DCSC Automation Specialist

<div class="content-intro"><h3>About Us</h3> <p>At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.</p> <p>At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.</p></div><p><strong>Available Locations: Austin</strong></p> <p><strong>Position Overview</strong></p> <p>Cloudflare is looking for an Automation Specialist to transform how our global Data Center Security Compliance (DCSC) team operates. This critical role is part of the Infrastructure Operations organization, which is responsible for building, scaling, and running Cloudflare's data center and network infrastructure across 700+ sites worldwide.</p> <p>The DCSC team manages physical access control and compliance auditing across one of the most complex and distributed infrastructure footprints in the industry, spanning more than 105 vendor portals, hundreds of non-portal carrier-neutral and edge partner sites, and multiple regulatory frameworks including SOC 2, ISO 27001, FedRAMP, ISMAP, and IRAP. The operational burden of this work is substantial and largely manual: user lists are pulled by hand, access control lists are reconciled by eye, evidence packages are assembled ticket by ticket, and attestation cycles consume weeks of coordinator time every quarter.</p> <p>This role exists to change that. The DCSC Automation -Specialist will design, build, and operate AI-assisted and automated workflows that eliminate the most time-consuming manual work in the DCSC operating model, freeing compliance coordinators to focus on exception handling, stakeholder relationships, and regulatory judgment rather than data gathering and reconciliation.</p> <p>This is a builder role. You will interview the team to understand each workflow, identify the highest-leverage automation targets, and ship tooling that demonstrably reduces the time it takes to close a QAR cycle, produce an audit evidence package, or manage a batch of access provisioning requests. You will work in close partnership with the DCSC coordinators, and existing automation developers, and will own the DCSC operational tooling roadmap.</p> <p><strong>Key Responsibilities</strong></p> <ol> <li><strong> Portal Automation &amp; User List Extraction</strong></li> </ol> <ul> <li>Browser Automation: Design and maintain automated scripts (Playwright, Puppeteer, or equivalent) that log into vendor data center portals, extract user access lists, and feed structured output into the DCSC Portal and comparison pipelines replacing manual portal-by-portal data collection across 105+ portals covering 338+ sites.</li> <li>Resilience &amp; Coverage: Build fallback handling for portals that block or rate-limit automated access; document exceptions and maintain a coverage registry tracking automation status per portal.</li> <li>Scheduled Execution: Operationalize extraction jobs on a recurring cadence aligned to QAR and MAR cycles, with alerting for failures and drift.</li> </ul> <ol> <li><strong> ACL Reconciliation &amp; Diff Engine</strong></li> </ol> <ul> <li>Automated Comparison: Build tooling that ingests portal-extracted user lists and compares them against the master Access Control List (ACL), automatically surfacing discrepancies: users present in a portal but absent from the ACL, use