DCSC Automation Specialist

At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code.

Available Locations: Austin

Position Overview

Cloudflare is looking for an Automation Specialist to transform how our global Data Center Security Compliance (DCSC) team operates. This critical role is part of the Infrastructure Operations organization, which is responsible for building, scaling, and running Cloudflare's data center and network infrastructure across 700+ sites worldwide. The DCSC team manages physical access control and compliance auditing across one of the most complex and distributed infrastructure footprints in the industry, spanning more than 105 vendor portals, hundreds of non-portal carrier-neutral and edge partner sites, and multiple regulatory frameworks including SOC 2, ISO 27001, FedRAMP, ISMAP, and IRAP.

The operational burden of this work is substantial and largely manual: user lists are pulled by hand, access control lists are reconciled by eye, evidence packages are assembled ticket by ticket, and attestation cycles consume weeks of coordinator time every quarter. This role exists to change that.

The DCSC Automation Specialist will design, build, and operate AI-assisted and automated workflows that eliminate the most time-consuming manual work in the DCSC operating model, freeing compliance coordinators to focus on exception handling, stakeholder relationships, and regulatory judgment rather than data gathering and reconciliation.

This is a builder role. You will interview the team to understand each workflow, identify the highest-leverage automation targets, and ship tooling that demonstrably reduces the time it takes to close a QAR cycle, produce an audit evidence package, or manage a batch of access provisioning requests. You will work in close partnership with the DCSC coordinators, and existing automation developers, and will own the DCSC operational tooling roadmap.

Key Responsibilities

• Portal Automation & User List Extraction
• Resilience & Coverage: Build fallback handling for portals that block or rate-limit automated access; document exceptions and maintain a coverage registry tracking automation status per portal.
• Scheduled Execution: Operationalize extraction jobs on a recurring cadence aligned to QAR and MAR cycles, with alerting for failures and drift.
• Automated Comparison: Build tooling that ingests portal-extracted user lists and compares them against the master Access Control List (ACL), automatically surfacing discrepancies.
• Exception-Only Output: Route confirmed discrepancies directly to pre-populated Jira tickets for human review and action.
• Audit Trail: Ensure all comparison runs produce immutable, timestamped records suitable for SOC 2, ISO 27001, and FedRAMP evidence requirements.
• Attestation Module: Own and extend the attestation workflow within the DCSC Portal.
• Evidence Package Builder: Build automated pipelines that compile audit-ready evidence packages for SOC 2, ISO 27001, FedRAMP, ISMAP, and IRAP control cycles.
• GRC Alignment: Work directly with GRC counterparts to validate that automated evidence formats meet auditor and regulatory requirements before deployment.
• AI-Assisted Anomaly Detection & Triage
• Access Pattern Analysis: Implement LLM-based review passes over QAR cycle output to surface patterns warranting human escalation.
• Ticket Intelligence: Build automation that reads incoming Jira onboarding and offboarding tickets and generates structured, portal-specific action checklists.
• Continuous Improvement: Monitor automation output quality over time, retrain or recalibrate models as portal structures change.
• DCSC Portal Ownership & Tooling Roadmap
• Platform Stewardship: Own the DCSC Portal as the operational runtime for all automation and workflow tooling.
• Roadmap Management: Maintain a prioritized backlog of automation opportunities.
• Documentation: Produce runbooks for every automation.
• TypeScript Proficiency: Strong skills for scripting, data wrangling, structured file I/O, and API integration.
• LLM Integration: Hands-on experience integrating LLM APIs into production workflows.
• Data Engineering Fundamentals: Comfort working with structured and semi-structured data at scale.
• API & Workflow Integration: Experience building integrations with ticketing or ITSM systems via REST API.
• Systems Thinking: Ability to map an end-to-end manual workflow.
• Workflow Archaeology: Comfortable extracting process knowledge from subject-matter experts.
• Bias Toward Simplicity: Strong product intuition for the minimum viable automation.
• Compliance Awareness: Appreciation for the stakes of accuracy in a compliance context.

Soft Skills:

• Communication: Able to explain automation design decisions and tradeoffs clearly to non-technical stakeholders.
• Ambiguity Tolerance: Energized by figuring things out from scratch.

Preferred Qualifications

• Experience with Cloudflare Workers or similar edge compute platforms.
• Familiarity with GRC/compliance frameworks at an operational level.
• Prior work in infrastructure operations, data center, or physical security environments.
• Experience building internal tooling or developer-facing portals.

Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness.