{"id":3161926,"url":"https://alion.io/job/cloudflare-dcsc-automation-specialist","title":"DCSC Automation Specialist","company":{"id":1532,"name":"Cloudflare","domain":"cloudflare.com","url":"https://alion.io/company/cloudflare","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":80,"open_postings":83,"ghost_share":0.024,"stale_share":0.723,"repost_share":0.048,"time_to_fill_p50_days":59,"computed_at":"2026-10-31T05:58:55Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":null,"employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Atlanta, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":136000,"max":187000,"currency":"USD","period":"year","gross":null,"usd_annual":187000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":true,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Cloudflare","optional":false},{"name":"FedRAMP","optional":false},{"name":"ISO 27001","optional":false},{"name":"Jira","optional":false},{"name":"LLM","optional":false},{"name":"Playwright","optional":false},{"name":"SOC 2","optional":false},{"name":"Structured Outputs","optional":false},{"name":"Anthropic","optional":true},{"name":"DNS","optional":true},{"name":"Galileo","optional":true},{"name":"ITSM","optional":true},{"name":"OpenAI","optional":true},{"name":"Power Automate","optional":true},{"name":"Rest API","optional":true},{"name":"Selenium","optional":true},{"name":"TypeScript","optional":true},{"name":"UiPath","optional":true}],"status":"live","first_seen_at":"2026-08-28T10:14:26Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-11-01T00:22:57Z","board_verified":true,"closed_at":null,"days_open":64,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":64},"description":"About Us\nAt Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company.\nAt Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a \"normalized\" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in.\nAvailable Locations:\nAustin, TX\nAtlanta, GA\nDenver, CO\nSeattle, WA\nWashington, DC \nApplication Deadline: December 16, 2026\nPosition Overview\nCloudflare is looking for an Automation Specialist to transform how our global Data Center Security Compliance (DCSC) team operates. This critical role is part of the Infrastructure Operations organization, which is responsible for building, scaling, and running Cloudflare's data center and network infrastructure across 700+ sites worldwide.\nThe DCSC team manages physical access control and compliance auditing across one of the most complex and distributed infrastructure footprints in the industry, spanning more than 105 vendor portals, hundreds of non-portal carrier-neutral and edge partner sites, and multiple regulatory frameworks including SOC 2, ISO 27001, FedRAMP, ISMAP, and IRAP. The operational burden of this work is substantial and largely manual: user lists are pulled by hand, access control lists are reconciled by eye, evidence packages are assembled ticket by ticket, and attestation cycles consume weeks of coordinator time every quarter.\nThis role exists to change that. The DCSC Automation -Specialist will design, build, and operate AI-assisted and automated workflows that eliminate the most time-consuming manual work in the DCSC operating model, freeing compliance coordinators to focus on exception handling, stakeholder relationships, and regulatory judgment rather than data gathering and reconciliation.\nThis is a builder role. You will interview the team to understand each workflow, identify the highest-leverage automation targets, and ship tooling that demonstrably reduces the time it takes to close a QAR cycle, produce an audit evidence package, or manage a batch of access provisioning requests. You will work in close partnership with the DCSC coordinators, and existing automation developers, and will own the DCSC operational tooling roadmap.\nKey Responsibilities\n Portal Automation & User List Extraction\nBrowser Automation: Design and maintain automated scripts (Playwright, Puppeteer, or equivalent) that log into vendor data center portals, extract user access lists, and feed structured output into the DCSC Portal and comparison pipelines replacing manual portal-by-portal data collection across 105+ portals covering 338+ sites.\nResilience & Coverage: Build fallback handling for portals that block or rate-limit automated access; document exceptions and maintain a coverage registry tracking automation status per portal.\nScheduled Execution: Operationalize extraction jobs on a recurring cadence aligned to QAR and MAR cycles, with alerting for failures and drift.\n ACL Reconciliation & Diff Engine\nAutomated Comparison: Build tooling that ingests portal-extracted user lists and compares them against the master Access Control List (ACL), automatically surfacing discrepancies: users present in a portal but absent from the ACL, users on the ACL without active portal access, and role or access-level mismatches.\nException-Only Output: Route confirmed discrepancies directly to pre-populated Jira tickets for human review and action, eliminating the need for coordinators to perform full manual review of every user record each quarter.\nAudit Trail: Ensure all comparison runs produce immutable, timestamped records suitable for SOC 2, ISO 27001, and FedRAMP evidence requirements.\nAttestation & Evidence Automation\nAttestation Module: Own and extend the attestation workflow within the DCSC Portal, including automated cycle triggering, manager notification, time-stamped confirmation capture, and exception escalation, replacing manual screenshot-based evidence gathering.\nEvidence Package Builder: Build automated pipelines that compile audit-ready evidence packages for SOC 2, ISO 27001, FedRAMP, ISMAP, and IRAP control cycles, pulling attestation logs, portal extraction results, diff reports, and correspondence into structured packages keyed to specific control IDs.\nGRC Alignment: Work directly with GRC counterparts to validate that automated evidence formats meet auditor and regulatory requirements before deployment.\nAI-Assisted Anomaly Detection & Triage\nAccess Pattern Analysis: Implement LLM-based review passes over QAR cycle output to surface patterns warranting human escalation: former employees retaining access, access creep over time, dormant accounts, and anomalous role assignments across sites.\nTicket Intelligence: Build automation that reads incoming Jira onboarding and offboarding tickets and generates structured, portal-specific action checklists reducing coordinator cognitive load and preventing missed steps across multi-portal provisioning workflows.\nContinuous Improvement: Monitor automation output quality over time, retrain or recalibrate models as portal structures change, and maintain a feedback loop with coordinators on false positives and missed detections.\nDCSC Portal Ownership & Tooling Roadmap\nPlatform Stewardship: Own the DCSC Portal as the operational runtime for all automation and workflow tooling ensuring it remains stable, documented, and usable by coordinators without engineering support for day-to-day tasks.\nRoadmap Management: Maintain a prioritized backlog of automation opportunities, assessed by time savings, compliance impact, and implementation complexity; present quarterly progress and priorities to DCSC leadership.\nDocumentation: Produce runbooks for every automation, ensuring that no operational capability lives only in one person's head or on a local machine.\nDesirable skills / Experience:\nAutomation Engineering: Demonstrated experience building browser automation (Playwright, Puppeteer, Selenium, or equivalent) against real-world web applications, including handling authentication flows, dynamic content, and anti-bot mitigations.\nTypeScript Proficiency: Strong skills for scripting, data wrangling, structured file I/O, and API integration. Ability to write maintainable, documented code that non-engineers can operate.\nLLM Integration: Hands-on experience integrating LLM APIs (OpenAI, Anthropic, Google, or equivalent) into production workflows for classification, drafting, summarization, or anomaly detection tasks.\nData Engineering Fundamentals: Comfort working with structured and semi-structured data at scale, diffing datasets, normalizing inconsistent formats, and producing clean outputs for downstream audit use.\nAPI & Workflow Integration: Experience building integrations with ticketing or ITSM systems (Jira preferred) via REST API, including automated ticket creation, status updates, and attachment handling.\nSystems Thinking: Ability to map an end-to-end manual workflow, identify the highest-leverage automation insertion points, and ship incrementally without waiting for a perfect solution.\nWorkflow Archaeology: Comfortable extracting process knowledge from subject-matter experts through structured interviews turning tribal knowledge into documented, automatable workflows.\nBias Toward Simplicity: Strong product intuition for the minimum viable automation that delivers real time savings, rather than over-engineering for edge cases.\nCompliance Awareness: Appreciation for the stakes of accuracy in a compliance context, understanding that an incorrect ACL diff or a missing evidence artifact has real audit consequences.\nSoft Skills:\nCommunication: Able to explain automation design decisions and tradeoffs clearly to non-technical stakeholders including compliance coordinators and GRC partners.\nAmbiguity Tolerance: Vendor portals don't come with documentation. Workflows are passed down verbally. You need to be energized by figuring things out from scratch.\nPreferred Qualifications\nExperience with Cloudflare Workers or similar edge compute platforms\nFamiliarity with GRC/compliance frameworks (SOC 2, FedRAMP, ISO 27001) at an operational level - not as an auditor, but enough to understand why evidence integrity matters\nRPA tooling experience (UiPath, Power Automate) as fallback for portals that defeat headless browsers\nPrior work in infrastructure operations, data center, or physical security environments\nExperience building internal tooling or developer-facing portals (not just scripts)\nCompensation\nCompensation may be adjusted depending on work location.\n\nFor Colorado based hires: Estimated annual salary of $136,000 - $187,000.\n\nWashington (Kirkland), and Washington D.C. based hires: Estimated annual salary of $150,000 - $206,000.\nEquity\nThis role is eligible to participate in Cloudflare's equity plan.\nBenefits\nCloudflare offers a complete package of benefits and programs to support you and your family. Our benefits programs can help you pay health care expenses, support caregiving, build capital for the future and make life a little easier and fun! The below is a description of our benefits for employees in the United States, and benefits may vary for employees based outside the U.S.\nHealth & Welfare Benefits\nMedical/Rx Insurance\nDental Insurance\nVision Insurance\nFlexible Spending Accounts\nCommuter Spending Accounts\nFertility & Family Forming Benefits\nOn-demand mental health support and Employee Assistance Program\nGlobal Travel Medical Insurance\nFinancial Benefits\nShort and Long Term Disability Insurance\nLife & Accident Insurance\n401(k) Retirement Savings Plan\nEmployee Stock Participation Plan\nTime Off\nFlexible paid time off covering vacation and sick leave\nLeave programs, including parental, pregnancy health, medical, and bereavement leave\n\nWhat Makes Cloudflare Special?\nWe’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet.\nProject Galileo: Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost.\nAthenian Project: In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states.\n1.1.1.1: We released1.1.1.1 to help fix the fou...","description_format":"text","description_chars":14259,"description_truncated":true,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Dental insurance","Equity","Health insurance","Retirement plans","Vision insurance"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["CDN & Edge Delivery","Cloud Security","DNS Services","Web Security & DDoS Protection"],"lifecycle":[{"event":"open","at":"2026-10-23T16:23:56Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 145 · green card filings: 34","filings_12m":145,"filings_prev_12m":102,"green_card_filings_12m":34,"median_offered_wage_usd":157751,"route":null,"cap_exempt":false,"checked_at":"2026-10-29T16:27:21+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":21,"band":"cold","label":"Long shot","p_open":1,"p_active":0.478,"p_room":0.44,"age_days":63,"expected_fill_days":59,"reasons":["conf:3","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":{"stated_usd_annual":187000,"is_top_pay":true},"html_url":"https://alion.io/job/cloudflare-dcsc-automation-specialist","json_url":"https://alion.io/job/cloudflare-dcsc-automation-specialist.json","meta":{"generated_at":"2026-11-01T03:27:48Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":5359,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1532},"rest":"https://alion.io/mcp/rest/get_company?id=1532"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcloudflare-dcsc-automation-specialist"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcloudflare-dcsc-automation-specialist"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcloudflare-dcsc-automation-specialist"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cloudflare-dcsc-automation-specialist\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcloudflare-dcsc-automation-specialist"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3161926}},{"tool":"search_jobs","arguments":{"company":"cloudflare.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3161926},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}