Cloudflare + Shopify Bot Protection Specialist (WAF, Rate Limiting, Safe Setup)

We’re looking for an experienced Cloudflare specialist to help mitigate heavy bot traffic hitting our Shopify store. Over the last few months, we've been seeing significant bot activity on our Shopify store, which is skewing our analytics. We want to reduce this without impacting real users, checkout functionality, or app integrations. We’ve recently integrated Cloudflare, and enabled 'Bot fight mode'. However, this hasn't fixed the issue thus far. In fact, the bots have gotten worse. We are going through a period currently where non-stop bot activity has decreased a bit, however, random spikes are still occuring. What We Need: We’re looking for someone who understands both Cloudflare and Shopify (and Shopify's limitations), and can implement a safe, optimized bot protection strategy. Scope includes (but not limited to): - Audit current Cloudflare setup (DNS, proxy, SSL, security settings) - Configure WAF rules using Bot Score (no aggressive blanket blocking) - Implement smart rate limiting (targeting abusive traffic only) - Protect key endpoints: /products/* /collections/* /search /cart - Ensure verified bots (Google, Bing) are not blocked - Ensure no disruption to: * Shopify checkout * Apps / scripts * Klaviyo tracking & links * Review and optimize: * Bot Fight Mode * Security Level * Firewall rules