and modern TLS configuration, achieving A+ SSL Labs rating.
  • Pluralsight Training (Ongoing): Privacy Engineering, Cloud Security, Threat Modeling, Identity & Access Management.
  • Target Certification: IAPP CIPT (Certified Information Privacy Technologist), in progress.