DCSC Automation Specialist

Webhosting; Austin, Northern (TX, KY); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Cloudflare is seeking an Automation Specialist to transform how the Data Center Security Compliance (DCSC) team operates. Based in Austin in a hybrid, full-time role, you will design and run AI-assisted automated workflows to replace manual data gathering and reconciliation, focusing on QAR/MAR cycles and audit evidence packages.

You will own the DCSC operational tooling roadmap, work with coordinators and automation developers, and build scalable, compliant automation across portals, ACL diffs,

Qualifications

• Strong scripting and data wrangling capabilities.
• Experience integrating LLM APIs into production workflows.
• Ability to map end-to-end automation opportunities and ship incremental tooling.

Responsibilities

• Portal Automation & User List Extraction with robust error handling.
• Automate evidence packages and attestation workflows for SOC 2/ISO 27001/FedRAMP.
• Design AI-assisted anomaly detection, triage, and Jira-driven action checklists.
• Own tooling roadmap and platform stewardship for the DCSC Portal.
• Interface with GRC and ITSM systems to ensure audit-ready outputs.

Skills

TypeScript proficiency

LLM integration

Data engineering fundamentals

API & workflow integration

AI/Automation design

Tools

Jira

Job description

Cloudflare ·United States, Atlanta, GA / Austin, TX / Denver, CO / Seattle, WA / Washington, DC

Hybrid Full-time Not specified Infrastructure

Job Description

Available Locations: Austin

Position Overview

Cloudflare is looking for an Automation Specialist to transform how our global Data Center Security Compliance (DCSC) team operates. This critical role is part of the Infrastructure Operations organization, which is responsible for building, scaling, and running Cloudflare’s data center and network infrastructure across 700+ sites worldwide.

The DCSC team manages physical access control and compliance auditing across one of the most complex and distributed infrastructure footprints in the industry, spanning more than 105 vendor portals, hundreds of non-portal carrier-neutral and edge partner sites, and multiple regulatory frameworks including SOC 2, ISO 27001, FedRAMP, ISMAP, and IRAP. The operational burden of this work is substantial and largely manual: user lists are pulled by hand, access control lists are reconciled by eye, evidence packages are assembled ticket by ticket, and attestation cycles consume weeks of coordinator time every quarter.

This role exists to change that. The DCSC Automation -Specialist will design, build, and operate AI-assisted and automated workflows that eliminate the most time-consuming manual work in the DCSC operating model, freeing compliance coordinators to focus on exception handling, stakeholder relationships, and regulatory judgment rather than data gathering and reconciliation.

This is a builder role. You will interview the team to understand each workflow, identify the highest-leverage automation targets, and ship tooling that demonstrably reduces the time it takes to close a QAR cycle, produce an audit evidence package, or manage a batch of access provisioning requests. You will work in close partnership with the DCSC coordinators, and existing automation developers, and will own the DCSC operational tooling roadmap.

Key Responsibilities

• Portal Automation & User List Extraction
• Resilience & Coverage: Build fallback handling for portals that block or rate-limit automated access; document exceptions and maintain a coverage registry tracking automation status per portal.
• Scheduled Execution: Operationalize extraction jobs on a recurring cadence aligned to QAR and MAR cycles, with alerting for failures and drift.
• Automated Comparison: Build tooling that ingests portal-extracted user lists and compares them against the master Access Control List (ACL), automatically surfacing discrepancies: users present in a portal but absent from the ACL, users on the ACL without active portal access, and role or access-level mismatches.
• Exception-Only Output: Route confirmed discrepancies directly to pre-populated Jira tickets for human review and action, eliminating the need for coordinators to perform full manual review of every user record each quarter.
• Audit Trail: Ensure all comparison runs produce immutable, timestamped records suitable for SOC 2, ISO 27001, and FedRAMP evidence requirements.
• Attestation Module: Own and extend the attestation workflow within the DCSC Portal, including automated cycle triggering, manager notification, time-stamped confirmation capture, and exception escalation, replacing manual screenshot-based evidence gathering.
• Evidence Package Builder: Build automated pipelines that compile audit-ready evidence packages for SOC 2, ISO 27001, FedRAMP, ISMAP, and IRAP control cycles, pulling attestation logs, portal extraction results, diff reports, and correspondence into structured packages keyed to specific control IDs.
• GRC Alignment: Work directly with GRC counterparts to validate that automated evidence formats meet auditor and regulatory requirements before deployment.
• AI-Assisted Anomaly Detection & Triage
• Access Pattern Analysis: Implement LLM-based review passes over QAR cycle output to surface patterns warranting human escalation: former employees retaining access, access creep over time, dormant accounts, and anomalous role assignments across sites.
• Ticket Intelligence: Build automation that reads incoming Jira onboarding and offboarding tickets and generates structured, portal-specific action checklists reducing coordinator cognitive load and preventing missed steps across multi-portal provisioning workflows.
• Continuous Improvement: Monitor automation output quality over time, retrain or recalibrate models as portal structures change, and maintain a feedback loop with coordinators on false positives and missed detections.
• DCSC Portal Ownership & Tooling Roadmap
• Platform Stewardship: Own the DCSC Portal as the operational runtime for all automation and workflow tooling ensuring it remains stable, documented, and usable by coordinators without engineering support for day-to-day tasks.
• Roadmap Management: Maintain a prioritized backlog of automation opportunities, assessed by time savings, compliance impact, and implementation complexity; present quarterly progress and priorities to DCSC leadership.
• Documentation: Produce runbooks for every automation, ensuring that no operational capability lives only in one person’s head or on a local machine.
• TypeScript Proficiency: Strong skills for scripting, data wrangling, structured file I/O, and API integration. Ability to write maintainable, documented code that non-engineers can operate.
• LLM Integration: Hands-on experience integrating LLM APIs (OpenAI, Anthropic, Google, or equivalent) into production workflows for classification, drafting, summarization, or anomaly detection tasks.
• Data Engineering Fundamentals: Comfort working with structured and semi-structured data at scale, diffing datasets, normalizing inconsistent formats, and producing clean outputs for downstream audit use.
• API & Workflow Integration: Experience building integrations with ticketing or ITSM systems (Jira preferred) via REST API, including automated ticket creation, status updates, and attachment handling.
• Systems Thinking: Ability to map an end-to-end manual workflow, identify the highest-leverage automation insertion points, and ship incrementally without waiting for a perfect solution.
• Workflow Archaeology: Comfortable extracting process knowledge from subject-matter experts through structured interviews turning tribal knowledge into documented, automatable workflows.
• Bias Toward Simplicity: Strong product intuition for the minimum viable automation that delivers real time savings, rather than over-engineering for edge cases.
• Compliance Awareness: Appreciation for the stakes of accuracy in a compliance context, understanding that an incorrect ACL diff or a missing evidence artifact has real audit consequences.

What Makes Cloudflare Special?

We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.

Project Galileo : Since 2014, we’ve equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers–at no cost.

Athenian Project : In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we’ve provided services to more than 425 local government election websites in 33 states.

1.1.1.1 : We released 1.1.1.1 to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use – it is the first consumer-focused service Cloudflare has ever released. Here’s the deal – we don’t store client IP addresses never, ever. We will continue to abide by our privacy commitment and ensure that no user data is sold to advertisers or used to target consumers.

Sound like something you’d like to be a part of? We’d love to hear from you!

Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process.

This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license.

Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person’s, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer.

Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at [e-mail] or via mail at 101 Townsend St. San Francisco, CA 94107.