Find Firewall Projects on Upwork Efficiently

We’re building a high-performance, fully owned email infrastructure and lead monetization engine.

We’re looking for a long-term, full-time email deliverability and infrastructure engineer who understands SMTP relay, domain/IP management, reputation control, and inbox optimization at scale.

This is not a basic ESP sending setup. You’ll be helping build and maintain:
• Custom SMTP relay pipelines
• Email authentication protocols (SPF, DKIM, DMARC)
• Domain/IP warming systems
• Inbox placement monitoring (seed testing, tracking, diagnostics)
• Sending logic across high-volume verticals (auto insurance, finance, sweeps, etc.)
• Scalable bridge site architecture and click tracking
• Tools like Postal, MailerQ, PowerMTA (or similar alternatives)

We already have extensive proprietary strategy and blueprints in place — you will not be guessing what to do. You will be executing specific instructions and helping shape a world-class email operation alongside a driven founder.

If you’re highly skilled, trustworthy, and ready to move fast, apply now with a short description of your experience and availability.

Require assitance to upgrade the formware kor FortinetWifi hardware and migration of firewall rules from Zyxel to Fortinet

We are seeking a skilled MIFARE DESFire EV2 NFC Security Specialist to assist in developing a secure medical ID bracelet. The ideal candidate will have extensive experience with NFC technology and security protocols to ensure the protection of sensitive medical information. Your expertise will be crucial in designing and implementing security features for the bracelet, ensuring compliance with industry standards. If you have a passion for innovative health tech solutions and a proven track record in NFC security, we would love to hear from you!

Our current system is live and functional, including:
• Backend medical records platform
• Admin dashboard
• Hospital and lab web portals
• NFC-based UID linking system (currently NTAG-based)

We are now upgrading the NFC layer to MIFARE DESFire EV2 to meet:
• hospital security standards
• medical data protection requirements
• anti-cloning compliance
• government and regulatory expectations

We are seeking an experienced MIFARE DESFire specialist to design and implement the secure NFC architecture.

You are not rebuilding the system, only replacing and securing the NFC layer.

Required Experience (Mandatory)

Please apply only if you have real world experience with:
• MIFARE DESFire EV1 / EV2 / EV3
• AES authentication
• File-based access control
• Secure NFC architecture
• PN532 or CLRC663
• NXP documentation
• Smart card or government ID projects

• 1. Examples of DESFire projects you’ve worked on 2. Which DESFire versions you’ve implemented (EV1/EV2/EV3) 3. Which readers you have experience with 4. Your understanding of offline secure medical data storage 5. Estimated timeline

I need a NinjaTrader 8 Desktop expert to troubleshoot a futures data issue.
CME Nikkei (NKD) shows correctly on NinjaTrader mobile/web, but not on desktop.
CME Top of Book is active; issue appears desktop-local (instrument DB, adapter, firewall, or replay entitlement).
You must have hands-on experience with NinjaTrader 8, Market Replay, and CME futures.
Tradovate integration knowledge required.
Windows firewall / antivirus troubleshooting required.
Work will be done via live screen share.
This should take 1–2 hours for someone who knows NinjaTrader well.

See the following loom video for details about the issue

https://www.loom.com/share/7db8751aa91e4b5387dfe9730cba473f

We are looking for a professional cybersecurity firm to perform a Black Box penetration test (external and internal) for our organization. The engagement must include a formal security certificate and a detailed penetration testing report, as results will be shared with one of our clients.

Scope – External Pentest (Black Box)
Public website: https://www.virtualemilystaffing.com,

Publicly exposed Microsoft 365 services:
Outlook (OWA), Entra ID (authentication portal), Microsoft Teams

Domains in scope: virtualemily.com, virtualemilystaffing.com, virtualemilycareers

Fully remote organization (no on-prem infrastructure, no owned public IPs)

Scope – Internal Pentest

Security assessment of approximately 45 endpoints, including:
Corporate devices
Personal devices used for corporate activities

Engagement Restrictions

No Denial of Service or stress testing
No phishing campaigns
No mass brute-force attacks
No impact to shared hosting infrastructure (Wix / Microsoft)

Deliverables
Technical penetration testing report

Executive summary
Security / Pentest completion certificate suitable for client sharing

Requirements
Proven experience in corporate penetration testing
Recognized methodology (OWASP, PTES, NIST, or equivalent)
Ability to issue formal security certification

Proposal Requirements

Please include:
Recommended approach and scope confirmation
Estimated execution timeline
Separate pricing for:
External pentest
Internal pentest (45 devices)

• Describe your recent experience with similar projects
• How do you operationalize your projects?

is seeking an experienced web application security specialist to address specific vulnerabilities identified in our recent penetration testing assessment. As a healthcare technology company specializing in innovative oral health monitoring solutions, we prioritize robust security standards and regulatory compliance.

This is a focused, short-term engagement to remediate six specific security findings in our web application infrastructure. We need an independent contractor who can take full ownership of implementing these security fixes efficiently and professionally.



Scope of Work - Specific Vulnerability Remediations
Based on our completed Web Penetration Testing assessment, you will address the following security findings:

1. Concurrent Login Management Implementation
• Task Type: Application code modification
• Requirement: Implement session management mechanism to control concurrent user logins
• Options to consider:
• Invalidate previous sessions upon new login
• Limit active sessions per user account with admin controls
• Provide configurable session policies
• Deliverable: Production-ready code with comprehensive testing
2. Server Version Disclosure Prevention
• Task Type: Server configuration
• Requirement: Remove/mask server version information from HTTP responses
• Scope:
• HTTP response headers (Server, X-Powered-By, framework headers)
• Error pages and default framework responses
• API endpoints
• Validation: Confirm remediation using security scanning tools
3. Vulnerable Framework/Component Upgrade
• Task Type: Dependency management and testing
• Requirement: Identify and upgrade vulnerable frameworks/libraries to secure versions
• Process:
• Audit current dependency versions
• Plan upgrade path ensuring backward compatibility
• Implement upgrades with thorough regression testing
• Document all changes and migration steps
4. SSL/TLS Security Hardening
• Task Type: Infrastructure configuration
• Requirement: Strengthen TLS configuration and eliminate weak ciphers
• Scope:
• Disable TLS 1.0/1.1 and weak cipher suites
• Implement strong, current best-practice cipher configurations
• Configure secure SSL/TLS settings on load balancers/web servers
• Validation: SSL Labs assessment showing improved security grade
5. Admin Portal Access Control
• Task Type: Network security implementation
• Requirement: Secure admin portal access behind VPN or equivalent protection
• Options:
• VPN implementation (OpenVPN, WireGuard, or cloud-native solutions)
• IP allowlisting with proper access controls
• Zero-trust network access implementation
• Deliverable: Secure access solution with documented procedures
6. Open Ports Security Audit
• Task Type: Network security assessment and hardening
• Requirement: Review and secure network port exposure
• Process:
• Comprehensive port scan and service audit
• Close unnecessary open ports
• Implement proper firewall rules and security group configurations
• Document justified open ports with security rationale
Required Qualifications
Essential Experience:
• 3+ years in web application security and DevOps/infrastructure security
• Proven track record with penetration testing remediation projects
• Strong understanding of OWASP security principles
• Experience with secure session management and authentication systems
• SSL/TLS configuration and certificate management expertise
• Network security implementation (firewalls, VPNs, access controls)

• Healthcare sector experience strongly preferred
Soft Skills:
• Ability to work independently with minimal supervision
• Clear communication for technical documentation and progress updates
• Understanding of healthcare compliance requirements (HIPAA awareness beneficial)
Deliverables
Technical Implementation:
• All security fixes implemented and tested in staging environment
• Code changes submitted via pull requests with comprehensive documentation
• Infrastructure configuration changes documented and version-controlled
Documentation Package:
• Detailed remediation report for each vulnerability
• Technical documentation of all changes implemented
• Updated operational procedures for secure admin access
• Security testing evidence and validation reports
Knowledge Transfer:
• Brief handover session with our development team
• Best practices documentation for maintaining security standards
• Recommendations for ongoing security monitoring

Timeline and Budget
• Start Date: Immediate
• Engagement Type: Fixed-price contract
What We Provide
· Complete penetration testing report with detailed findings
· Access to staging environment and source code repository
· Direct communication with our CTO and DevOps team
· Necessary infrastructure access through secure channels
· Clear requirements and prompt feedback on deliverables

Skills: Web Security, Amazon Web Services, Git, Penetration Testing, Cloud Security, DevOps, Network Security

What you’ll do:
- Deliver Fortinet NSE courses (FCP, FCSS, etc.) following Fortinet’s official curriculum
- Conduct interactive, hands-on sessions (virtual or onsite)
- Stay current with the latest Fortinet products and technologies
- Mentor learners and provide feedback throughout their certification path

What we’re looking for:
- Located in Finland, the UK, Sweden, Italy, Norway or Denmark (as required by Fortinet Instructor Program rules)
- 5+ years of experience in network or cybersecurity
- Strong hands-on knowledge of Fortinet solutions (FortiGate, FortiManager, FortiAnalyzer, etc.)
- Fortinet NSE certifications (NSE 4–7 preferred)
- Experience delivering technical training or instruction
- Excellent communication and presentation skills

Nice to have:
- Fortinet Certified Trainer (FCT) status — or willingness to undergo FCT assessment
- Experience with blended or remote learning environments
- Multilingual delivery capability is a plus

Engagement Details:
- Part-Time / As-Needed (Contract Basis)
- Flexible schedule based on class demand

Palo Alto, AWS, BGP, IPSEC. Must have a good understanding of all domains.

I’m looking for a DevOps/security engineer with Clawdbot experience to harden and finalize my self-hosted Clawdbot setup. Assuming this should be about 6–8 hours of work total.

My setup:
•Dedicated Mac Mini running Clawdbot agent
•VPS gateway for 24/7 coordination
•Discord bot already connected and working

What I need done:
•Bind Clawdbot gateway to loopback only in config
•Block port 18789 and lock down other unnecessary ports
•Set up secure remote access via Cloudflare Tunnel or Tailscale (your recommendation + implementation)
•Enable and configure: sandboxing, tool allowlists, DM pairing, authentication
•Install and configure macOS Companion App on the Mac Mini
•SSH hardening and basic firewall rules (Mac + VPS)
•Proper secrets management (API keys, credentials)
•Run the built‑in security audit and fix reported issues
•Brief documentation of what you changed and how to maintain it

Requirements:
•Proven experience with Clawdbot specifically
•Strong DevOps / Linux / macOS security background
•Familiarity with Cloudflare Tunnel and/or Tailscale
•Experience with Discord bot security and API key management

Details:
•Budget: $60/hour (negotiable)
•Estimated time: 6–8 hours
•Remote only, payment via PayPal or Wise

If interested, pls DM with:
•Your Clawdbot experience (please be specific)
•A short outline of how you’d approach locking this down
•Lets meet ASAP

Job Overview

We are a growing North American logistics / freight brokerage seeking a long-term Managed IT Services Partner based in India or the Philippines.

This is not a one-off gig. We are looking for a professional MSP or established IT services firm that can provide 24/7 monitoring, helpdesk support, security, endpoint management, and network administration.

Our environment is standardized, modern, and security-focused.

⸻

Current Environment
• Users: 16 (scaling)
• Devices: Windows laptops (primary), limited macOS
• Network: Ubiquiti UniFi (Gateways, Switches, APs)
• Identity & Email: Microsoft 365 (Business Premium / E3)
• Security: MFA enforced, device encryption required
• Industry: Logistics / Professional Services (high uptime expectations)

⸻

Scope of Work

1. Network Monitoring & Management (24×7)
• Monitor and manage:
• Routers
• Switches
• Firewalls
• Wireless controllers (UniFi)
• Real-time alerting & incident response
• Performance analytics and traffic insights
• UniFi Controller management
• VPN configuration & support
• VLAN segmentation & firewall rules
• Monthly network health reports

⸻

2. Helpdesk & Remote Support
• Tier 1–3 helpdesk support
• Monday–Friday North American business hours
• 24×7 emergency escalation
• Phone, email, and ticket-based support
• Clear SLAs and escalation path

⸻

3. Endpoint Management (MANDATORY)
• Patch management (OS & third-party apps)
• Antivirus / EDR (Defender preferred)
• Device encryption (BitLocker)
• Asset inventory & compliance reporting
• Remote troubleshooting
• Lost/stolen device response

RMM + MDM required (Intune or equivalent strongly preferred).

⸻

4. Microsoft 365 & Identity Management
• Microsoft 365 tenant administration
• Azure AD / Entra ID user management
• MFA & Conditional Access policies
• Secure onboarding & offboarding
• License optimization
• Email security best practices

⸻

5. Security & Compliance
• Endpoint security monitoring
• Login anomaly alerts
• Malware/ransomware response
• Backup monitoring (if applicable)
• Incident documentation and reporting

We are seeking a cybersecurity expert to provide insights on securing accounts against unauthorized access, particularly focusing on OTP (One-Time Password) bypass issues. The ideal candidate should have a deep understanding of account security protocols and be able to suggest best practices to mitigate risks. Please note that this role is strictly for educational and preventive measures, not for malicious intent. Your expertise will help enhance our security systems to protect our users effectively.

• Describe your recent experience with similar projects
• How would you measure or assess a potential problem?

is seeking an experienced web application security specialist to address specific vulnerabilities identified in our recent penetration testing assessment. As a healthcare technology company specializing in innovative oral health monitoring solutions, we prioritize robust security standards and regulatory compliance.

This is a focused, short-term engagement to remediate six specific security findings in our web application infrastructure. We need an independent contractor who can take full ownership of implementing these security fixes efficiently and professionally.



Scope of Work - Specific Vulnerability Remediations
Based on our completed Web Penetration Testing assessment, you will address the following security findings:

1. Concurrent Login Management Implementation
• Task Type: Application code modification
• Requirement: Implement session management mechanism to control concurrent user logins
• Options to consider:
• Invalidate previous sessions upon new login
• Limit active sessions per user account with admin controls
• Provide configurable session policies
• Deliverable: Production-ready code with comprehensive testing
2. Server Version Disclosure Prevention
• Task Type: Server configuration
• Requirement: Remove/mask server version information from HTTP responses
• Scope:
• HTTP response headers (Server, X-Powered-By, framework headers)
• Error pages and default framework responses
• API endpoints
• Validation: Confirm remediation using security scanning tools
3. Vulnerable Framework/Component Upgrade
• Task Type: Dependency management and testing
• Requirement: Identify and upgrade vulnerable frameworks/libraries to secure versions
• Process:
• Audit current dependency versions
• Plan upgrade path ensuring backward compatibility
• Implement upgrades with thorough regression testing
• Document all changes and migration steps
4. SSL/TLS Security Hardening
• Task Type: Infrastructure configuration
• Requirement: Strengthen TLS configuration and eliminate weak ciphers
• Scope:
• Disable TLS 1.0/1.1 and weak cipher suites
• Implement strong, current best-practice cipher configurations
• Configure secure SSL/TLS settings on load balancers/web servers
• Validation: SSL Labs assessment showing improved security grade
5. Admin Portal Access Control
• Task Type: Network security implementation
• Requirement: Secure admin portal access behind VPN or equivalent protection
• Options:
• VPN implementation (OpenVPN, WireGuard, or cloud-native solutions)
• IP allowlisting with proper access controls
• Zero-trust network access implementation
• Deliverable: Secure access solution with documented procedures
6. Open Ports Security Audit
• Task Type: Network security assessment and hardening
• Requirement: Review and secure network port exposure
• Process:
• Comprehensive port scan and service audit
• Close unnecessary open ports
• Implement proper firewall rules and security group configurations
• Document justified open ports with security rationale
Required Qualifications
Essential Experience:
• 3+ years in web application security and DevOps/infrastructure security
• Proven track record with penetration testing remediation projects
• Strong understanding of OWASP security principles
• Experience with secure session management and authentication systems
• SSL/TLS configuration and certificate management expertise
• Network security implementation (firewalls, VPNs, access controls)

• Healthcare sector experience strongly preferred
Soft Skills:
• Ability to work independently with minimal supervision
• Clear communication for technical documentation and progress updates
• Understanding of healthcare compliance requirements (HIPAA awareness beneficial)
Deliverables
Technical Implementation:
• All security fixes implemented and tested in staging environment
• Code changes submitted via pull requests with comprehensive documentation
• Infrastructure configuration changes documented and version-controlled
Documentation Package:
• Detailed remediation report for each vulnerability
• Technical documentation of all changes implemented
• Updated operational procedures for secure admin access
• Security testing evidence and validation reports
Knowledge Transfer:
• Brief handover session with our development team
• Best practices documentation for maintaining security standards
• Recommendations for ongoing security monitoring

Timeline and Budget
• Start Date: Immediate
• Engagement Type: Fixed-price contract
What We Provide
· Complete penetration testing report with detailed findings
· Access to staging environment and source code repository
· Direct communication with our CTO and DevOps team
· Necessary infrastructure access through secure channels
· Clear requirements and prompt feedback on deliverables

Skills: Web Security, Amazon Web Services, Git, Penetration Testing, Cloud Security, DevOps, Network Security

I run a cloud-based, B2B gym management platform and I’m ready to connect it to eSSL biometric terminals. The goal is to let the devices handle three core actions—member check-in/check-out, staff attendance tracking, and restricted-area door control—then stream that data straight into the web application through eSSL’s API layer.

Here’s what I need delivered:
• A lightweight service (or set of REST endpoints) that talks to eSSL’s API, polls or receives push events in real time, and writes them to our database with the correct member or staff mapping.
• Logic to push authorised user templates/credentials back to each device so door controllers can decide who enters which zone.
• Clear setup documentation covering device configuration, firewall/port rules, and how to add future locations without touching the code.
• Postman collection or similar so my in-house developers can test every call quickly.

I’ll provide access to a staging instance of the SaaS, an eSSL test unit on the network, and our existing auth schema. Code quality, security, and concise comments are non-negotiable; once the first device is proven in staging we’ll roll out to additional branches the same way. Let me know your experience with eSSL (or similar ZKTeco/Anviz) APIs and any questions that will help you scope the effort accurately.

Skills: Cloud Computing, Software Development, Web Development, RESTful API, Security, Database Management, API Development, SaaS

Welcome to the course final project! You must do this project on your own, and it will be worth 60 percent of your final grade.
This week, you will be designing a cybersecurity awareness campaign for your own company or organization.
To complete the assignment, we recommend you do the following:
1. Make sure that you have watched all of the lessons and gone through all of the course material.
2. Carefully read through the instructions and rubric on the following page.
3. Create a cybersecurity awareness campaign in the format of your choice (max. 10 slides/pages) to teach your colleagues about how to protect themselves from cyber threats.
4. Turn in your final project by uploading it to Canvas on the next page.

Assignment A3.1 - Cybersecurity Awareness Campaign
About the Assignment
In this final assignment, you will design a cybersecurity awareness campaign for your own company or organization.
• Research the common cyberattacks that affect your industry or sector and their consequences, and then create a presentation that teaches your colleagues about the importance of cybersecurity and how to protect themselves and their company or organization from cyber threats.
• You may include some tips and best practices for reducing the attack surface and enhancing the CIA triad. Please share some resources or links for further learning in cybersecurity.
• Additional information and tips:
1.
1. Consider the use of tools such as PowerPoint, Prezi, Canva, Animoto, etc. to make your campaign more engaging and appealing.
2. For the research part, make use of online resources, such as the Verizon Data Breach Investigations Report, the CrowdStrike Global Threat Report, the MITRE ATT&CK Group's page, etc., to find out what types of attacks are most prevalent and impactful in your domain. You could also use some examples or case studies of real incidents or breaches that illustrate the severity and cost of cyberattacks.
3. When teaching your colleagues about protecting themselves from cyberattacks, be sure to include tips and best practices for employees from websites such as Cybersecurity Ventures, CyberSeek, etc.



Notes for Submitting Your Assignment
Please upload your work below once you have finished.
While you can make your own decision on which format to use, please make sure that it does not exceed ten pages/slides.
Please note: this is individual work.
Assignment A3.1 Rubric (See attached)

Note
Requirement Changes of input up to 5 times.
Input should score me 100% A+
Submit the assignment no more than 24 hours
Required for 2 students (So I need 2 assignment for same subject), without and similarity
No AI Allow they have tools to identify it also no similarity, no plagiarism

Skills: Social Networking, Firewall

We are looking for a highly experienced Cloudflare Server Deployment expert.

Currently, we are facing SSL handshake issues, and we need someone who has deep hands-on expertise with Cloudflare, including:

SSL/TLS handshake problems

Cloudflare security & firewall rules

Server deployment and optimization

API and non-browser request handling

⚠️ Important:
Only apply if you are truly experienced in Cloudflare and SSL-related issues.
Beginners or non-relevant profiles should not apply.

Skills: Linux, Web Security, Apache, Nginx, Ubuntu, API, Cloud Security, Network Security, Cloudflare, SSL

I need a seasoned DevOps practitioner to coach me through end-to-end CI/CD pipeline automation, with the spotlight firmly on Azure DevOps. Our sessions must be live, screen-shared, and entirely practical—every step carried out in VS Code while I mirror the actions on my own machine. I HAVE ALREADY GOT APPROVAL FOR MS Teams from Freelancer Support for this project.

YOUR TOP PRIORITY TO HAVE ME PRACTICE:

PART 1

1. The Terraform "Apply" Workflow (Highest Priority)
• The Task: Be able to write a basic resource (like a VNet or Storage Account) in VS Code and deploy it.
• Key Skill: Mastering terraform init, plan, and apply.
• The "Principal" Detail: Explain Remote State. Show that you store your state file in an Azure Storage Blob with locking to prevent corruption.
• Why it's #1: If you can’t run Terraform, you can’t do the job.
2. The Multi-Stage CI/CD Pipeline (High Priority)
• The Task: Set up a YAML-based pipeline in Azure DevOps or GitHub Actions.
• Key Skill: Creating a "Plan" stage and a separate "Apply" stage with a Manual Approval Gate.
• The "Principal" Detail: Use a Service Connection (Service Principal) to allow the pipeline to talk to Azure without using your personal password.
3. Hub-and-Spoke Networking via Code
• The Task: Use Terraform to create a Hub VNet and a Spoke VNet with VNet Peering.
• Key Skill: Deploying an Azure Firewall and a Route Table (UDR) to force traffic through the firewall.
• The "Principal" Detail: Explain why "Forced Tunneling" is mandatory for HIPAA/Healthcare compliance to ensure all traffic is inspected.




PART 2

4. Security Automation (Zero Trust)
• The Task: Connect a VM or App Service to a Key Vault without using a password.
• Key Skill: Enabling Managed Identity in Terraform and assigning the correct RBAC permissions.
• The "Principal" Detail: Explain the "Principle of Least Privilege"—never use "Contributor" if "Reader" or a custom role is enough.
5. Troubleshooting with Azure CLI
• The Task: Find out why a "Connection is Refused" between two VNets.
• Key Skill: Using az network watcher test-ip-flow and checking Effective Routes.
• The "Principal" Detail: Demonstrate that you can solve problems from the command line faster than someone clicking through the Portal GUI.
6. Git Flow & Version Control
• The Task: Push your Terraform code to a repository.
• Key Skill: Creating a Feature Branch, doing a Commit, and opening a Pull Request (PR).
• The "Principal" Detail: Use PRs as a "Peer Review" gate to ensure code quality before it reaches production.

Skills: Cloud Computing, Troubleshooting, Azure, Continuous Integration, DevOps, Automation, Terraform, CI/CD

I'm seeking a freelance WordPress performance expert with deep hands-on experience in optimizing sites using FunnelKit for sales funnels, WooCommerce for e-commerce, and integrations like LearnDash, Gravity Forms, and WP Fusion.

You'll take full ownership of improving page speed, Core Web Vitals (CWV), funnel load times, and checkout experiences on a site similar to sistershipcircle.com. Using your expertise, you'll analyze the current setup, determine and apply the optimal configurations, and ensure all enhancements are achieved without compromising functionality or security.

No pre-defined plan or exact settings will be provided—you'll leverage your knowledge to decide the best approaches, settings, and tweaks. You must stick to the existing plugin stack (detailed below) unless you provide a detailed, justified reason for suggesting any changes or additions (e.g., why a new plugin is essential and how it avoids conflicts). All work will be done remotely, with testing in staging before live deployment, and verified using standard tools like GTmetrix or PageSpeed Insights.

### Defined Goal
The goal is to significantly enhance the site's performance through targeted optimizations, focusing on faster load times, superior CWV scores, and reliable funnel/e-commerce flows. You'll independently audit the tech stack, identify bottlenecks, and implement improvements to achieve measurable gains in speed and user experience.

### What Success Looks Like
Success is defined by verifiable, post-optimization metrics that demonstrate clear improvements without any site regressions.

The job is complete when:

- CWV scores hit at least 90/100 on Google PageSpeed Insights for critical pages (e.g., homepage, funnels, courses, checkouts) across desktop and mobile.

- Page load times reduce by 40-60% on key routes (e.g., from 4-6 seconds to under 2 seconds), as measured by GTmetrix, WebPageTest, or similar tools.

- Cache efficiency improves (e.g., higher hit ratios via Cloudflare or Redis analytics), with zero issues in dynamic elements like WooCommerce sessions, FunnelKit automations, or form submissions.

- Full functionality is preserved: No disruptions in e-commerce (e.g., checkouts, subscriptions), LMS (e.g., LearnDash course progress), integrations (e.g., WP Fusion CRM syncs), or other features—validated through comprehensive testing.

- Real-user data (e.g., from Google Analytics or CrUX reports) shows no negative impacts, such as increased bounce rates or dropped conversions.

- You deliver a brief final report with before/after metrics, screenshots, and notes on changes made (including justifications for any plugin modifications).

We'll verify results in a quick review session before releasing payment. If metrics aren't met, you'll iterate until they are (within the fixed budget).

## Key Responsibilities
You'll handle the entire process end-to-end using your expertise—no guidance on specific steps or settings from us.

Focus on:

- **Auditing the Tech Stack:** Review provided snapshots (e.g., WooCommerce System Status, plugin configs, server logs) to pinpoint issues like high TTFB, poor CWV (LCP, FID, CLS), cache gaps, or funnel latencies.

- **Determining and Implementing Optimizations:** Based on your knowledge, select and apply the right configurations across the stack (e.g., tweaking caching rules, minification, deferrals) to boost performance. Stick to existing plugins; if you propose changes/additions, explain in detail why (e.g., "Adding Plugin X is necessary because it resolves Y conflict without alternatives in the current stack, and here's the low-risk implementation plan").

- **Risk Management:** Ensure dynamic elements (e.g., WooCommerce carts, FunnelKit REST endpoints, Gravity Forms tasks) are protected from caching errors. Address nuances like mobile/desktop differences or integration conflicts.

- **Testing and Validation:** Use staging for all changes, thoroughly test key flows (e.g., checkouts, course access, form submissions), and confirm improvements with tools like GTmetrix, PageSpeed Insights, Query Monitor, or New Relic. Iterate as needed to meet success metrics.

- **Deployment and Monitoring:** Roll out to live, monitor initial performance, and provide setup for basic ongoing tracking (e.g., via Cloudways Analytics).

- **Documentation:** Log your actions, rationales (especially for any stack changes), and metrics in a simple handover doc.

If plugin changes are suggested but not justified adequately, we'll reject them and expect you to proceed with the existing stack.

## Required Knowledge Base

To succeed, you need expert-level, practical familiarity with the site's ecosystem to independently choose effective optimizations. This includes understanding interdependencies (e.g., how Breeze minification impacts Elementor assets or WP Fusion syncs affect Gravity Forms). Cover configuration details, performance implications, common pitfalls, and scalability for high-traffic scenarios.

### Core Platforms
- **WordPress (v6.x+)**: Core tweaks like memory limits, cron handling, hooks/filters; pitfalls like plugin overloads affecting TTFB.
- **Apache (v2.x+)**: .htaccess for gzip/caching; integration with PHP-FPM.
- **PHP (v8.x+)**: Settings like opcache, execution limits; compatibilities with Woo loops.
- **MariaDB (v10.x+)**: Query optimization, indexing for Woo/LearnDash tables.

### Hosting and Infrastructure
- **Cloudways Autonomous (Plan 2)**: Autoscaling pods, managed security; no Varnish or custom Cloudflare access.
- **Cloudflare Enterprise (via Cloudways)**: Bypass rules for dynamics like Woo cookies; cache purge handling.

### E-commerce and Funnels
- **WooCommerce (v10.x+)**: HPOS, session handling, exclusions for wc-ajax.
- **FunnelKit (v3.x+)**: REST endpoints, automations; conflicts with caching on /checkouts/*.
- **WooCommerce Extensions**: Subscriptions, Memberships, Smart Coupons, Product Bundles, Stripe/PayPal gateways, USPS Shipping.
- **AffiliateWP (v2.x+)**: Referral tracking, cookie expiration.

### Caching and Performance
- **Breeze (v2.x+)**: Minify/combine, exclusions (e.g., FunnelKit routes), TTL, preload.
- **Object Cache Pro (with Redis v7.x+)**: Eviction, compression, non-persistent groups.
- **Perfmatters (v2.x+)**: Script Manager, CDN dirs, lazy-loading, font subsets.
- **Imagify (v2.x+)**: Image compression workflows.

### Builders and LMS
- **Elementor (v3.x+ + Pro)**: Lazy-load, asset deferral; integration with themes.
- **Essential Addons for Elementor (v6.x+)**: Extensions without performance drags.
- **LearnDash (v4.x+)**: Drip content, focus mode; cache compatibility for courses.

### Forms and CRM
- **Gravity Forms (v2.x+)**: Feeds, API handling; fixing timeouts/background tasks.
- **WP Fusion (v3.x+)**: CRM syncs (e.g., to Drip), error logs, auto-login.

### Security, SEO, and Utilities
- **Wordfence (v8.x+)**: Firewall overhead minimization.
- **Yoast SEO (v26.x+)**: Sitemaps, exclusions.
- **WP Mail SMTP Pro (v4.x+)**: Email configs.
- **Redirection (v5.x+)**: Redirect groups.
- **Advanced Custom Fields PRO (v6.x+)**: Custom fields for courses/events.
- **Code Snippets (v3.x+)**: Safe custom code additions.
- **The Events Calendar (via addons)**: Event management integrations.

## Required Skillsets
- **Independent Optimization:** Ability to diagnose issues from exports/logs and apply effective tweaks without guidance.
- **Justification Skills:** Clearly explain any proposed stack changes with pros/cons, alternatives considered, and risk assessments.
- **Testing Expertise:** Proficiency in staging workflows, A/B testing, rollback plans, and tools like GTmetrix, WebPageTest, Redis Insight.
- **Technical Proficiency:** Basic PHP/JS/regex for custom filters; security focus to avoid vulnerabilities.
- **Scalability Awareness:** Optimizations for 70k+ visits/month with autoscaling.
- **Communication:** Provide updates and a final report with metrics and notes.

## Qualifications
- **Experience:** 4+ years in WordPress speed optimization; 2+ years with FunnelKit/WooCommerce; examples of similar stacks (e.g., Cloudways + LearnDash).
- **Portfolio:** Share before/after metrics from past gigs; note any plugin change justifications.
- **Tools Mastery:** GTmetrix, PageSpeed Insights, Query Monitor, Cloudways Console.

To apply, quote your fixed price, estimated hours, and a short pitch on how you'd approach this (e.g., key areas you'd target first). Include relevant past work. Let's optimize this site!

*Note: Proposals without a portfolio or specific experience in FunnelKit/WooCommerce will not be considered.

I'm seeking a freelance WordPress performance expert with deep hands-on experience in optimizing sites using FunnelKit for sales funnels, WooCommerce for e-commerce, and integrations like LearnDash, Gravity Forms, and WP Fusion.

You'll take full ownership of improving page speed, Core Web Vitals (CWV), funnel load times, and checkout experiences on a site similar to sistershipcircle.com. Using your expertise, you'll analyze the current setup, determine and apply the optimal configurations, and ensure all enhancements are achieved without compromising functionality or security.

No pre-defined plan or exact settings will be provided—you'll leverage your knowledge to decide the best approaches, settings, and tweaks. You must stick to the existing plugin stack (detailed below) unless you provide a detailed, justified reason for suggesting any changes or additions (e.g., why a new plugin is essential and how it avoids conflicts). All work will be done remotely, with testing in staging before live deployment, and verified using standard tools like GTmetrix or PageSpeed Insights.

### Defined Goal
The goal is to significantly enhance the site's performance through targeted optimizations, focusing on faster load times, superior CWV scores, and reliable funnel/e-commerce flows. You'll independently audit the tech stack, identify bottlenecks, and implement improvements to achieve measurable gains in speed and user experience.

### What Success Looks Like
Success is defined by verifiable, post-optimization metrics that demonstrate clear improvements without any site regressions.

The job is complete when:

- CWV scores hit at least 90/100 on Google PageSpeed Insights for critical pages (e.g., homepage, funnels, courses, checkouts) across desktop and mobile.

- Page load times reduce by 40-60% on key routes (e.g., from 4-6 seconds to under 2 seconds), as measured by GTmetrix, WebPageTest, or similar tools.

- Cache efficiency improves (e.g., higher hit ratios via Cloudflare or Redis analytics), with zero issues in dynamic elements like WooCommerce sessions, FunnelKit automations, or form submissions.

- Full functionality is preserved: No disruptions in e-commerce (e.g., checkouts, subscriptions), LMS (e.g., LearnDash course progress), integrations (e.g., WP Fusion CRM syncs), or other features—validated through comprehensive testing.

- Real-user data (e.g., from Google Analytics or CrUX reports) shows no negative impacts, such as increased bounce rates or dropped conversions.

- You deliver a brief final report with before/after metrics, screenshots, and notes on changes made (including justifications for any plugin modifications).

We'll verify results in a quick review session before releasing payment. If metrics aren't met, you'll iterate until they are (within the fixed budget).

## Key Responsibilities
You'll handle the entire process end-to-end using your expertise—no guidance on specific steps or settings from us.

Focus on:

- **Auditing the Tech Stack:** Review provided snapshots (e.g., WooCommerce System Status, plugin configs, server logs) to pinpoint issues like high TTFB, poor CWV (LCP, FID, CLS), cache gaps, or funnel latencies.

- **Determining and Implementing Optimizations:** Based on your knowledge, select and apply the right configurations across the stack (e.g., tweaking caching rules, minification, deferrals) to boost performance. Stick to existing plugins; if you propose changes/additions, explain in detail why (e.g., "Adding Plugin X is necessary because it resolves Y conflict without alternatives in the current stack, and here's the low-risk implementation plan").

- **Risk Management:** Ensure dynamic elements (e.g., WooCommerce carts, FunnelKit REST endpoints, Gravity Forms tasks) are protected from caching errors. Address nuances like mobile/desktop differences or integration conflicts.

- **Testing and Validation:** Use staging for all changes, thoroughly test key flows (e.g., checkouts, course access, form submissions), and confirm improvements with tools like GTmetrix, PageSpeed Insights, Query Monitor, or New Relic. Iterate as needed to meet success metrics.

- **Deployment and Monitoring:** Roll out to live, monitor initial performance, and provide setup for basic ongoing tracking (e.g., via Cloudways Analytics).

- **Documentation:** Log your actions, rationales (especially for any stack changes), and metrics in a simple handover doc.

If plugin changes are suggested but not justified adequately, we'll reject them and expect you to proceed with the existing stack.

## Required Knowledge Base

To succeed, you need expert-level, practical familiarity with the site's ecosystem to independently choose effective optimizations. This includes understanding interdependencies (e.g., how Breeze minification impacts Elementor assets or WP Fusion syncs affect Gravity Forms). Cover configuration details, performance implications, common pitfalls, and scalability for high-traffic scenarios.

### Core Platforms
- **WordPress (v6.x+)**: Core tweaks like memory limits, cron handling, hooks/filters; pitfalls like plugin overloads affecting TTFB.
- **Apache (v2.x+)**: .htaccess for gzip/caching; integration with PHP-FPM.
- **PHP (v8.x+)**: Settings like opcache, execution limits; compatibilities with Woo loops.
- **MariaDB (v10.x+)**: Query optimization, indexing for Woo/LearnDash tables.

### Hosting and Infrastructure
- **Cloudways Autonomous (Plan 2)**: Autoscaling pods, managed security; no Varnish or custom Cloudflare access.
- **Cloudflare Enterprise (via Cloudways)**: Bypass rules for dynamics like Woo cookies; cache purge handling.

### E-commerce and Funnels
- **WooCommerce (v10.x+)**: HPOS, session handling, exclusions for wc-ajax.
- **FunnelKit (v3.x+)**: REST endpoints, automations; conflicts with caching on /checkouts/*.
- **WooCommerce Extensions**: Subscriptions, Memberships, Smart Coupons, Product Bundles, Stripe/PayPal gateways, USPS Shipping.
- **AffiliateWP (v2.x+)**: Referral tracking, cookie expiration.

### Caching and Performance
- **Breeze (v2.x+)**: Minify/combine, exclusions (e.g., FunnelKit routes), TTL, preload.
- **Object Cache Pro (with Redis v7.x+)**: Eviction, compression, non-persistent groups.
- **Perfmatters (v2.x+)**: Script Manager, CDN dirs, lazy-loading, font subsets.
- **Imagify (v2.x+)**: Image compression workflows.

### Builders and LMS
- **Elementor (v3.x+ + Pro)**: Lazy-load, asset deferral; integration with themes.
- **Essential Addons for Elementor (v6.x+)**: Extensions without performance drags.
- **LearnDash (v4.x+)**: Drip content, focus mode; cache compatibility for courses.

### Forms and CRM
- **Gravity Forms (v2.x+)**: Feeds, API handling; fixing timeouts/background tasks.
- **WP Fusion (v3.x+)**: CRM syncs (e.g., to Drip), error logs, auto-login.

### Security, SEO, and Utilities
- **Wordfence (v8.x+)**: Firewall overhead minimization.
- **Yoast SEO (v26.x+)**: Sitemaps, exclusions.
- **WP Mail SMTP Pro (v4.x+)**: Email configs.
- **Redirection (v5.x+)**: Redirect groups.
- **Advanced Custom Fields PRO (v6.x+)**: Custom fields for courses/events.
- **Code Snippets (v3.x+)**: Safe custom code additions.
- **The Events Calendar (via addons)**: Event management integrations.

## Required Skillsets
- **Independent Optimization:** Ability to diagnose issues from exports/logs and apply effective tweaks without guidance.
- **Justification Skills:** Clearly explain any proposed stack changes with pros/cons, alternatives considered, and risk assessments.
- **Testing Expertise:** Proficiency in staging workflows, A/B testing, rollback plans, and tools like GTmetrix, WebPageTest, Redis Insight.
- **Technical Proficiency:** Basic PHP/JS/regex for custom filters; security focus to avoid vulnerabilities.
- **Scalability Awareness:** Optimizations for 70k+ visits/month with autoscaling.
- **Communication:** Provide updates and a final report with metrics and notes.

## Qualifications
- **Experience:** 4+ years in WordPress speed optimization; 2+ years with FunnelKit/WooCommerce; examples of similar stacks (e.g., Cloudways + LearnDash).
- **Portfolio:** Share before/after metrics from past gigs; note any plugin change justifications.
- **Tools Mastery:** GTmetrix, PageSpeed Insights, Query Monitor, Cloudways Console.

To apply, quote your fixed price, estimated hours, and a short pitch on how you'd approach this (e.g., key areas you'd target first). Include relevant past work. Let's optimize this site!

*Note: Proposals without a portfolio or specific experience in FunnelKit/WooCommerce will not be considered.

We are seeking an experienced telecom low voltage estimator with expertise in data, security, and access control systems. The ideal candidate will be responsible for accurately estimating project costs, ensuring all aspects of low voltage installations are accounted for. Your ability to interpret blueprints, assess material needs, and provide detailed reports will be crucial. If you have a strong background in telecom estimating and a keen understanding of security and access control technologies, we want to hear from you!

We are a growing U.S.-based Managed Service Provider (MSP) in Houston, Texas. Our client base is small businesses with under 20 users/workstations. Our goal is to provide our clients with Enterprise-grade services to empower their growth.
I'm looking to partner with a senior-level Microsoft infrastructure architect/admin to augment my team, reduce my workload, and implement best practices as we scale. I have a solid high-level vision, and I need someone who can take ownership of technical leadership to implement it.
This is an ongoing, long-term collaboration starting on a part-time/flexible basis (10–30 hours/week), with the expectation that it could grow into full-time (or multiple part-time hires) as our client base expands. You'll work closely with me to review goals, identify blind spots, and architect robust, scalable solutions.

Key Responsibilities and Expertise Needed:
•Microsoft 365 Setup and Optimization: Develop templates, documentation, and standardized processes for M365 administration, migrations, and configurations to ensure consistency across clients.
•Security Solutions Evaluation and Implementation: Research, recommend, and deploy additional security tools like email/web filtering, Vaultwarden (for password management), Veeam Backup (or alternatives for data protection), Huntress (for endpoint detection), and others. Focus on holistic security to close gaps.
•Entra ID and Intune Management: Create templates for Entra ID/Active Directory setups, Intune device policies, data retention/compliance rules, and custom forms/workflows to assess customer needs. Emphasize proactive monitoring to prevent issues.
•Firewall and Network Security Configuration: Design and implement firewall rules, accounting for client VPN access while ensuring no conflicts with existing setups or our MSP tools.
•Windows Server Deployments: Set up on-premises or hybrid Windows Server environments for client offices, including domain controllers, group policies, file shares, and integration with Azure for hybrid scenarios.
•Failover and Disaster Recovery Planning: Collaborate on cost-benefit analysis for failover options (e.g., to Azure Site Recovery or an on-prem server), then implement the chosen solution with testing and documentation.

The ideal candidate is a proactive senior architect who can lead discussions, provide strategic advice, and execute hands-on. I will provide input on high-level direction, but the position requires you to work autonomously and pay thorough attention to detail. Experience in MSP/consulting environments is a big plus for understanding client-facing implementations.

What I'm Offering:
•Flexible hourly billing via Upwork.
•Potential for long-term growth into a key team role.
•Autonomy with my input on high-level direction.

I'm excited to find the right partner—let's build something awesome together!

• What is your relevant experience with the Microsoft stack (Azure, M365, Entra ID, etc.)?
• Describe your recent experience with similar projects

What We're Building:
A professional-grade entertainment system for our motorcoach fleet that delivers DRM-protected premium content (Criterion Collection) to passengers via an intuitive interface. System must work reliably in a commercial transport environment with intermittent connectivity.

The Challenge:
We have a content partnership lined up (encrypted media on physical SSDs, rotated monthly/quarterly) and DRM infrastructure selected (Intertrust ExpressPlay for Widevine/FairPlay key management). We need someone to architect and build the complete playback system that ties these pieces together into a passenger-facing product.
What Success Looks Like:

Passenger boards, scans QR code, presented with captive portal offering two options:

"Watch Movies" - connects to entertainment catalog with metadata/descriptions
"Browse Internet" - connects to 5G internet access


Content playback begins seamlessly with proper DRM protection
System works offline (content stored locally) but fetches decryption keys via API when connectivity available
No way for content to be copied/pirated - industry-standard DRM throughout
Monthly usage reports generated automatically (titles played, frequency - for content licensing compliance)
Driver has prioritized network access for operational needs
System survives the realities of motorcoach operation: vibration, temperature swings, frequent power cycling, non-technical drivers

Operating Environment:

Hardware: Small form-factor PC in passenger cabin (your recommendation on specs)
Network: 5G router with external MIMO antenna, 2-3 APs per coach for passenger coverage
Connectivity: Expect gaps in coverage on non-highway routes
Power: Ignition-sensing with graceful shutdown capability
Initial deployment: 2 coaches, plan to scale to 10+

Network Architecture Requirements:
System should include three VLANs with appropriate QoS and routing:

Driver VLAN - highest priority for operational/fleet management needs
Entertainment VLAN - local traffic only, routes to content system, no internet gateway
Passenger Internet VLAN - routes through 5G with bandwidth management/throttling

Captive portal (accessible via QR code) manages VLAN assignment and presents passengers with clear entertainment vs. internet options. Developer responsible for complete network design, VLAN configuration, firewall rules, QoS policies, and captive portal setup.
Brand Standards:
System UI must adhere to South Forty Transportation brand guidelines (will be provided):

Typography: Roboto Bold for all client-facing interfaces
Color scheme: Primary blue (#00539C), greens (#009444, #39B54A), black (#000000)
Logo usage: Full logo with proper clear space, minimum 60px digital
Date formatting: DD MMM YYYY across all displays (e.g., "28 Jan 2026")
Professional, clean aesthetic consistent with existing South Forty web presence

Developer will receive complete brand guide including logo files, color specifications, and usage guidelines. All passenger-facing screens (captive portal, entertainment catalog, UI elements) must follow these standards.
Technical Preferences (Not Requirements):
We've researched Jellyfin (UI) + Shaka Player (DRM playback) + Intertrust ExpressPlay (key management) as a potential stack, but we're open to your professional recommendation if there's a better approach that meets the DRM/offline requirements.
What We Need From You:

Technical architecture and recommended stack (hardware specs, software components)
Complete network design and VLAN configuration
Development and integration work
Documented configuration that can be replicated across additional coaches by operations team
Deployment training for our operations manager (non-technical)
Ongoing support arrangement (updates, bug fixes, troubleshooting) - expect 3-6 months minimum

What We'll Handle:

Physical hardware installation (rack mounting, antenna runs, power connections)
Applying documented configurations to additional coaches
Monthly content media swaps
Basic troubleshooting using provided documentation

Security/Access:
System must include basic access controls to prevent passengers from accessing admin functions, modifying configurations, or interfering with driver network priority.
Logging/Diagnostics:
System should log errors, connectivity issues, and playback failures for remote troubleshooting. Logs accessible by operations team without requiring developer intervention for routine issues.

Update/Maintenance Path:
Developer to document update procedures for Jellyfin, Shaka Player, and other components. System should support remote updates where possible to minimize coach downtime.
Intellectual Property & Ownership:
South Forty Transportation will retain full ownership of all code, configurations, documentation, and intellectual property developed for this project. This is work-for-hire with no ongoing royalty or equity arrangements. We require complete source code, network configurations, and comprehensive documentation with the understanding that we may commercialize this system (license to other operators, bundle with coach sales, etc.) in the future. Developer will be credited appropriately but retains no ownership stake in the final product.
Budget:

Development: $5,000-$6,000
Ongoing Support: $200-$400/month
Open to alternate pricing structures if you have a better approach

Timeline:
Q2 2026 target for first deployment, but quality matters more than speed.

About Us:
South Forty Transportation operates school bus contracts and growing motorcoach charter services in Alberta. This entertainment system is a competitive differentiator for our premium corporate/team transport services. We're a small operation (owner-operated) looking for a developer who can be a long-term technical partner as we scale, not just a one-off contractor.

• Have you implemented Widevine or FairPlay DRM in a production system before? If yes, briefly describe the project and your role.
• Describe your experience with VLAN configuration and QoS policies. What tools/platforms have you used?
• What challenges do you anticipate with DRM key delivery in an environment with intermittent connectivity
• Have you worked on systems deployed in vehicles or other harsh environments (vibration, temperature, power cycling)? What considerations did you take?
• Our proposed stack is Jellyfin + Shaka Player + ExpressPlay API. Would you recommend this approach, or do you have an alternative? Explain your reasoning.