Configure Azure Application Gateway, WAF and DDoS on our subscription

@arifnafees

With over 14 years of experience in System and IT Administration, I bring strong expertise in Azure, Cloud Security, and DevOps. I am skilled in Azure migrations, VNet, Azure Functions, CosmosDB, and Blob Storage—ensuring efficient deployment and configuration of your Application Gateway. My experience in setting up high availability and disaster recovery systems using Veeam Backup & Replication adds reliability to your infrastructure. I also have strong DNS management expertise, allowing me to handle complex configurations, including validation and optimization of multiple public domain names as required. Additionally, I am proficient with Jenkins, Bitbucket, GitHub, Terraform, Ansible, and Python, enabling efficient automation and streamlined operations. I prioritize clear documentation at every phase to ensure transparency and a smooth handover. To minimize disruption during cutover, I will collaborate closely with you to define a practical schedule. With my approach, you can expect a professional, efficient, and timely project delivery. I look forward to contributing to a successful implementation.

@AZTURK1

Hi there, I will deploy and configure Azure Application Gateway with WAF, enable Azure DDoS Protection for the gateway public IP, and integrate Azure Traffic Manager and DNS for staged cutovers; my Azure networking and security experience suits this subscription-level delivery. - Deploy and configure Application Gateway v2 with WAF policies, backend pools, listeners, probes, and SSL termination - Enable and configure Azure DDoS Protection Standard on the gateway public IP and integrate with Traffic Manager; create storage accounts and non-prod slots for testing - Configure DNS cutover for up to 7 non-production and 7 production public domains, perform testing and validation - Backup checkpoint & post-deploy validation (rollback plan) Skills: ✅ Azure Application Gateway ✅ Azure DDoS Protection / Traffic Manager ✅ DNS cutover / Azure DNS ✅ WAF policy tuning / security hardening ✅ Storage accounts / non-prod environment deployment ✅ Documentation & handover Certificates: ✅ Microsoft® Certified: MCSA | MCSE | MCT ✅ cPanel® & WHM Certified CWSA-2 I am available to start immediately. Is this already running in a live production subscription or should I perform a staged rollout starting with non-prod slots? Best regards,

@talhamq

With an extensive background in Cloud Computing Platforms, I believe I am the ideal candidate for this project. Thanks to my work with Microsoft Azure and other platforms like AWS, GCP, I have acquired a deep understanding of its intricacies, including deployment and configuration. You can trust me to adeptly configure DDoS protection, Azure Traffic Manager and deploy necessary additional resources such as storage accounts to ensure your subscription is set up securely and efficiently.

@irsolutions

With over a decade of experience in configuring high-performance systems like Azure Application Gateway, WAF, and DDoS protection, I understand the importance of securing your subscription. Your project goal to deploy and configure these components aligns perfectly with my background in handling complex systems for over 1 million users. A strategic insight for your project would be to ensure seamless scalability by implementing efficient load balancing and security measures within the Azure environment. My past success in building and scaling Telegram Mini Apps for a large user base demonstrates my ability to handle projects of this complexity with ease. I encourage you to reach out to discuss the roadmap for configuring Azure Application Gateway, WAF, and DDoS protection on your subscription. Let's collaborate to ensure the seamless deployment and configuration of these critical components for your project's success.

@diektech

Hi, This is Elias from Miami. I checked your project description and understand you need end-to-end Azure deployment and configuration work around Application Gateway, DDoS protection, Traffic Manager, supporting non-production resources, and full DNS cutover for both test and production environments across multiple public domains. I’ve worked on similar cloud infrastructure and cutover projects involving Azure networking, environment separation, DNS changes, validation, and handover documentation. For approach, I’d first review the current Azure setup and domain/DNS structure, then configure the Application Gateway, DDoS protection, and Traffic Manager, provision any missing non-prod resources, and handle staged cutover for test and production with validation at each step before final documentation and handoff. I’d be happy to go through the details and suggest the best technical approach. I have a few questions to get a better understanding: Q1 – Is the Application Gateway being deployed in front of existing App Services/VMs, and are the backend pools/routing rules already defined? Q2 – Which DNS provider manages the up to 7 public domains, and do you already have access ready for the cutover work? Q3 – Do you want blue-green/staged validation for the non-live slots first, or should the project include a full rollback plan for both non-prod and production cutovers? Looking forward to hearing from you.

@juanjosec63

Hi, I have 9 years experience in (Azure, Application Gateway, Traffic Manager, DNS, cloud security, DDoS protection, DevOps, and production environment cutovers). For this project, I have real hands-on experience delivering Azure infrastructure changes in staged environments, and I will configure the Application Gateway and DDoS protection, set up Traffic Manager, deploy any supporting resources for non-production, handle DNS cutover and validation across test and production domains, and provide clear documentation so your team can take over confidently after deployment. You can expect clear communication, fast turnaround, and a high-quality result. Best regards, Juan

@kamran2012

Hey, I will deploy and configure your Application Gateway with WAF policies, DDoS Protection on the public IP, and Traffic Manager — covering both non-production and production environments, DNS cutover for all 14+ domain names, and full documentation at handover. One thing I will architect upfront: WAF policy assignments at the per-listener level rather than globally on the gateway. This lets you apply stricter rule sets to production listeners while keeping non-production listeners more permissive for testing — and it avoids false-positive blocks disrupting your dev team during validation phases before the production cutover. Questions: 1) Are your backend pools App Services with deployment slots, VMs, or a mix — and are they already deployed across regions for Traffic Manager routing? Looking forward to potentially working together. Thanks, Kamran