DCSC Automation Specialist
Hybrid
Posted 10d ago
Remote Work Policy
On-site
Categories
Applied AI Engineer
About the job
Cloudflare is seeking an Automation Specialist to revolutionize the operations of its global Data Center Security Compliance (DCSC) team. This role is integral to the Infrastructure Operations organization, which is responsible for the development, scaling, and management of Cloudflare's data center and network infrastructure across over 700 global sites. The DCSC team currently handles physical access control and compliance auditing for a highly complex and distributed infrastructure, involving numerous vendor portals and multiple regulatory frameworks. Much of this work is manual, including data extraction, access control reconciliation, and evidence assembly. This position is designed to automate these time-consuming tasks, enabling compliance coordinators to focus on higher-level activities like exception handling and regulatory judgment.
Responsibilities
- Design and maintain automated scripts (e.g., Playwright, Puppeteer) to log into vendor data center portals, extract user access lists, and feed structured data into DCSC pipelines, replacing manual data collection.
- Build resilience and fallback handling for automated portal access, documenting exceptions and maintaining a coverage registry.
- Operationalize recurring extraction jobs with alerting for failures and drift.
- Develop tooling to ingest extracted user lists and compare them against the master Access Control List (ACL), identifying and surfacing discrepancies.
- Route confirmed discrepancies to pre-populated Jira tickets for human review, eliminating the need for full manual review of user records.
- Ensure all comparison runs produce immutable, timestamped records suitable for audit evidence requirements.
- Own and extend the attestation workflow, including automated cycle triggering, manager notifications, confirmation capture, and exception escalation.
- Build automated pipelines to compile audit-ready evidence packages for various control cycles, integrating attestation logs, extraction results, diff reports, and correspondence.
Requirements
- Experience designing and maintaining automated scripts for web portal interaction.
- Familiarity with tools like Playwright or Puppeteer.
- Experience building automated comparison and reconciliation tooling.
- Experience with ticketing systems like Jira.
- Experience with audit evidence requirements for frameworks such as SOC 2, ISO 27001, and FedRAMP.
- Ability to understand complex workflows and identify automation opportunities.
- Strong problem-solving skills and a builder mindset.
- Excellent communication and collaboration skills to work with compliance coordinators and other developers.