Cloudflare Consultant

Context

As part of the evolution of the security and application delivery platform for one of our clients, we are looking for a Cloudflare consultant capable of managing the administration, industrialisation, and support of teams across all Cloudflare services used within the company.

The consultant will work on both security aspects and application acceleration and optimisation features. They will also contribute to automating deployments via Infrastructure as Code and participate in integrating new applications behind the Cloudflare platform.

Main Responsibilities

Administration and operation of the Cloudflare platform

• Ensure the operational maintenance of Cloudflare services.

• Manage configuration changes in coordination with project and operational teams.

• Monitor the availability, performance, and security of the platform.

• Participate in incident resolution and remediation actions.

Security of applications exposed on the Internet

• Configure and administer DDoS protection mechanisms.

• Define and maintain WAF rules adapted to different applications.

• Implement and adjust Rate Limiting policies.

• Administer Bot Management features and analyse suspicious behaviours.

• Contribute to the continuous improvement of the security posture of published applications.

Performance and optimisation services

• Configure and optimise CDN services.

• Define caching strategies adapted to business and technical needs.

• Support teams in using Cloudflare Workers.

• Participate in the implementation and operation of Cloudflare Pages when necessary.

• Analyse performance and propose optimisations.

Infrastructure as Code and automation

• Design and maintain Cloudflare deployments via Terraform.

• Industrialise configurations to ensure traceability and reproducibility.

• Participate in integrating deployments into existing CI/CD pipelines.

• Ensure versioning and governance of Cloudflare configurations.

Onboarding new applications

• Support project teams during the integration of new applications behind Cloudflare.

• Define security and performance configurations adapted to each context.

• Conduct impact analyses and technical validations before production deployment.

• Produce the technical documentation necessary for service operation.

Monitoring and reporting

• Set up and maintain monitoring mechanisms for the Cloudflare environment.

• Track performance, availability, and security indicators.

• Produce dashboards and activity reports for technical teams and management.

• Identify trends, anomalies, and improvement opportunities.

Required skills

Cloudflare expertise

Significant experience with several of the following services:

• DDoS Protection

• Web Application Firewall (WAF)

• Rate Limiting

• Bot Management

• CDN

• Cache Rules

• Workers

• Pages

• DNS

• Load Balancing

Infrastructure and automation

• Strong proficiency in Terraform.

• Experience managing infrastructure using Infrastructure as Code.

• Knowledge of Git and CI/CD practices.

• Ability to industrialise configurations at scale.

Security

• Solid knowledge of application security.

• Good understanding of modern web architectures.

• Knowledge of HTTP/HTTPS, TLS, and DNS protocols.

• Ability to analyse threats and define appropriate protection measures.

Operations

• Experience in supervision and monitoring.

• Incident analysis and troubleshooting.

• Documentary rigour and service orientation.

Desired profile

• Experienced or expert consultant with concrete experience in Cloudflare production environments.

• Able to interact with security, infrastructure, network, and development teams alike.

• Autonomous, pragmatic, and results-oriented.

• Good analytical and communication skills.

• Proactive in continuously improving the platform and associated practices.

Expected deliverables

• Maintained and documented Cloudflare configurations.

• Industrialised and versioned Terraform deployments.

• Application integration documentation.

• Supervision dashboards and monitoring reports.

• Security and performance improvement recommendations.