Find Firewall Projects on Upwork Efficiently

HumAIT Platform – Phase 1 Development

This contract covers Phase 1 development of the HumAIT platform, a professional WordPress membership and digital product website designed to support a published book and a growing movement.

The goal is to build a clean, secure, scalable membership platform and digital product system with a mobile-first web application experience.

Core Platform Setup

• Clean WordPress installation and secure configuration
• Premium theme setup (Astra or Kadence)
• Mobile-first responsive design
• Progressive Web App (PWA) capability so users can add the platform to their phone home screen

Membership & Payments

• MemberPress membership system with three membership tiers
• Stripe integration for both one-time purchases and recurring memberships
• Ability for members to upgrade or downgrade subscriptions
• Secure access to protected member content

Digital Products

Secure digital delivery system for:

• The HumAIT book (PDF + Audio)
• Religion of Love (PDF + Audio)
• Future books such as Time = Time

Media Storage

• Secure structure for audio storage (AWS S3 or equivalent recommended)
• Organized media library for audio and future video resources

Member Dashboard

Members will be able to view:

• Membership level
• Purchased products
• Download history
• Payment status

Content System

• Blog / Articles section for publishing regular content
• Categories and tags for organizing articles

Email Automation

• ConvertKit integration for automated email flows
• Purchase confirmations
• Membership signup notifications

Security & Stability

• Firewall protection
• Login security and bot protection
• Secure download protection for digital files
• Automatic daily backups with restore capability

Development Process

• Development performed on a staging environment before launch
• Full testing of the purchase → access → email workflow

Administration

Admin panel should allow management of:

• Members and subscriptions
• Digital products and downloads
• Media uploads
• Blog articles

Future Expansion

The system should be structured so future multilingual expansion (including Persian/Farsi) can be implemented without rebuilding the platform.

Timeline

Estimated completion time: 4–6 weeks.

We are seeking an experienced integration specialist to enhance our multi-vendor tower security and access control systems. The ideal candidate will have a strong background in configuring cameras and implementing Edge AI technology that sends LTE alerts to a cloud NOC, while ensuring video data remains local to optimize bandwidth. Your expertise will help us streamline security processes and improve operational efficiency. If you have a passion for security technology and possess the necessary skills, we would love to hear from you!

Our website is currently being redesigned and I'm looking for a trustworthy and detail-oriented freelancer to develop it using Bricks on Wordpress.

This first project is to develop the homepage of the website designed on Figma.

If the project goes well, you'll be hired for the entire website.


We need:

- the page to look exactly like the Figma file, including the on-scroll hero section and slight animations

- you to handle the responsive design (we would like your input for the mobile version)

- the website must not yet be visible from Google as we'll transfer the site to the final domain later and don't want to be SEO penalised.


_____

OTHER IMPORTANT CRITERIA:

_____

Low-Carbon Website

The site must be intentionally lightweight:High quality yet optimized images (WebP/AVIF, proper sizing & compression)Minimal, efficient typographyLimited and purposeful animationsClean code structureMinimal plugins and third-party scriptsCaching and performance optimizationThe goal: achieving an A+ to C on https://www.websitecarbon.com


_____

Secure WordPress Setup

Latest stable WordPress version
Hardened configurationCustom admin URLLimited, vetted pluginsRole managementAutomated backupsBasic firewall / brute force protectionSecurity should be proactive and durable.

_____

Performance & SEO Targets

Minimum PageSpeed Insights scores:

Mobile:
Performance ≥ 85
Accessibility ≥ 85
Best Practices ≥ 85
SEO = 100

Desktop:
Performance ≥ 90
Accessibility ≥ 85
Best Practices ≥ 85
SEO = 100

Includes clean semantic structure, proper headings, schema where relevant, optimized metadata, Core Web Vitals compliance.

_____

Editable & Scalable

We must be autonomous post-launch:

Easy editing of text and imagesReusable content blocksSimple addition of services, testimonials, case studiesScalable structure for blog, digital products, gated contentThe build should support growth without needing a rebuild.

__
Note: the site will be built on a temporary domain.

I would like to implement shared folders to Azure Files and secure everything with native Azure AD authentication, not the classic storage-account keys. The share will serve mainly collaborative work but will also copy data models for Roughly 150 and growing cloud-only users need access, and I intend to grant that access through existing Azure AD groups and roles—no individual‐by‐individual assignments.

Here is the environment you will walk into:
• All services live in Microsoft 365; there is no on-prem AD, no servers, and no plans for VPN, ExpressRoute, or any VM-based work-arounds.
• Devices are Azure AD-joined and managed through Intune; I expect the drive to be mapped automatically via Intune configuration profiles.
• Several sub-folders (think “Finance,” “Projects and many more.) must each inherit the right group-based permissions.

What I need from you
1. A clear, step-by-step implementation plan that covers:
• Enabling Azure AD Kerberos for Azure Files in a pure cloud tenant
• Creating the share and sub-folders with the proper NTFS-style ACLs
• Automating drive mapping through Intune (PowerShell or Administrative Templates)
• Hardening recommendations—firewall rules, private endpoints, conditional access, and share snapshots for backup
2. Hands-on configuration inside my tenant (screen-shared session is fine).
3. A concise cost model that breaks down: capacity tier choices, snapshots/backup, outbound egress, and any Intune or licensing considerations, so I know what my monthly run rate will look like.
4. Post-implementation checklist and rollback notes so the setup can be audited or cloned later.

Acceptance criteria
• Users authenticate with their Azure AD credentials only; key-based access must be disabled.
• Group membership controls folder visibility and modify rights as agreed.
• Intune delivers the mapped drive seamlessly; no manual scripts needed on endpoints.
• A cost worksheet (Excel or similar) shows estimated spend for three storage scenarios (hot, cool, archive).

If you have recent experience deploying Azure Files with Azure AD only, plus Intune automation, I’d like to hear how quickly you can deliver and any potential blockers you foresee.

Skills: Cloud Computing, Sharepoint, Azure, Windows Server, Virtualization, Network Security, Automation, Data Management, System Administration, Microsoft 365

We are urgently looking for network engineers

Key Responsibilities

Provide advanced troubleshooting and problem resolution across enterprise network environments, including routing, switching, firewall, wireless, and SD-WAN technologies.
Monitor and maintain network health, performance, and availability, proactively identifying potential issues before they impact business operations.
Perform configuration, upgrades, and maintenance of network infrastructure including routers, switches, firewalls, wireless controllers, and related systems.
Support and manage Cisco routing and switching platforms (ISR, Catalyst, Nexus) and ensure optimal network performance and stability.
Manage and troubleshoot FortiGate firewalls and cloud security platforms such as Netskope and Azure Firewall, ensuring security policies and access controls are correctly implemented.
Support SD-WAN environments (VeloCloud, Meraki) including deployment, monitoring, and performance optimisation.
Maintain and troubleshoot data centre networking infrastructure, including L2/L3 routing, high availability designs, and multi-site connectivity.
Support wireless network operations including Cisco WLC and Meraki wireless platforms.
Configure and troubleshoot network authentication and access control solutions, including RADIUS, 802.1X, and Cisco ISE.
Support F5 technologies, including load balancing, SSL VPN, and application traffic management where applicable.
Assist in managing VOIP and carrier connectivity, including troubleshooting circuit or service provider issues.
Participate in major incident management, providing technical support during P1/P2 incidents to restore services quickly and effectively.
Contribute to post-incident analysis and documentation, including preparation of Major Incident and Post Incident Review (PIR) reports.
Maintain accurate network documentation, diagrams, and configuration records.
Work closely with Technical Leads, Architects, MSP teams, and offshore / onshore support teams to ensure smooth operational delivery.
Participate in assigned project work, network upgrades, migrations, and new technology initiatives as required.


Required Technical Skills
Cisco Routing & Switching (ISR, Catalyst, Nexus)
Firewalls (FortiGate / WAF)
Routing (OSPF/ BGP)
Azure / AWS Cloud Networking
Data Centre Networking (multi-site L2/L3, backbone routing)
SD-WAN (Meraki / VeloCloud)
Radius authentication (Cisco ISE / Forti Authenticator)
Wireless Technologies(Cisco WLC, Meraki)
VOIP and Carrier technologies
Big IP / F5 (VPN concentrators, Reverse Proxy)

Location : remote
Client : Australian
Timings : client will decide most probably morning 5.30Am
Budget :1.3Lakhs per month INR

"We are currently seeking 3 Network Engineers with experience across Cisco networking, Fortinet, and F5 technologies to support our Energy, Commercial, and Retail environments. This role involves managing a network estate of 1,300+ retail stores and 80+ corporate offices, operating on a 24x7 basis to augment our internal network team. The intent is to onboard dedicated engineers aligned to the network team."

Key Responsibilities

• Provide advanced troubleshooting and problem resolution across enterprise network environments, including routing, switching, firewall, wireless, and SD-WAN technologies.
• Monitor and maintain network health, performance, and availability, proactively identifying potential issues before they impact business operations.
• Perform configuration, upgrades, and maintenance of network infrastructure including routers, switches, firewalls, wireless controllers, and related systems.
• Support and manage Cisco routing and switching platforms (ISR, Catalyst, Nexus) and ensure optimal network performance and stability.
• Manage and troubleshoot FortiGate firewalls and cloud security platforms such as Netskope and Azure Firewall, ensuring security policies and access controls are correctly implemented.
• Support SD-WAN environments (VeloCloud, Meraki) including deployment, monitoring, and performance optimisation.
• Maintain and troubleshoot data centre networking infrastructure, including L2/L3 routing, high availability designs, and multi-site connectivity.
• Support wireless network operations including Cisco WLC and Meraki wireless platforms.
• Configure and troubleshoot network authentication and access control solutions, including RADIUS, 802.1X, and Cisco ISE.
• Support F5 technologies, including load balancing, SSL VPN, and application traffic management where applicable.
• Assist in managing VOIP and carrier connectivity, including troubleshooting circuit or service provider issues.
• Participate in major incident management, providing technical support during P1/P2 incidents to restore services quickly and effectively.
• Contribute to post-incident analysis and documentation, including preparation of Major Incident and Post Incident Review (PIR) reports.
• Maintain accurate network documentation, diagrams, and configuration records.
• Work closely with Technical Leads, Architects, MSP teams, and offshore / onshore support teams to ensure smooth operational delivery.
• Participate in assigned project work, network upgrades, migrations, and new technology initiatives as required.


Required Technical Skills
• Cisco Routing & Switching (ISR, Catalyst, Nexus)
• Firewalls (FortiGate / WAF)
• Routing (OSPF/ BGP)
• Azure / AWS Cloud Networking
• Data Centre Networking (multi-site L2/L3, backbone routing)
• SD-WAN (Meraki / VeloCloud)
• Radius authentication (Cisco ISE / Forti Authenticator)
• Wireless Technologies(Cisco WLC, Meraki)
• VOIP and Carrier technologies
• Big IP / F5 (VPN concentrators, Reverse Proxy)

Client Australian
Timings will be decided by Client since it would be rotational
Salary : 1.3 Lakhs per month INR
Starting date : Immediate

"We are currently seeking 3 Network Engineers with experience across Cisco networking, Fortinet, and F5 technologies to support our Energy, Commercial, and Retail environments. This role involves managing a network estate of 1,300+ retail stores and 80+ corporate offices, operating on a 24x7 basis to augment our internal network team. The intent is to onboard dedicated engineers aligned to the network team."

Key Responsibilities

• Provide advanced troubleshooting and problem resolution across enterprise network environments, including routing, switching, firewall, wireless, and SD-WAN technologies.
• Monitor and maintain network health, performance, and availability, proactively identifying potential issues before they impact business operations.
• Perform configuration, upgrades, and maintenance of network infrastructure including routers, switches, firewalls, wireless controllers, and related systems.
• Support and manage Cisco routing and switching platforms (ISR, Catalyst, Nexus) and ensure optimal network performance and stability.
• Manage and troubleshoot FortiGate firewalls and cloud security platforms such as Netskope and Azure Firewall, ensuring security policies and access controls are correctly implemented.
• Support SD-WAN environments (VeloCloud, Meraki) including deployment, monitoring, and performance optimisation.
• Maintain and troubleshoot data centre networking infrastructure, including L2/L3 routing, high availability designs, and multi-site connectivity.
• Support wireless network operations including Cisco WLC and Meraki wireless platforms.
• Configure and troubleshoot network authentication and access control solutions, including RADIUS, 802.1X, and Cisco ISE.
• Support F5 technologies, including load balancing, SSL VPN, and application traffic management where applicable.
• Assist in managing VOIP and carrier connectivity, including troubleshooting circuit or service provider issues.
• Participate in major incident management, providing technical support during P1/P2 incidents to restore services quickly and effectively.
• Contribute to post-incident analysis and documentation, including preparation of Major Incident and Post Incident Review (PIR) reports.
• Maintain accurate network documentation, diagrams, and configuration records.
• Work closely with Technical Leads, Architects, MSP teams, and offshore / onshore support teams to ensure smooth operational delivery.
• Participate in assigned project work, network upgrades, migrations, and new technology initiatives as required.


Required Technical Skills
• Cisco Routing & Switching (ISR, Catalyst, Nexus)
• Firewalls (FortiGate / WAF)
• Routing (OSPF/ BGP)
• Azure / AWS Cloud Networking
• Data Centre Networking (multi-site L2/L3, backbone routing)
• SD-WAN (Meraki / VeloCloud)
• Radius authentication (Cisco ISE / Forti Authenticator)
• Wireless Technologies(Cisco WLC, Meraki)
• VOIP and Carrier technologies
• Big IP / F5 (VPN concentrators, Reverse Proxy)

Client Australian
Timings will be decided by Client since it would be rotational
Salary : 1.3 Lakhs per month INR
Starting date : Immediate

My KVM VPS is already running Ubuntu and I now need a rock-solid WireGuard installation on it. I want to be certain that the tunnel comes up every time the server reboots, routes traffic correctly, and maintains full privacy. Once you finish, I also need a concise, step-by-step guide so I can reproduce the setup on future machines and quickly troubleshoot if something goes wrong.

Scope of work
• Install and configure the latest stable WireGuard on the Ubuntu VPS.
• Enable autostart, IPv4/IPv6 forwarding, and basic firewall rules so the interface survives kernel upgrades and reboots.
• Supply at least one working client profile (wg-quick format) that I can import into a desktop or mobile device and connect immediately.
• Produce a short document covering: prerequisites, each command you ran with a brief explanation, how to add additional peers, and a checklist of common issues with their fixes.

Acceptance criteria
The VPN must connect from my side without packet loss, leak tests must return no public IP, and a simple restart of the VPS should bring WireGuard back up automatically. also I need instruction how to install by myself for next time if I need for other servers.
Once those checks pass and your documentation is clear, the job is done.

Skills: System Admin, Linux, Troubleshooting, VPS, Ubuntu, Documentation, Network Security, VPN, System Administration

The primary objective of my project is to fix CVE-2024-3661. Said CVE was first described by Leviathan Security Group.

My project consists of two main tasks. They are:

Task #1

(a) Learn how to create a namespace in Debian GNU/Linux.

(b) Learn how to run an OpenVPN and Wireguard VPN tunnel in it.

I have a rudimentary knowledge of Debian and expect that the hired freelancer can write explanations for the relevant steps.


Task #2

Create a script that will run *automatically* after each and every reboot of Debian GNU/Linux.

Said script will create a namespace so that I can run a VPN tunnel in it.

*Automatically* because namespaces in Linux exist in memory only and are destroyed each time the device shuts down or reboots.



Skills required:

Expert-level knowledge of the following:

1. How the Linux kernel works

2. Linux networking such as routes, routing tables, DHCP, DHCP Option 121, iptables, nftables etc...



I attach a screenshot of what your script will do. Please feel free to improve it.

In addition, you may wish to view the contents of the attached text file.


Please submit your first draft of your completed work within seven (7) working days of accepting my offer. The day on which you accept my offer is Day Zero. Saturdays, Sundays and public holidays in your country are not counted towards the 7-day deadline.

I’d like WireGuard installed on my Ubuntu server together with a lightweight, browser-based GUI so I can create and revoke peers without touching the command line.
The box is a clean Ubuntu instance with full root access waiting for you.

What I need from you
• Install the latest stable WireGuard kernel module and tools
• Deploy a GUI front-end (wg-dashboard, wg-ui, or any open-source alternative you recommend)
• Generate one initial client profile and verify connectivity end-to-end
• Harden the configuration (IP-forwarding, firewall rules, service autostart)
• Provide a brief README noting every command or setting you changed

Acceptance
The tunnel must come up from my test laptop, the GUI must list peers and allow new keys to be added, and all changes should survive a reboot.

When you apply, tell me about similar WireGuard setups you have completed—your hands-on experience is the single most important factor for selection.

Skills: PHP, Linux, Ubuntu, Debian, Documentation, Network Security, Network Monitoring, System Administration

I’d like WireGuard installed on my Ubuntu server together with a lightweight, browser-based GUI so I can create and revoke peers without touching the command line.
The box is a clean Ubuntu instance with full root access waiting for you.

What I need from you
• Install the latest stable WireGuard kernel module and tools
• Deploy a GUI front-end (wg-dashboard, wg-ui, or any open-source alternative you recommend)
• Generate one initial client profile and verify connectivity end-to-end
• Harden the configuration (IP-forwarding, firewall rules, service autostart)
• Provide a brief README noting every command or setting you changed

Acceptance
The tunnel must come up from my test laptop, the GUI must list peers and allow new keys to be added, and all changes should survive a reboot.

When you apply, tell me about similar WireGuard setups you have completed—your hands-on experience is the single most important factor for selection.

Skills: PHP, Linux, Ubuntu, Debian, Documentation, Network Security, Network Monitoring, System Administration

We are looking for an experienced Elementor and 10Web developer to rebuild a fully designed consulting firm website. The design is complete; 12 pages of pixel-accurate HTML files are provided as your reference. Your job is to transcribe this design into Elementor on 10Web, not to make creative or design decisions.

This is a precision build job, not a design job.

About the Site
PiGlobal Consulting is a B2B advisory firm providing services in Finance, Cybersecurity, and Business Operations. The site serves enterprise and SMB buyers across multiple jurisdictions. Design quality, professionalism, and accuracy to the provided HTML files are non-negotiable.

What You Will Be Building
• 12 pages total; homepage, 3 service pages, 8 industry pages, contact, proposal, about, and resources
• Global header and footer built as Elementor Theme Builder templates
• 2 forms; contact form and proposal form — via WPForms with SMTP email delivery
• Full backend setup including security hardening, performance optimisation, caching, CDN, and SEO configuration

A detailed developer brief document is provided covering every requirement; design system, page build order, form specifications, plugin stack, security checklist, performance targets, and a full go-live checklist.

Technical Requirements
• Page builder: Elementor specifically — not Divi, Gutenberg, or WPBakery
• Platform: 10Web (experience with 10Web is required, not optional)
• Forms: WPForms for both contact and proposal forms
• Email delivery: WP Mail SMTP connected to Google Workspace business email — default WordPress PHP mail is not acceptable
• Security: Wordfence — firewall active, login URL changed, wp-config hardened
• SEO: Rank Math; meta descriptions are provided for every page and must be populated
• Analytics: Google Analytics 4 and Google Search Console integration
• Cookie consent: CookieYes or Termly; GDPR-compliant banner required
• Performance target: Google PageSpeed score of 85 or above on mobile and 95 or above on desktop (this is a requirement, not a guideline)

Design System
The design system is fully defined. You follow it; you do not improvise or substitute.

What We Provide
• 12 complete HTML reference files; pixel-accurate design for every page
• Full developer brief document covering every page, form, plugin, and infrastructure requirement
• All copy, meta descriptions, and page content; ready to use
• 10Web account access once hired
• Prompt responses and clear feedback throughout the project

What We Need From You
• A portfolio showing Elementor builds for professional services or B2B firms; not ecommerce or event sites
• Demonstrated experience with 10Web specifically; a live example is required
• Proven ability to rebuild an existing design from HTML reference files with pixel accuracy
• Clean, maintainable Elementor structure; no bloated plugins, no shortcuts that create technical debt
• Professional written communication in English throughout the project

Screening Questions
Proposals that do not answer all three questions will not be considered. This is not optional.

Payment structure 25% on start - 25% after header/footer approved - 25% after all pages built - 25% on full go-live

We had a previous developer complete a version of this site and was not satisfied with the result. We have since rebuilt the design from scratch in HTML. We are looking specifically for a developer who takes design accuracy seriously, reads the brief fully, and follows instructions precisely. If that describes you, this is a well-paying, well-documented, and straightforward job with everything you need provided upfront.

• 1. Have you built a site on 10Web before? Please share a live example.
• 2. Have you rebuilt an existing HTML or CSS design into Elementor before? Describe the project briefly.
• 3. What is your process for matching a pixel-accurate design in Elementor? How do you handle custom spacing, global fonts, and a defined colour system?

Fractional IT Security Engineer
Path: Fractional now — full-time as we scale

OVERVIEW
We are a growing payments company running a multi-agent AI system across a local hardware cluster (Mac Mini x3 + Nvidia DGX Spark) and a Webflow-hosted public website. We are looking for a fractional IT Security Engineer to own security across our entire operation — website, cloud infrastructure, and physical AI execution hardware.

WHAT YOU OWN
Cloudflare + Website Security

Full Cloudflare configuration and ongoing management for our domain
DNS, SSL (Full Strict), WAF, Bot Fight Mode, HTTP/3, Brotli
Cloudflare Tunnel setup and management for all local machine exposure
Cloudflare Access / Zero Trust policies
Cloudflare Workers security — API gateway hardening, rate limiting, WAF rules
Ongoing monitoring of WAF alerts, bot traffic, and anomalous patterns
Webflow DNS integration and security validation

Physical Infrastructure Security

Security architecture for a local AI execution cluster:

3x Mac Mini — Sales, Routing, and Analytics/Dashboard functions
Nvidia DGX Spark — orchestration hub (arriving shortly)


Network segmentation and access controls
Zero open inbound ports — all external traffic routes through Cloudflare Tunnel only
One machine is strictly internal only — no public exposure under any circumstance
Security review and sign-off required before DGX connects to any live data

Credential + Secret Management

Own the full credential and secret lifecycle across all platforms and devices
Cloudflare tokens, API keys, tunnel tokens, endpoint credentials
Implement and maintain a secrets management system — no hardcoded credentials anywhere
Define and enforce rotation schedules
Maintain an access inventory — who has credentials to what, at what permission level

Ongoing Monitoring + Incident Response

Security monitoring across website, cloud layer, and local machines
Alert thresholds and escalation paths
First responder for security incidents — on-call availability for urgent issues
Monthly security review summary
Proactive vulnerability assessment as infrastructure evolves


WHAT WE'RE LOOKING FOR
Required:

Cloudflare — deep working knowledge of DNS, WAF, Tunnel, Workers, and Access/Zero Trust
Experience securing local/on-premise infrastructure alongside cloud security layers
Credential and secrets management — practical experience with secrets vaults or equivalent
Comfortable working independently and owning security decisions end to end
Clear communicator — able to explain security decisions in plain language

Strongly preferred:

Experience securing AI infrastructure — local model serving, API gateway security, data boundary enforcement
Payments or fintech background
Experience building security monitoring from scratch


TO APPLY
Please share:

Relevant experience — Cloudflare, local infrastructure, and secrets management specifically
Examples of similar fractional or retainer security engagements
Your retainer structure and on-call rate
Availability and earliest start date
Any questions before you quote

I need a seasoned tester to run a full-scale penetration test on my production website. This is not a simple vulnerability scan—I’m after a true adversary-style assessment that digs into every layer of the stack. Please probe the application itself, the underlying network paths, and the database environment so I can see how each tier stands up to real-world attack techniques.

Scope
• Web application: session handling, business logic, input validation, file upload points, and any third-party integrations
• Network layer: open ports, firewall rules, lateral movement potential, VPN or cloud perimeter controls
• Database layer: authentication controls, injection resistance, privilege escalation paths, and data-at-rest exposure

Deliverables
• A concise executive summary that highlights overall risk posture
• A detailed technical report outlining each discovered vulnerability with CVSS score, proof-of-concept steps, and clear remediation guidance
• Annotated screenshots or recordings that demonstrate exploitation where relevant
• A debrief call (or written Q&A) to walk me through findings and recommended next steps
• Optional: one round of retesting after fixes to confirm closure

Tools and methodology are up to you—Burp Suite, Nmap, Metasploit, SQLmap, custom scripts—so long as your approach follows industry best practices (OWASP, PTES, NIST). All testing must respect legal boundaries; I will supply explicit written authorization before you begin.

Let me know your estimated timeline, any prerequisites you’ll need from me (credentials, staging URLs, whitelisted IPs), and a brief outline of your past work that shows you can safely execute a comprehensive penetration test across application, network, and database layers.

Skills: Web Security, Testing / QA, Software Testing, Website Testing, Usability Testing, Penetration Testing, Network Security, Risk Assessment

My Droplet on DigitalOcean hosts several client-facing sites and has been completely unreachable for the past few hours. No configuration or code changes were made before the outage, so I need an experienced Linux admin to jump in, pinpoint the cause, and bring the sites back online fast.

You’ll receive root SSH access along with any control-panel credentials you need. I’m expecting:

• Immediate investigation of networking, firewall, and service status
• Restoration of HTTP/HTTPS access to every hosted domain
• A brief rundown of what went wrong and the steps you took so I can prevent repeat incidents

The stack is a standard Nginx–PHP–MySQL setup on Ubuntu, managed through the DigitalOcean dashboard. If you’ve handled similar downtime incidents on this platform, your expertise will be invaluable. Let me know your availability and an estimated timeframe for getting everything operational again.

Skills: PHP, System Admin, Linux, Apache, MySQL, Web Hosting, Ubuntu, DigitalOcean

You will be required to take a coding and systems logic test. It will be very hard to pass using AI, unless you truly understand the subject matter and are an expert in the fields described below:

We're an AI-powered content distribution platform.

Behind the scenes, this means: distributed device infrastructure, complex proxy/VPN networks, multi-provider data scraping pipelines, real-time metric reconciliation, and dashboards that brands rely on for decision-making. When our data is wrong, our clients make bad decisions. When our infrastructure breaks, content stops publishing.

We need an engineer who treats every failure as a data integrity problem and every script as production code.

What You'll Own
Data Pipeline & Integrity

End-to-end ownership of the scrape-to-dashboard data pipeline: ingestion, normalization, reconciliation, storage, and reporting
Metric reconciliation across multiple scraping providers (Apify, custom scrapers), including mismatch resolution, deduplication, merge conflicts, and provider failover

Historical data persistence. Designing and maintaining immutable snapshot tables so all-time metrics never silently degrade

Post-matching logic: URL normalization across platforms (mobile vs desktop vs share URLs, redirects, query params), caption-based fuzzy matching as fallback, platform post ID linkage
Attribution integrity. Ensuring metrics stay tied to the correct client, agent, and account through reassignments, rotations, and account migrations

Data model health: orphan detection (posts without queue rows, queue rows without agents), relationship integrity checks, cascade handling

Building observability into every pipeline stage. Monitoring, alerting, and anomaly detection so broken pipelines never go unnoticed

API & Backend Systems

REST and/or GraphQL API design and maintenance for internal services and client-facing dashboards

Queue/worker architecture (Redis + Bull/BullMQ or equivalent). Ensuring every enqueued task completes, failures retry correctly, and partial runs are flagged

Scheduler reliability: cron jobs, task orchestration, environment parity between manual and automated runs

Database design and optimization in PostgreSQL: schema evolution, indexing strategy, query performance, migration safety
Third-party API integration management: handling rate limits, schema changes, authentication rotation, provider failover logic
Webhook and event-driven architecture for real-time data sync between services

Device Infrastructure & Automation

Automation scripts for configuring and validating a distributed fleet of Android devices at scale

Anti-detection engineering: VPN/proxy architecture, device fingerprint management, network configuration validation
Device compliance systems. Automated checks for locale, timezone, IP, carrier status, app versions, naming conventions, and security settings

Account health monitoring, ban rate analysis, and mitigation strategies

Coordination with distributed on-site hardware teams across timezones

Quality & Reliability Engineering

Every script tested against real-world device and data states before production deployment

Sandboxed rollouts. Small batch validation before fleet-wide execution

Automated regression testing for known failure modes across the full pipeline

Version pinning for app packages, OS versions, script versions, and provider schemas

CI/CD pipeline maintenance and deployment safety (canary deploys, rollback procedures)


Required Technical Skills
Core Stack

PostgreSQL: advanced (schema design, window functions, CTEs, index optimization, migration strategies, JSONB handling)
Redis: caching patterns, pub/sub, queue backends (Bull/BullMQ or similar)

Node.js and/or Python: production scripting, async patterns, error handling at scale

REST API design: versioning, authentication, rate limiting, error contracts

Git: branching strategies, code review, CI/CD integration

Data Engineering

ETL pipeline design: extraction from flaky third-party sources, transformation with validation, loading with idempotency
Data reconciliation and deduplication across multiple sources with conflicting schemas

Time-series data handling: snapshots, monotonic metric enforcement, backfill strategies

Schema evolution and migration patterns without downtime
Data quality monitoring: drift detection, anomaly alerting, completeness checks

Infrastructure & Automation

Linux systems administration: networking, DNS, firewall rules, process management

VPN/proxy architecture: debugging routing, DNS leakage, IP validation

ADB and Android device management (or equivalent embedded/IoT fleet management)

Container orchestration basics (Docker, or willingness to learn)
Monitoring stack experience (Grafana, Prometheus, Datadog, or similar)

Testing & Quality

Test-driven development: unit, integration, and end-to-end testing patterns

Edge case identification as a core engineering discipline, not an afterthought

Defensive programming: input validation, graceful degradation, fail-loud design

Load testing and performance profiling for APIs and data pipelines


You're a Strong Fit If

You have 4+ years building backend systems, data pipelines, or infrastructure automation

You've worked with physical or cloud device management at scale (BrowserStack, AWS Device Farm, Sauce Labs, mobile CI/CD, IoT fleet management)

You instinctively think about what breaks before what works
You've debugged silent data drift, the kind where numbers look plausible but are quietly wrong

You're comfortable owning a system end-to-end: from the cron job that triggers it, to the worker that processes it, to the database that stores it, to the dashboard that displays it
You write tests that cover the cases nobody thought of, not just the happy path

You communicate clearly in writing. Design docs, incident postmortems, code comments that explain "why"

Bonus Points

Experience with social media platform APIs and data quirks (TikTok, Instagram, YouTube)

Scraping infrastructure experience (Apify, Puppeteer, Playwright, headless browsers)

Experience building internal tools and admin dashboards (React preferred)

Background as an SDET, QA Platform Engineer, or Reliability Engineer

Familiarity with content distribution, influencer marketing, or creator economy platforms


How We Work

Async-first with overlap during US business hours
Direct access to the CEO. Zero management layers
Full ownership and autonomy over your domain
We ship fast but we ship right. "Works on my machine" isn't acceptable when it needs to work at scale across devices and data pipelines

Job Description:
We are a cybersecurity consulting firm seeking a hands-on Security Engineer with experience implementing NIST eight hundred-one seventy one, CMMC, or FedRAMP security controls.

This role focuses on technical implementation of security controls, not policy writing.

You will work with our consulting team to implement, configure, test, and validate security controls across cloud and enterprise environments.

Responsibilities:
• Implement NIST / CMMC security controls
• Configure security settings in Microsoft 365, Azure, AWS, or Google Cloud
• Implement MFA, access controls, logging, encryption, and system hardening
• Validate controls through testing and evidence collection
• Assist with remediation and compliance readiness

Required Skills:
• Experience with NIST eight hundred-one seventy one, CMMC Level 2, or FedRAMP controls
• Strong security engineering experience
• Microsoft 365 / Entra ID security configuration
• Azure / AWS cloud security
• Identity & Access Management
• Logging / SIEM / monitoring
• Strong communication and organizational skills

• (1) Describe a NIST or CMMC control you personally implemented and how you validated it.
• (2) What security tools or platforms have you configured? (M365, Azure, AWS, SIEM, EDR, etc.) ?
• (3) How do you collect evidence to demonstrate that a security control is implemented?

I've relocated my sippy softswitch behind the firewall NAT.

Sippy's private IP address is 172.16.16.16, and it is natted from the public IP address 102.XXX.174.XXX. I wish to configure opensips and rtpproxy to rewite SDP with the public IP instead of the private IP, but after a few minutes or every reboot, Sippy reverts to the default setup.
I’m looking for OpenSIPS expert to help me create proper configuration file for use with Sippy B2BUA.
Scenario is really simple, but configuration files that I found as examples on the net doesn’t work 100% as expected. Tried to use configuration from the official OpenSIPS book but with no success. There are issues with NAT’ed BYE requests and with ACK’s, so some modification is needed

Project Scope of Work: Magnus Strategic Advisory Web Overhaul
1. Project Overview
• Domain: www.magnus.company (Active)
• Objective: Complete brand transformation and technical overhaul. The site must transition from its current state to a high-end, C-suite advisory platform for Magnus Strategic Advisory.
• Target Audience: CEOs, Board Members, and U.S. Tech Firms, international tech firms, etc.
• Style Reference: Industrial Sophistication (McKinsey/BCG style).
2. Sitemap & Page Architecture (6 Total Pages)
The freelancer will develop the following pages using the provided executive-level copy:
1. Home Page: Hero section, Trust Bar (Partner Logos), 4 Service Cards, Global Bridge Hook, and Leadership Teaser.
2. The Global Market Bridge: Specialized page for international expansion (USA to EMEA/Asia/Europe).
3. P&L Diagnostic & Turnaround: Specialized page for business recovery and the "14-Day Audit."
4. Sales & Commercial Governance: Page focused on Miller Heiman and Strategic Account Management.
5. About Magnus (Leadership): Detailed executive profile of Founder (Talha Syed).
6. Contact & Diagnostic: Professional lead intake page.
3. The "Strategic Health Check" (Interactive Component)
The developer must implement a 2-part diagnostic questionnaire (using Typeform, Jotform, or a WordPress Multi-step form) that serves as a lead magnet.
• Conditional Logic: The form should allow users to choose their path: "Scale Globally" or "Good to Great (Optimization)."
• Key Fields: Pain points, current 12-month strategy, challenges (Scaling, Margins, Innovation), and the "2:00 AM Headache" open-text box.
• Notification: Completed forms must trigger an immediate email notification to email.
4. Design & Aesthetic Guidelines
• Color Palette: Deep Navy Blue, Charcoal Grey, Slate, and Crisp White.
• Typography: Bold, clean Sans-Serif headers (e.g., Montserrat, Inter, or Roboto).
• Imagery: Developer to source high-end, abstract industrial/financial photography. No generic "handshake" stock photos.
• Logo Treatment: All partner logos (NCR, Glory, Diebold-Nixdorf, De La Rue, Hitachi) must be rendered in grayscale/monochrome to ensure a premium, unified look.
5. Technical Requirements
• Platform: WordPress (Elementor Pro/Divi) or Webflow.
• Staging Environment: The project must be built on a development sub-domain or staging site. Do not work live on the active magnus.company domain.
• Migration: Upon approval, the freelancer is responsible for a clean migration to the live domain with 301 redirects for any existing URLs.
• Speed & SEO: Optimized for 2-second load times. All Meta-titles, Descriptions, and Alt-tags must be implemented based on provided keywords.
• Security: SSL Certificate (HTTPS) configuration and basic firewall installation.
6. Milestones & Deliverables
• Milestone 1: Mood Board & Home Page Wireframe approval.
• Milestone 2: Full site build on Staging Link (Mobile + Desktop).
• Milestone 3: Integration of the "Strategic Health Check" Questionnaire.
• Milestone 4: Final QA, Domain Migration, and Handover of credentials.
• Specify which platform (WordPress/Webflow) you recommend for this specific project and why.

I’m looking for OpenSIPS and RTPproxy expert to help me to configuration file for use with Sippy softswitch

I've relocated my sippy softswitch behind the firewall NAT.Sippy's private IP address is 172.16.16.16, and it is natted from the public IP address 102.XXX.XXX.XXX. I wish to configure opensips and rtpproxy to rewite SDP with the public IP instead of the private IP, but after a few minutes or every reboot, Sippy reverts to the default setup.

Skills: Asterisk PBX, VoIP, UNIX, Network Administration, Network Security, Network Engineering, SIP

We need a wordpress security expert who can audit our website thoroughly, some of our website buttons are redirecting to other websites.
This is our live website, we want to solve it urgently.

In the first phase we want to remove malicious code from our website and make its operations normal.

And the next phase will be about security hardening to prevent future malicious code attacks.
Write "urgent" at the top of your proposal.
We want someone who can complete the first phase urgently.

Please apply only if you can start quickly.
In your proposal we expect:

-A detailed strategy to clean our website from malicious code/attacks.

-which tools you'll use.

- how you'll satisfy us at the end that all the malicious code has been removed

We are seeking a local (Lausanne area) experienced IT consultant to configure and support a Windows PC environment for secure day-to-day business use.

The initial work includes setting up a Windows-based system with VPN-based internet access, reliable access to local network resources, remote desktop capability, and appropriate internet security measures. We are looking for someone practical and reliable who can both implement the initial setup and provide ongoing ad hoc support as needed.

This is expected to be a continuing relationship rather than a one-off task.

Scope of work
Configure a Windows PC for secure and reliable operation
Set up VPN for internet access
Ensure continued access to required local network resources
Configure remote desktop access/services
Review and strengthen internet and endpoint security settings
Advise on best practice for secure remote use, access control, and system hardening
Troubleshoot connectivity, access, and security issues as they arise
Provide ad hoc ongoing support when required

Ideal freelancer
* Strong experience with Windows administration and configuration
* Proven background in VPN setup, remote access, and local network integration
* Familiarity with Remote Desktop, firewall/security settings, endpoint protection, and secure access practices
* Able to diagnose and resolve practical system and networking issues efficiently
* Comfortable providing ongoing support on an ad hoc basis

Deliverables
* Fully configured and tested Windows PC setups VPN, local network, and remote desktop functioning correctly
* Security settings reviewed and implemented
* Simple documentation of configuration and operation
* Availability for follow-on support as needed

To apply
* Please share relevant experience with Windows systems, VPNs, secure remote access, and ongoing IT support engagements, and be located in Lausanne area

I woke up to an unexpected “your password has been changed” email from my WordPress installation. Within hours the homepage went totally blank and overall performance slowed to a crawl. I’ve already reached out to my hosting provider, but their generic scan hasn’t fixed anything, so I need an experienced WordPress security specialist to take it from here.

What I need you to do
• Perform a complete malware audit, identify every infected file, and safely remove the malicious code.
• Restore the homepage so it displays normally and make sure all other pages load without errors.
• Resolve the current slowdown by clearing any backdoors, suspicious cron jobs, or resource-hungry scripts introduced by the attack.
• Harden the site: update core, plugins, themes, adjust file permissions, and set up a reliable security plugin or firewall so this doesn’t happen again.
• Provide a short report explaining what you found, what you removed, and any preventive steps I should keep following.

Acceptance criteria
1. Homepage renders correctly on desktop and mobile.
2. Site speed returns to pre-infection levels (or better).
3. No malware flags after running a reputable scanner (Sucuri, Wordfence, or similar).
4. Backups, security plugin, and basic hardening measures are in place.

I can supply cPanel, FTP, and WordPress admin access as soon as we start. Looking forward to getting the site clean and fast again, ideally within the next 48 hours.

Skills: PHP, Web Security, WordPress, Website Management, Web Hosting, Internet Security, Web Development, Website Optimization

I’m running two Windows 11 VMs side-by-side in UTM and have already given each of them a static IPv4 address on the same bridged interface. Even so, neither machine will reply to ping requests and I can’t get a simple shared folder to appear between them.

Here’s what I need:

• Diagnose and correct the bridged-network setup inside UTM as well as any Windows network or firewall settings so VM-1 and VM-2 can ping each other reliably.
• Create a persistent shared folder (SMB is fine) that shows up in File Explorer on both machines and allows drag-and-drop file transfer in either direction without extra login prompts.
• Document the exact steps, commands, or screenshots so I can reproduce the configuration if I rebuild the VMs later.

Acceptance criteria:
1. Running “ping ” from either guest returns continuous replies.
2. A test.txt file copied into the shared folder on one VM is immediately visible and editable on the other.

We’re sticking with bridged networking—no NAT or internal network—and both guests already use fixed IPs. If guest agents, SPICE tools, or additional drivers are required, please point me to the lightest option and include the install steps.

Ready to get this wrapped up quickly; just let me know what you need to start.

Skills: System Admin, Linux, Windows Server, Network Administration, Virtual Machines, Virtualization, Documentation, Network Security

Job Description:
I am looking for a networking expert to assist with a hardware migration and optimization of my home network. I am moving from a Netgate 1100 to a Netgate 6100 and integrating new high-speed switching.
Current Environment:
Gateway: Netgate 1100 (being retired)
Switching: Existing 24-port managed switch
Segmentation: 3 existing VLANs (Home, Business, Guest) already configured.
Project Scope:
Hardware Migration: Migrate configuration from the Netgate 1100 to the Netgate 6100. Note: The 6100 has discrete (unswitched) ports; I need the LAN/Trunk ports correctly assigned to maximize the 2.5Gbps capabilities.
Switch Integration: Add a new 8-port 2.5Gbps switch to the existing 24-port switch infrastructure.
VLAN Extension: Ensure all 3 existing VLANs are correctly tagged across the new 2.5Gbps switch and the legacy 24-port switch.
Wireless Upgrade: Configure and provision 2 new WiFi Access Points (replacing old units) ensuring they broadcast the correct SSIDs mapped to the existing VLANs.
Throughput Optimization: Configure the 6100 and 2.5Gbps switch to ensure maximum throughput for streaming devices and APs.
Shared Resources: Configure Avahi/mDNS or firewall rules to allow cross-VLAN printer access from all segments while maintaining security boundaries.
Requirements:
Deep expertise in pfSense Plus and Netgate hardware.
Strong understanding of 802.1Q VLAN tagging and Inter-VLAN routing.
Experience with L3/L2 switching and mDNS/Avahi for printer discovery.
Available for a remote session to verify the configuration.

We are looking for an experienced Sipwise MR14 / Kamailio / VoIP engineer to help troubleshoot and resolve a call teardown issue on a registration trunk in our Sipwise MR14 environment.

Environment:
• Sipwise NGCP MR14
• Registration trunk to external PBX
• UDP SIP signaling
• Production telecom environment
• PBX behind external IP endpoint
• We also work with FreeSWITCH / PBX platforms, so experience there is helpful

Issue Summary:
Inbound and outbound call setup is working, but on certain calls the carrier sends a BYE, Sipwise receives it, but the PBX never receives the BYE. Sipwise eventually returns 408 Request Timeout, and later sends its own BYE which receives a 481 Unknown Dialog from the far end.

This appears to be related to one or more of the following:
• dialog routing
• Record-Route / Route handling
• Contact header or remote target issues
• registration trunk behavior
• SIP signaling path between Sipwise and PBX
• possible NAT / firewall / trunk config issue

What we need:
We need someone who can:
• review SIP traces and determine root cause
• identify whether the issue is on Sipwise, Kamailio/B2BUA behavior, registration trunk config, PBX contact handling, or network/firewall path
• recommend and implement the fix
• verify the fix with live call testing
• document what was changed

I have developed a commerical plugin for Jenkins that helps Jenkins users get a much better build, test, admin experience with Jenkins.

There are two flavors of this plugin
1. cloud: we collect all your jenkins data and host in a dedicated postgres instance
2. local: you specify your own postgres instance and data never leaves your firewall.

Ask
- You introduce Build Butler to your organization or others in your network and get it adopted / purchased.
- You will get 20% commission in annual recurring sales. Roughly
- Some of our reps have sold for $10K+ and this amount to $2000/year