SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Cloudflare is seeking an Automation Specialist to transform Data Center Security Compliance (DCSC) operations within the Infrastructure Operations organization. The DCSC team manages physical access control and compliance auditing across 700+ data center sites worldwide, spanning 105+ vendor portals and multiple regulatory frameworks (SOC 2, ISO 27001, FedRAMP, ISMAP, IRAP). Currently, most work is manual: user lists are extracted by hand, access control lists are reconciled manually, evidence packages are assembled ticket-by-ticket, and attestation cycles consume weeks each quarter.
You will design, build, and operate AI-assisted and automated workflows to eliminate the most time-consuming manual work in the DCSC operating model. This is a builder role focused on shipping tooling that demonstrably reduces cycle time and frees compliance coordinators to focus on exception handling, stakeholder relationships, and regulatory judgment.
Key responsibilities include:
**Portal Automation & User List Extraction**: Design and maintain automated scripts (Playwright, Puppeteer, or equivalent) that log into vendor portals, extract user access lists, and feed structured output into DCSC pipelines, replacing manual data collection across 105+ portals covering 338+ sites. Build resilience and fallback handling for portals that block or rate-limit access. Operationalize extraction jobs on recurring cadences aligned to QAR and MAR cycles with failure alerting.
**ACL Reconciliation & Diff Engine**: Build tooling that compares portal-extracted user lists against the master Access Control List, automatically surfacing discrepancies (users in portal but not ACL, users on ACL without active access, role/access-level mismatches). Route confirmed discrepancies to pre-populated Jira tickets for human review. Ensure all comparison runs produce immutable, timestamped records suitable for SOC 2, ISO 27001, and FedRAMP evidence requirements.
**Attestation & Evidence Automation**: Own and extend the attestation workflow within the DCSC Portal, including automated cycle triggering, manager notification, time-stamped confirmation capture, and exception escalation. Build automated pipelines that compile audit evidence packages, replacing manual screenshot-based gathering.
You will work in close partnership with DCSC coordinators and existing automation developers, owning the DCSC operational tooling roadmap.
