Job Description

Posted 5 hours ago

Keystone Recruitment Partners are looking for a highly skilled Cloud Engineer to lead our client's migration from AWS WAF to Cloudflare and to design, deploy, and manage our edge security and Zero Trust environment. This role will take ownership of Cloudflare architecture, security posture, and integration with our AWS infrastructure. This is a fully remote and outside IR35 contract with an initial 3 month engagement.

Key Responsibilities

* Drive the full migration from AWS WAF to Cloudflare WAF, including rule translation, optimisation, testing, and rollout.

* Configure and maintain Cloudflare WAF policies, covering managed rules, custom rules, bot mitigation, and rate‑limiting.

* Deploy and manage Cloudflare Zero Trust and Warp, enabling secure, identity‑based remote access for users and services.

* Set up and optimise Cloudflare DNS, load balancing, and traffic steering to ensure resilient, high‑performance routing.

* Integrate Cloudflare services with AWS environments, including ALB, CloudFront, Route 53, and cloud‑native workloads.

* Implement and enforce edge security controls, including DDoS protection, TLS configuration, and continuous monitoring.

* Diagnose and resolve traffic, performance, and edge‑security issues across Cloudflare and AWS.

* Support Infrastructure‑as‑Code automation, ideally using Terraform, for consistent and scalable deployments.

Required Experience

* Extensive hands‑on experience with Cloudflare WAF, Zero Trust, and Warp, ideally in enterprise or high‑traffic environments.

* Demonstrated experience migrating from AWS WAF to Cloudflare, with strong understanding of rule behaviour and tuning.

* Deep technical knowledge of DNS, TLS, routing, reverse proxies, and CDN architectures.

* Strong AWS background, especially with ALB, CloudFront, Route 53, and security‑related services.

* Experience with Terraform or similar IaC tools is preferred.

* Excellent troubleshooting skills across networking, performance, and security layers.

Contact us as interviews are happening immediately