Context
The client, a luxury/fashion group, needed to consolidate its B2B and B2C application delivery onto F5 Distributed Cloud. Beyond the platform migration itself, the applications lacked several baseline security capabilities — WAF coverage, rate limiting, bot mitigation, and L7 DDoS protection weren’t consistently applied across the estate.
What I did
- Migrated the full set of B2B and B2C applications onto F5 Distributed Cloud
- Introduced WAF policies, rate limiting, anti-bot controls, and Layer 7 anti-DDoS protection as part of the same rollout, rather than as a separate follow-up phase
- Set up automated web application scanning so newly onboarded applications get baseline security visibility without a manual review step each time
- Managed the entire configuration, application delivery and security policy alike, through Terraform, so every change to production went through version-controlled, reviewable infrastructure code instead of direct dashboard edits
- Owned ongoing management and troubleshooting of the platform post-migration
Outcome
- A previously inconsistent security posture across B2B/B2C applications became a single, uniform baseline applied through the same Terraform-managed pipeline
- New application onboarding follows a repeatable, codified process instead of ad hoc configuration
- Security capabilities (WAF, rate limiting, anti-bot, anti-DDoS) that used to require separate tooling or manual setup are now part of the same managed platform and the same change process
Client name withheld per confidentiality agreement. Architecture and outcomes described are accurate; identifying details have been generalized.