This Principal Product Manager role oversees a developer-first compliance infrastructure platform. You will own the end-to-end strategy and execution for a regulation-agnostic engine that turns complex global laws into technical primitives.
What you’d own
CDK product line (adoption, revenue, and expansion)
Core abstractions like permission strings and jurisdictional rule engines
Developer tools including APIs, SDKs, and drop-in widgets
Product strategy for new verticals like AI and regulated commerce
Who it’s for
A fit if you…
✓You have 8+ years of experience owning technically complex infrastructure or developer tools.
✓You have experience shipping products against strict regulations (e.g., COPPA, GDPR-K).
✓You can navigate system architecture tradeoffs and read API documentation.
✓You prefer owning the 'how' and 'why' of a build rather than just managing a backlog.
Not for you if…
✗You prefer a clear playbook over high-ambiguity environments where you must write the rules.
✗You want to delegate execution entirely and focus only on high-level strategy.
✗You prefer working in a vacuum without needing to align across Legal, Engineering, and GTM.
Reading between the lines
The phrase 'run it like its own business' implies you will have significant autonomy but also full accountability for P&L-style metrics like revenue and conversion.
The requirement to 'own the build' including 'in-the-weeds calls with engineering' suggests a very hands-on, technical execution style rather than a purely visionary role.
The mention of 'no playbook' implies you will be expected to build processes from scratch while simultaneously shipping product.
Not sure this one is for you? See the best-fit roles across 1,522 open PM roles.
Paste your resume — it runs in your browser. Free, no signup, nothing uploaded.
Location Type: Remote
Location: United States; Seattle
Employment Type: FullTime
Department: Product, Design & Engineering
COMPANY OVERVIEW:
k-ID is building the age aware internet, where kids and teens can access technology in ways that are safer, more private, and appropriate for their age, while platforms and games can meet complex age related requirements across global markets.
Our platform helps developers understand user age, configure age appropriate experiences, manage parental consent, and stay aligned with fast changing global laws and regulations. We are building compliance infrastructure for the internet: developer first, privacy preserving, and designed to make complex regulatory obligations easier to operationalize at scale.
JOB SUMMARY:
CDK is k-ID's compliance engine. It turns regulation into developer primitives – age assurance, parental consent, permissions, jurisdictional rule resolution, entitlements – that any platform can configure in Compliance Studio, power with our regulatory intelligence engine (neimo), and enforce at runtime through clean APIs and drop-in widgets.
Today CDK is pointed at the fastest-moving regulatory category on earth: child safety and online safety law. But the engine is regulation-agnostic by design. The same machinery that resolves what a 13-year-old can do in Brazil resolves an age-restricted purchase, an AI-companion safeguard, or a rule that doesn't exist yet. That's the premise – and it's why platforms across gaming, social, AI, and commerce build on CDK, and why compliance is becoming infrastructure the way payments became an API.
We're hiring a Product Lead – a principal-level role – to own CDK end-to-end and run it like its own business. There is no playbook for this product; you will write it. You treat CDK as a platform, not a feature: you see the pattern across enterprise requests and build the abstraction, not the one-off, and you make global regulatory complexity disappear for the developer integrating you in an afternoon.
This is not a backlog-grooming role. You'll be simultaneously in the weeds on product behavior intricacies and driving overall business strategy and direction.
KEY RESPONSIBILITIES:
You run CDK like its own business. You're measured on outcomes, not output – adoption, conversion, expansion, and reliability, not specs written or features shipped – and you're the single point of accountability for those numbers across Legal, Engineering, Design, GTM, and Customer Success.
- Grow CDK as a product line. Own its arc from configuration tool to the compliance platform others build on, and the adoption, revenue, and expansion that prove it. What you build, defer, and kill is judged against that outcome, not a feature backlog.
- Land new verticals. Turn the regulation-agnostic engine into shipped revenue in new categories – AI, regulated commerce, whatever's next – by building primitives that generalize instead of one-offs per customer.
- Define the primitive. Identify the core abstractions that make CDK genuinely differentiated (permission strings, jurisdictional rule engines, consent orchestration) and partner with engineering to build them.
- Run the pod, not just the roadmap. You own the "what" and the "why," then you own the build – the cadence, the unblocking, the in-the-weeds calls with engineering, not a deck you hand off. Pure strategists who delegate execution won't last here; neither will pure executors who don't want to own the bet.
- Keep it unbreakable at scale. CDK enforces compliance for tens of millions of users; staying correct as the law shifts underneath is an outcome you own with engineering, not a problem you hand to them.
MINIMUM QUALIFICATIONS:
- 8+ years of product management experience, with a track record of owning technically complex platforms, infrastructure, or developer tools.
- Exceptional product and operational judgment in high-ambiguity environments.
- The ability to read API documentation, engage on system architecture tradeoffs, and think in systems.
- A productization instinct: you understand the difference between "one customer wants this" and "the market needs this."
- Extreme speed and clarity in communication, proactively sharing status, blockers, and tradeoffs with leadership.
- World-class product taste and strong opinions on what great developer and end-user platforms look like.
- You hold alignment across Legal, Engineering, GTM, and customers without waiting for consensus – and you say no well.
PREFERRED QUALIFICATIONS:
- You've shipped product against actual regulation, such as children's privacy or online safety (COPPA, GDPR-K, the UK Online Safety Act, the DSA, Australia's Online Safety Act), or an adjacent regime like KYC, payments, or restricted goods – and can say exactly what your product had to change because of it.
- You've owned a rules or policy engine where the same input resolves differently by jurisdiction, age, or risk level and you know how hard it is to keep that correct as the law keeps moving.
- You've built verifiable parental consent, age assurance / estimation, or age-gating flows and you've moved completion rates through a multi-step funnel, not just shipped the flow.
- You've owned a developer product (APIs, SDKs, or drop-in widgets) and measured yourself on integration time and time-to-first-value, not feature count.
- You've worked with config-as-code, entitlement systems, or versioned configuration (branches, diffs, test → live promotion), and you know the difference between hardcoding rules and building systems that adapt.
WHY JOIN K-ID?
You'll own a category that didn't exist three years ago and will be legally mandated in 50+ countries within five – at the intersection of global regulation, platform economics, developer experience, and child safety, with a team deep in law, policy, engineering, and product.
CDK is already in production with some of the largest gaming and social platforms on earth. The regulatory tailwinds are accelerating, not slowing. Every new law passed is new product surface area for you to own.
You'll report directly to the Head of Product, work alongside a team that includes, trust & safety leaders, legal experts, designers and engineers who've built compliance infrastructure at scale.
WHAT WE OFFER:
- Competitive salary and Employee Stock Ownership Plan (ESOP) – real participation in the upside.
- Comprehensive health coverage – medical, dental, and vision, plus wellbeing support.
- Direct work with founders and product leadership, and exposure to the world's largest platforms as they ship on you.
- A collaborative, low-politics, trust-based culture – building technology that makes the internet safer for kids without making it worse for everyone else.
Applicants Privacy Policy https://k-id.com/job-applicants-privacy-notice
k-ID builds an age-assurance infrastructure layer that lets online services figure out how old their users are and adapt the experience accordingly, in a privacy-preserving and jurisdiction-aware way. Game studios, social apps, and other platforms use it to comply with a fast-growing thicket of child-safety laws (COPPA, the UK Online Safety Act, Australia's under-16 social media ban, Brazil's ECA Digital) by toggling features like chat, ads, in-app purchases, and parental consent by market. It sells to developers and platforms, and counts companies like Discord and Quora among its users. The founding team comes from Meta, Google, EA, Take-Two, and Netflix, and the company runs as a remotely distributed team.
We use analytics cookies to measure how the site is used. See the privacy policy.
Privacy preferences
Choose what may be stored on this device. You can change this any time
from “Privacy preferences” in the footer, and the privacy policy explains each one.