DCSC Automation Specialist

Cloudflare is looking for an Automation Specialist to transform how its global Data Center Security Compliance (DCSC) team operates. The DCSC team manages physical access control and compliance auditing across one of the most complex and distributed infrastructure footprints in the industry.

The DCSC Automation Specialist will design, build, and operate AI-assisted and automated workflows that eliminate the most time-consuming manual work in the DCSC operating model, freeing compliance coordinators to focus on exception handling, stakeholder relationships, and regulatory judgment rather than data gathering and reconciliation.

Key Responsibilities:

• Portal Automation & User List Extraction
• Browser Automation: Design and maintain automated scripts that log into vendor data center portals, extract user access lists, and feed structured output into the DCSC Portal and comparison pipelines.
• Resilience & Coverage: Build fallback handling for portals that block or rate-limit automated access; document exceptions and maintain a coverage registry tracking automation status per portal.
• Scheduled Execution: Operationalize extraction jobs on a recurring cadence aligned to QAR and MAR cycles, with alerting for failures and drift.
• ACL Reconciliation & Diff Engine
• Automated Comparison: Build tooling that ingests portal-extracted user lists and compares them against the master Access Control List (ACL), automatically surfacing discrepancies.
• Exception-Only Output: Route confirmed discrepancies directly to pre-populated Jira tickets for human review and action, eliminating the need for coordinators to perform full manual review of every user record each quarter.
• Audit Trail: Ensure all comparison runs produce immutable, timestamped records suitable for SOC 2, ISO 27001, and FedRAMP evidence requirements.
• Attestation & Evidence Automation
• Attestation Module: Own and extend the attestation workflow within the DCSC Portal, including automated cycle triggering, manager notification, time-stamped confirmation capture, and exception escalation.
• Evidence Package Builder: Build automated pipelines that compile audit-ready evidence packages for SOC 2, ISO 27001, FedRAMP, ISMAP, and IRAP control cycles.
• GRC Alignment: Work directly with GRC counterparts to validate that automated evidence formats meet auditor and regulatory requirements before deployment.
• AI-Assisted Anomaly Detection & Triage
• Access Pattern Analysis: Implement LLM-based review passes over QAR cycle output to surface patterns warranting human escalation.
• Ticket Intelligence: Build automation that reads incoming Jira onboarding and offboarding tickets and generates structured, portal-specific action checklists.
• Continuous Improvement: Monitor automation output quality over time, retrain or recalibrate models as portal structures change, and maintain a feedback loop with coordinators on false positives and missed detections.
• DCSC Portal Ownership & Tooling Roadmap
• Platform Stewardship: Own the DCSC Portal as the operational runtime for all automation and workflow tooling ensuring it remains stable, documented, and usable by coordinators without engineering support for day-to-day tasks.
• Roadmap Management: Maintain a prioritized backlog of automation opportunities, assessed by time savings, compliance impact, and implementation complexity; present quarterly progress and priorities to DCSC leadership.
• Documentation: Produce runbooks for every automation, ensuring that no operational capability lives only in one person's head or on a local machine.