DCSC Automation Specialist at Cloudflare · LumiJobs

Responsibilities

Portal Automation & User List Extraction
Browser Automation: Design and maintain automated scripts (Playwright, Puppeteer, or equivalent) that log into vendor data center portals, extract user access lists, and feed structured output into the DCSC Portal and comparison pipelines replacing manual portal-by-portal data collection across 105+ portals covering 338+ sites.
Resilience & Coverage: Build fallback handling for portals that block or rate-limit automated access; document exceptions and maintain a coverage registry tracking automation status per portal.
Scheduled Execution: Operationalize extraction jobs on a recurring cadence aligned to QAR and MAR cycles, with alerting for failures and drift.
ACL Reconciliation & Diff Engine
Automated Comparison: Build tooling that ingests portal-extracted user lists and compares them against the master Access Control List (ACL), automatically surfacing discrepancies: users present in a portal but absent from the ACL, users on the ACL without active portal access, and role or access-level mismatches.
Exception-Only Output: Route confirmed discrepancies directly to pre-populated Jira tickets for human review and action, eliminating the need for coordinators to perform full manual review of every user record each quarter.
Audit Trail: Ensure all comparison runs produce immutable, timestamped records suitable for SOC 2, ISO 27001, and FedRAMP evidence requirements.
Attestation & Evidence Automation
Attestation Module: Own and extend the attestation workflow within the DCSC Portal, including automated cycle triggering, manager notification, time-stamped confirmation capture, and exception escalation, replacing manual screenshot-based evidence gathering.
Evidence Package Builder: Build automated pipelines that compile audit-ready evidence packages for SOC 2, ISO 27001, FedRAMP, ISMAP, and IRAP control cycles, pulling attestation logs, portal extraction results, diff reports, and correspondence into structured packages keyed to specific control IDs.
GRC Alignment: Work directly with GRC counterparts to validate that automated evidence formats meet auditor and regulatory requirements before deployment.

DCSC Automation Specialist

Responsibilities

Benefits

Company

Cloudflare

More roles at Cloudflare