GRC Engineer: AI-Driven Security & Compliance Architect

Webhosting; Austin (TX); On-site; USD 140,000 - 210,000; Full time

Benefits offered by this job

Equity plan

Job summary

Cloudflare is seeking a Security Governance, Risk and Compliance engineer to build automated, AI-enabled governance and guardrails across the global network. You will design and implement agentic workflows with deterministic controls, driving secure, compliant deployment across engineering teams.

The role emphasizes automation, IaC/PaC, and cross-functional collaboration with Legal, Finance, and Engineering, ensuring the default state of security for developers.

Qualifications

• 5+ years of experience in security, compliance, automation, or engineering in a fast-paced environment.
• The Builder Mindset: building technical solutions to complex problems, preferring automation over manual work.
• AI Mastery: designing or implementing AI-powered automation and agentic workflows with governance.
• Compliance-as-Code: strong Infra as Code and Policy as Code experience to enforce guardrails before deployment.
• Driven by curiosity and empathy, delivering high-quality outcomes and supporting peers.

Responsibilities

• Develop and implement automated GRC solutions integrated with security, engineering, and AI tools.
• Architect and maintain a governance framework for safe deployment of autonomous AI agents.
• Support security assessments (SOC 2, ISO 27001, PCI DSS, FedRAMP) through automated drift detection and compliant configurations.
• Collaborate with Legal, People, Engineering, and Finance to embed security into product development and operations.

Skills

Security & Compliance

Automation

AI Governance

Infrastructure as Code

Policy as Code

Cross-functional collaboration

Tools

Terraform

Pulumi

OPA

Rego

Job description

Cloudflare is seeking a Security Governance, Risk and Compliance engineer to build automated, AI-enabled governance and guardrails across the global network. You will design and implement agentic workflows with deterministic controls, driving secure, compliant deployment across engineering teams.

The role emphasizes automation, IaC/PaC, and cross-functional collaboration with Legal, Finance, and Engineering, ensuring the default state of security for developers.