DCSC Automation Specialist

Cloudflare • San Francisco, CA

73d • Onsite

About The Position

Cloudflare is seeking an Automation Specialist to revolutionize the operations of its global Data Center Security Compliance (DCSC) team. This role is integral to the Infrastructure Operations organization, which is responsible for the development, scaling, and management of Cloudflare's data center and network infrastructure across over 700 sites globally. The DCSC team oversees physical access control and compliance auditing within a highly complex and distributed infrastructure footprint. This includes managing over 105 vendor portals, numerous partner sites, and adhering to multiple regulatory frameworks such as SOC 2, ISO 27001, FedRAMP, ISMAP, and IRAP. The current operational model is heavily manual, involving manual extraction of user lists, visual reconciliation of access control lists, ticket-by-ticket evidence assembly, and time-consuming quarterly attestation cycles. This position is designed to automate these processes. The DCSC Automation Specialist will be responsible for designing, building, and operating AI-assisted and automated workflows to eliminate the most labor-intensive manual tasks within the DCSC operating model. This will allow compliance coordinators to shift their focus from data gathering and reconciliation to exception handling, stakeholder engagement, and regulatory judgment. This is a hands-on builder role where you will collaborate with the team to understand workflows, identify key automation targets, and implement tooling that significantly reduces the time required for tasks like closing a QAR cycle, generating audit evidence packages, or managing access provisioning requests. You will work closely with DCSC coordinators and existing automation developers, and will be instrumental in shaping the DCSC operational tooling roadmap.

Requirements

• Demonstrated experience building browser automation (Playwright, Puppeteer, Selenium, or equivalent) against real-world web applications, including handling authentication flows, dynamic content, and anti-bot mitigations.
• Strong TypeScript skills for scripting, data wrangling, structured file I/O, and API integration.
• Ability to write maintainable, documented code that non-engineers can operate.
• Hands-on experience integrating LLM APIs (OpenAI, Anthropic, Google, or equivalent) into production workflows for classification, drafting, summarization, or anomaly detection tasks.
• Comfort working with structured and semi-structured data at scale, diffing datasets, normalizing inconsistent formats, and producing clean outputs for downstream audit use.
• Experience building integrations with ticketing or ITSM systems (Jira preferred) via REST API, including automated ticket creation, status updates, and attachment handling.
• Ability to map an end-to-end manual workflow, identify the highest-leverage automation insertion points, and ship incrementally.
• Comfortable extracting process knowledge from subject-matter experts through structured interviews.
• Strong product intuition for the minimum viable automation that delivers real time savings.
• Appreciation for the stakes of accuracy in a compliance context.
• Able to explain automation design decisions and tradeoffs clearly to non-technical stakeholders.
• Energized by figuring things out from scratch in ambiguous situations.

Nice To Haves

• Experience with Cloudflare Workers or similar edge compute platforms
• Familiarity with GRC/compliance frameworks (SOC 2, FedRAMP, ISO 27001) at an operational level
• RPA tooling experience (UiPath, Power Automate)
• Prior work in infrastructure operations, data center, or physical security environments
• Experience building internal tooling or developer-facing portals

Responsibilities

• Design and maintain automated scripts (e.g., Playwright, Puppeteer) to log into vendor data center portals, extract user access lists, and feed structured output into comparison pipelines, replacing manual data collection across 105+ portals.
• Build fallback handling for portals that block or rate-limit automated access, document exceptions, and maintain a registry of automation status per portal.
• Operationalize extraction jobs on a recurring cadence with alerting for failures and drift.
• Build tooling to compare extracted user lists against the master Access Control List (ACL), automatically identifying discrepancies.
• Route confirmed discrepancies to pre-populated Jira tickets for human review and action.
• Ensure all comparison runs produce immutable, timestamped records suitable for audit evidence.
• Own and extend the attestation workflow within the DCSC Portal, including automated cycle triggering, manager notification, confirmation capture, and exception escalation.
• Build automated pipelines to compile audit-ready evidence packages for various control cycles, pulling relevant logs and reports.
• Validate automated evidence formats with GRC counterparts to ensure they meet auditor and regulatory requirements.
• Implement LLM-based review passes over cycle output to identify patterns warranting human escalation.
• Build automation to read incoming Jira tickets and generate structured, portal-specific action checklists.
• Monitor automation output quality, retrain or recalibrate models as needed, and maintain a feedback loop with coordinators.
• Own the DCSC Portal as the operational runtime for all automation and workflow tooling, ensuring stability and usability.
• Maintain a prioritized backlog of automation opportunities, assessed by time savings, compliance impact, and implementation complexity.
• Produce runbooks for every automation, ensuring operational capability is well-documented.

Benefits

• Competitive salary and equity
• Comprehensive insurance and wellness plans
• Generous paid time off
• The opportunity to work on a product that impacts millions of users globally
• A culture that values curiosity, iteration, and AI as a partner in problem-solving

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed