White Hacker - Preventing bad actors using VPN - Consultation

I'm looking for an expert security consultant who can help me prevent bad actors from using VPNs, credential stuffing, and DDOS attacks. We use Enterprise Cloudflare rules to prevent some attacks from certain countries, but they keep using VPNs and can still attack by connecting to US IP. Blocking by IPs is not a good solution because attackers keep rotating them. Apply and provide skills you have, and I will provide more info.