DCSC Automation Specialist - Cloudflare

About the Role

Cloudflare is seeking an Automation Specialist to transform the operations of our global Data Center Security Compliance (DCSC) team. You will be responsible for designing, building, and operating AI-assisted workflows that eliminate manual tasks, allowing our compliance coordinators to focus on high-level regulatory judgment and stakeholder management.

This is a builder role within our Infrastructure Operations organization, which manages 700+ sites worldwide. You will own the DCSC operational tooling roadmap and work closely with coordinators to identify and automate high-leverage targets.

Key Responsibilities

Portal Automation & User List Extraction

• Browser Automation: Develop and maintain scripts (Playwright, Puppeteer) to extract user access lists from 105+ vendor portals.
• Resilience: Implement fallback handling for rate-limited portals and maintain a coverage registry.
• Execution: Operationalize extraction jobs with alerting for failures and drift.

ACL Reconciliation & Diff Engine

• Automated Comparison: Build tools to compare portal-extracted lists against master Access Control Lists (ACLs).
• Exception Handling: Route discrepancies directly to Jira tickets for human review.
• Audit Trail: Ensure all processes produce immutable, timestamped records for SOC 2, ISO 27001, and FedRAMP compliance.

Attestation & Evidence Automation

• Workflow Ownership: Extend the DCSC Portal to automate attestation cycles and evidence gathering.
• Package Building: Create pipelines to compile audit-ready evidence packages keyed to specific control IDs.

AI-Assisted Anomaly Detection

• Pattern Analysis: Use LLMs to surface anomalous access patterns, dormant accounts, and role creep.
• Ticket Intelligence: Automate the generation of portal-specific action checklists from Jira tickets.

Desirable Skills & Experience

• Automation Engineering: Proven experience with browser automation (Playwright, Puppeteer, Selenium) and handling dynamic web content.
• TypeScript Proficiency: Strong scripting skills for data wrangling and API integration.
• LLM Integration: Hands-on experience integrating LLM APIs (OpenAI, Anthropic) into production workflows.
• Data Engineering: Ability to normalize inconsistent data formats and work with structured datasets.
• Systems Thinking: Ability to map manual workflows and ship incremental, high-leverage automation.
• Compliance Awareness: Understanding of evidence integrity and regulatory requirements (SOC 2, FedRAMP, ISO 27001).

Soft Skills

• Strong communication skills for explaining technical tradeoffs to non-technical stakeholders.
• High tolerance for ambiguity and a drive to solve problems from scratch.
• Bias toward simplicity and minimum viable automation.