Find Firewall Projects on Upwork Efficiently

# DevOps Engineer – AWS, Linux, PHP | U.S. Business Hours Required

**Job Type:** Long-Term Contract
**Experience Level:** Expert
**Location:** Remote / Worldwide
**Availability:** Monday–Friday, 9:00 AM–5:00 PM U.S. Eastern Time (ET)
**Compensation:** Hourly, based on experience

## Job Description

SavoryTab is a U.S.-based technology company developing a cloud-based point-of-sale (POS) platform for restaurants and retail businesses.

We are seeking an experienced, dependable **DevOps Engineer** to manage, monitor, secure, and optimize our production infrastructure.

Our platform processes live restaurant transactions, making system availability, performance, and reliability extremely important.

This is a long-term opportunity for someone who can take ownership of our infrastructure, identify potential problems before they affect customers, and respond quickly when technical issues arise.

**You must be available and responsive during U.S. Eastern business hours.** Candidates outside the United States are welcome, provided they can consistently work these hours.

## Key Responsibilities

- Manage and maintain our AWS cloud infrastructure.
- Monitor production servers, databases, application performance, and resource utilization.
- Troubleshoot server outages, application errors, slow response times, and connectivity issues.
- Maintain Linux servers, web servers, and PHP environments.
- Manage database performance, backups, and recovery procedures.
- Configure and maintain Cloudflare security, DNS, SSL certificates, and firewall rules.
- Implement proactive monitoring, automated alerts, and logging.
- Manage deployments, server configurations, and production environment changes.
- Improve infrastructure scalability, reliability, and security.
- Work directly with our PHP backend and Android development teams.
- Investigate production incidents and provide root-cause analysis.
- Maintain infrastructure documentation and disaster recovery procedures.

## Required Qualifications

- Minimum 5 years of professional DevOps or systems administration experience.
- Strong hands-on experience with AWS.
- Advanced Linux server administration.
- Experience supporting PHP applications, preferably CodeIgniter.
- Strong knowledge of MySQL database administration and optimization.
- Experience with Nginx or Apache.
- Experience with Cloudflare, DNS, SSL, firewalls, and server security.
- Experience implementing monitoring and alerting solutions.
- Familiarity with CI/CD pipelines and Git.
- Strong troubleshooting and problem-solving skills.
- Ability to work independently without constant supervision.
- Good written and spoken English communication.

## Preferred Qualifications

- Experience supporting SaaS or transaction-processing platforms.
- Experience with AWS CloudWatch, RDS, EC2, load balancing, and automated backups.
- Experience with Docker and infrastructure automation.
- Knowledge of networking, TCP/IP, and API connectivity.
- Experience supporting production environments with high availability requirements.

## Working Hours and Expectations

- Must be available Monday–Friday during 9:00 AM–5:00 PM Eastern Time.
- Must be reachable through an agreed communication channel during scheduled hours.
- Must respond promptly to critical production issues.
- Must communicate clearly with developers and management.
- Must provide regular infrastructure health and maintenance updates.
- Occasional emergency support outside regular hours may be required by prior agreement.

**This is not a project for someone who only checks servers occasionally. We need a proactive DevOps professional who takes responsibility for production reliability.**

## How to Apply

Please answer the following questions:

1. How many years of AWS and Linux production experience do you have?
2. Have you managed production PHP/MySQL applications? Describe your experience.
3. What monitoring tools do you recommend for a production SaaS platform?
4. Describe a critical production outage you resolved and how you prevented it from recurring.
5. Can you consistently work 9:00 AM–5:00 PM U.S. Eastern Time?
6. What is your hourly rate, and how many hours per week are you available?

We are looking for a reliable, experienced engineer interested in a long-term working relationship.

We are a software development company seeking an experienced Microsoft Azure Infrastructure Engineer to implement Azure Front Door for two existing web applications hosted on Azure App Services.

Both applications are currently operational. We need someone who can configure Azure Front Door, implement appropriate security measures, and ensure a smooth transition without disrupting production operations.

Scope of Work

Review existing Azure App Services and infrastructure.

Recommend Azure Front Door Standard or Premium.

Configure Azure Front Door for two applications (Member Portal and Admin Portal).

Configure origin groups, routing rules, and health probes.

Configure custom domains and SSL/TLS certificates.

Configure Web Application Firewall (WAF) policies.

Secure App Services against direct access, using appropriate access restrictions or Private Link.

Assist with DNS configuration and production cutover.

Test and validate both applications.

Provide a rollback plan and implementation documentation.

Required Experience

Microsoft Azure Front Door Standard/Premium

Azure App Services

Azure WAF and cloud security

Azure networking and Private Link

DNS and SSL/TLS configuration

Production deployment and troubleshooting

Project Details

Project Type: One-time project

Experience Level: Expert

Estimated Duration: 1–2 weeks

Engagement: Hourly or fixed-price, depending on experience and proposal

Start Date: As soon as possible

When Applying

Please provide:

Examples of Azure Front Door implementations you've completed.

Your recommended approach for securing two Azure App Services behind Front Door.

Your estimated hours and total cost.

Your availability to start.

Confirmation that you will provide documentation and a knowledge-transfer session.

We have an internal development team and are looking for someone who can work collaboratively with us throughout implementation.

Important: This engagement is focused on Azure infrastructure configuration, not application development.

This is for initial setup expertise and ongoing work to keep clients secure. Small business clients so needs are basic. ESXI VMs have some issues ( lots of old snapshots ) so need to backup, repair and fix these.

Require:

Fortinet

FortiGate
VLANs
NAT
firewall policies
IPsec/SSL VPN
SD-WAN
multi-WAN
WAN health checking
routing
DHCP/DNS
firmware upgrades
backup/restore
troubleshooting

VMware

ESXi administration
VM creation/cloning
datastore management
NFS/iSCSI
virtual switching
VLANs
VM migration
snapshots
backup/recovery concepts

# Complete OVH VPS Setup — Mailcow, SOGo, DNS, 2 ADS Websites — $100 Fixed

**BUDGET: $100 USD MAXIMUM FOR THE ENTIRE PROJECT.**

I need an experienced freelancer to install, configure, secure and complete ALL services on ONE existing OVH VPS.

I will provide HTML mockups for two advertising websites and an ADS administration dashboard. These are unfinished demonstrations. **The freelancer must complete 100% of the development, installation and configuration.**

The two domain names will be provided privately.

## 1. Mailcow + SOGo

- Install and configure Mailcow Dockerized for two email domains.
- Configure Postfix, Dovecot, Rspamd, ClamAV and SOGo.
- Create mailboxes, aliases, forwarding and quotas.
- Configure webmail, contacts and shared calendars with read/write permissions.
- Configure Thunderbird, Outlook and mobile email access.
- Test sending and receiving emails for both domains.

## 2. Complete OVH DNS

Configure and verify:
- A/AAAA, MX and PTR/reverse DNS.
- SPF, DKIM and DMARC for both domains.
- SRV, Autodiscover, Autoconfig, CalDAV and CardDAV.
- SSL/TLS, MTA-STS and TLS-RPT where applicable.
- Gmail/Outlook delivery, email authentication and SMTP security.

## 3. Two Advertising Websites

Complete both supplied HTML mockups:
- Website 1: premium black-and-gold design.
- Website 2: independent premium design.
- Advertising banners, images, videos, sliders and affiliate links.
- Responsive desktop/mobile layouts.

## 4. Complete ADS Administration

Finish the supplied admin mockup with a real secure PHP backend and database.

Required:
- Create, edit, delete and schedule advertisements.
- Upload images, banners and videos.
- Manage affiliate links and campaigns.
- Nine advertising placement zones.
- Automatic banner rotation and priorities.
- Visual placement management and live previews.
- Real click/impression statistics.
- Separate management for both websites.
- French-language administration.

## 5. CRITICAL — EMAIL SERVER SECURITY

**Email security is the highest priority.**

- Secure Ubuntu, SSH, firewall and Docker.
- Strong isolation between Mailcow and advertising websites.
- No ADS access to email databases, mailboxes or server secrets.
- HTTPS, strong authentication and supported 2FA.
- Brute-force, spam, antivirus and intrusion protection.
- Security alerts for SSH, login attempts and service failures.
- Protection against SQL injection, XSS and malicious uploads.
- Automatic encrypted off-server backups with 30-day retention.
- Test backup restoration and server recovery.

## 6. Final Delivery

The freelancer must deliver fully working Mailcow, SOGo, DNS, both advertising websites and ADS administration on ONE OVH VPS.

All features must be installed, secured, tested and demonstrated. Provide source code, administrator access and documentation.

**The supplied mockups are only references. No unfinished work or mockup-only delivery will be accepted.**

**FIXED TOTAL PRICE: $100 USD — ALL WORK INCLUDED.**

No additional development charges without prior approval. Final payment after successful testing and acceptance.

Skills: PHP, Linux, DNS, Interspire, VPS, Web Development, Dovecot, Postfix

I am looking for projects related to your infrastructure requirements, ranging from hardware needs to maintenance services.

Scope of work
• CCTV untuk keamanan – supply, mount, cable, and configure cameras with recording and remote-view access.
• Access Point deployment – place and tune APs so employees and guests enjoy stable, building-wide Wi-Fi.
• Server dasar on VMware – install ESXi, create initial VMs, configure and test the RAID array, then document the build.
• Router and Switch setup – rack, cable, and configure routing, VLANs, and essential firewall rules.

Manage service requirement
I want ongoing monitoring, preventive maintenance, and rapid troubleshooting for every installed device. Please outline the tools you use for 24/7 alerting and how you handle incident response.

Deliverables
1. Fully installed and tested hardware with clean cable management.
2. Documentation for CCTV layout, AP placement, server configuration, and network topology.
3. Monitoring dashboard handed over, alerting enabled for all devices.
4. Monthly maintenance checklist plus contact procedure for on-demand support.

Tell me about your experience with CCTV brands, Unifi or similar APs, VMware ESXi, and enterprise switches/routers, and propose a start date once hardware is on site. Let’s make the workspace secure, connected, and worry-free.

Skills: Troubleshooting, Technical Support, VMware, Network Administration, Documentation, CCTV, Network Security, System Administration, Incident Response

IT Sales Manager (Commission-Based), UAE

About Us
We are a UAE-based IT solutions provider supplying IT hardware, software licensing, Annual Maintenance Contracts (AMC) and professional IT services to government, semi-government and private organisations.

The Role
We are looking for a result-driven IT Sales Manager to bring new business and close deals. You earn a percentage of every deal you close, with no cap on earnings.

What You Will Sell

IT Hardware

Servers, storage, laptops, desktops and workstations
Network equipment such as switches, routers and wireless access points
Firewalls and security appliances from leading brands
Printers, scanners, UPS, racks and data centre equipment
CCTV, access control and structured cabling

Software and Licensing

Microsoft cloud and server licensing
Antivirus, endpoint security, backup and disaster recovery software
Virtualisation licensing
ERP, document management and business applications
Licence renewals and compliance

AMC (Annual Maintenance Contracts)

Comprehensive and non-comprehensive AMC for IT infrastructure
Server, network, firewall and CCTV maintenance contracts
Preventive maintenance, on-site support and SLA-based support
Contract renewals and upselling

IT Services and Consulting

Cybersecurity assessments, penetration testing, firewall and VPN implementation
ISO consulting and audits for information security, IT service management and AI management systems
Cloud migration and managed IT services
Network design, data centre setup and IT outsourcing

Key Responsibilities

Generate leads and build a strong client pipeline across the UAE
Meet IT managers, procurement teams and decision-makers
Prepare quotations and proposals with our technical team
Participate in tenders and government procurement processes
Close deals, follow up on payments and secure AMC renewals
Maintain long-term client relationships

Requirements

Minimum three years of IT sales experience in the UAE covering hardware, software and AMC
Strong existing network of clients in the UAE
Good knowledge of IT products, licensing and maintenance contracts
Experience with government tenders and vendor registration is a plus
UAE driving licence preferred
English required, Arabic is an advantage

Compensation

Commission on every deal closed, based on gross profit for hardware and software, and on contract value for AMC and services
Bonus on AMC renewals
Commission paid after the client payment is received
No earnings cap
Full technical and presales support

To apply, please submit a proposal describing your IT sales experience in the UAE, the sectors you work with, and examples of deals you have closed.

We are a B2B SaaS company. Our platform runs as three services, application, algorithm and database, and part of our infrastructure runs AWS

We are looking for an infrastructure partner to take ownership of that estate: running it day to day, and building the monitoring, environments and automation that keep it healthy without anyone having to remember to check.

Engagement shape

Part time and ongoing, not a fixed scope project.

The work changes shape over time. The first months are mostly build: monitoring and metrics, test and staging environments, CI/CD, infrastructure as code and containerisation. After that it settles into a smaller, steadier load of operating and maintaining what you built.

We are open to an agency or an individual.

How we work

In practice that means production changes are planned, scheduled and documented, with a rollback plan, and we approve them before they go ahead. You would implement changes, not approve them, and you would not push to production yourself.

What you would run
- Patching and vulnerability management, including emergency patching, with the scan evidence retained
- Configuration baselines and drift detection against a defined hardening standard
- CI/CD pipelines, including automated rollback
- Test and staging environments, and the separation between them and production
- SSH and administrative access provisioning and revocation on our approval
- Firewall and network rules, including administrative access paths
- Log collection and retention, and triage of security alerts
- Backups verified by test restore, which means the restore is actually performed, plus disaster recovery drills
- Certificate inventory and renewal before expiry
- Monitoring, alerting and a metrics stack covering utilisation, latency, throughput and error rates
- Hosting cost, monitored against a baseline, with reductions proposed
- Incident response, including the technical input to a root cause analysis

What you would build in the first months

- A monitoring and metrics stack across all three services
- Test and staging environments, properly separated from production
- Infrastructure as code covering provisioning and configuration, held in our repositories
- Unattended security updates, and patching and hardening baked into the base image and the provisioning path
- Containerisation, starting with the algorithm service
- Written runbooks for every recurring task, and architecture decisions documented as they are taken

What we are looking for

- Strong Linux and public cloud experience on production systems
- Experience working under formal change control
- Infrastructure as code and containerisation
- Clear written communication

Please include in your proposal

- References from comparable engagements
- An explanation of your role and responsibilities on those engagements, so we can see what you owned rather than what the team delivered
- Your availability
- Your hourly rate

Hands-on experience with Burp Suite for web application security testing.
Strong understanding of penetration testing methodologies and OWASP Top 10 vulnerabilities.
Ability to debug applications, analyze HTTP/HTTPS requests and responses, and troubleshoot security issues.
Experience identifying, analyzing, and reporting security vulnerabilities.
Knowledge of authentication, authorization, session management, and API security testing.
Familiarity with tools and techniques used in ethical hacking and vulnerability assessment.

We are looking for an experienced IT Security Expert / Penetration Tester for a long-term collaboration, supporting us with both technical execution and security assessments.

We are seeking someone with strong hands-on cybersecurity expertise who can independently identify, validate, and assess security vulnerabilities while leveraging automation and modern technologies to improve efficiency.

Requirements
- Several years of hands-on experience in IT Security, particularly Penetration Testing and Vulnerability Assessments

- Strong knowledge of Web Application Security, Network Security, and common attack vectors

- Experience with security tools such as Nmap, Burp Suite, Nessus, or similar

- Proficiency in Python and/or Bash for scripting and automation

- Ability to independently validate vulnerabilities, assess risks, and produce clear, actionable security reports

- Experience with automated security assessments and vulnerability scanning

- Ideally, experience integrating AI into security workflows

- Strong analytical skills and a pragmatic, solution-oriented mindset

- Ability to work independently and communicate technical findings clearly


Responsibilities
- Conduct authorized security assessments and vulnerability analyses

- Identify, validate, and prioritize security vulnerabilities

- Develop and optimize automated security assessment workflows

- Prepare structured, actionable security reports

- Provide technical recommendations and support remediation efforts

- Collaborate on improving security assessment processes and tools


What We Offer
- Long-term collaboration with recurring projects

- Flexible, remote work

- Clear project scopes and responsibilities

- Opportunity to contribute technical expertise and shape processes

- Potential for increasing project volume over time


How to Apply
Please include:

- A brief overview of your cybersecurity background and relevant experience

- Examples of previous penetration testing or vulnerability assessment projects

- Your experience with Python, automation, and AI-assisted security workflows

- Your hourly rate and current availability

We are looking for someone who combines deep technical security expertise with a strong automation mindset, rather than someone focused exclusively on compliance or theoretical security consulting.

Project Overview
We are seeking a highly qualified Cybersecurity Penetration Tester or professional cybersecurity service provider to conduct a comprehensive Vulnerability Assessment and Penetration Test (VAPT) across our IT infrastructure.

The primary objective is to identify and validate internal, external, network, application, and cloud security weaknesses; simulate realistic attack scenarios within an explicitly authorized scope; and provide actionable recommendations to strengthen our security posture.

We are looking for a professional with recognized cybersecurity certifications, practical penetration-testing experience, and a proven ability to deliver detailed technical reports that management and IT teams can use to remediate identified risks.

Scope of Work

1. Vulnerability Assessment and Penetration Testing (VAPT)
• Conduct an authorized assessment of in-scope systems and infrastructure.
• Identify vulnerabilities, insecure configurations, exposed services, and potential attack paths.
• Perform controlled exploitation where explicitly authorized and safe.
• Assess authentication, access controls, privilege escalation risks, and network segmentation.
• Validate findings manually where practical to reduce false positives.
• Classify findings by severity: Critical, High, Medium, Low, and Informational.

2. External Security Assessment
• Assess the organization's authorized public-facing IP addresses, domains, and services.
• Identify exposed ports, unnecessary services, and insecure configurations.
• Review TLS/SSL configuration and relevant security headers.
• Evaluate the external attack surface and potential entry points.
• Identify risks associated with internet-facing applications and remote-access services.

3. Internal Network Penetration Testing
• Assess authorized internal network segments and systems.
• Review Windows and Linux system security, where applicable.
• Evaluate network segmentation, administrative access, and privilege management.
• Identify weaknesses in authentication, patching, and access control.
• Assess potential lateral movement and privilege escalation paths using controlled testing.
• Review network device and firewall configurations when access is provided.

4. Cloud Security Assessment
Assess applicable cloud environments and integrations, including:
• Identity and access management (IAM).
• User privileges, administrative accounts, and MFA enforcement.
• Storage permissions and data exposure risks.
• Cloud network security rules and exposed services.
• Audit logging, monitoring, and alerting.
• Secrets management and credential exposure.
• Secure connectivity between cloud services and on-premises infrastructure.
• Cloud application integrations and data pipelines.
The consultant must clearly identify the cloud platforms and services covered in the proposed assessment.

5. Web Application and API Security
Where included in the agreed scope:
• Test authentication and authorization controls.
• Assess session management and access restrictions.
• Evaluate common web application vulnerabilities using the OWASP framework.
• Test API authentication, authorization, and input validation.
• Identify injection risks, insecure data handling, and security misconfigurations.
• Provide reproducible evidence and remediation guidance.

6. Remediation and Security Hardening
We require more than an automated vulnerability scan. The selected consultant must help us understand how to address identified weaknesses.
Expected activities include:
• Prioritizing vulnerabilities according to severity and business impact.
• Recommending configuration changes, patches, and security controls.
• Assisting with remediation implementation where agreed.
• Advising on firewall rules, access controls, MFA, monitoring, and endpoint protection.
• Conducting a follow-up validation test to confirm whether remediated findings have been resolved.

Remediation implementation must be separately identified and priced if it is not included in the original assessment.

Required Certifications
Applicants must hold at least one relevant, verifiable cybersecurity certification. Preference will be given to candidates with multiple certifications, such as:
• OSCP — Offensive Security Certified Professional.
• CEH — Certified Ethical Hacker.
• CISSP — Certified Information Systems Security Professional.
• PNPT — Practical Network Penetration Tester.
• CompTIA PenTest+.
• GPEN — GIAC Penetration Tester.
• OSWE — OffSec Web Expert.
• Relevant cloud security certifications from AWS, Microsoft Azure, or Google Cloud.

Applicants should identify their exact certification names, issuing organizations, and current status. Certifications are important, but practical experience and the quality of previous assessment reports will also influence selection.

Required Experience and Technical Skills
The ideal candidate should demonstrate experience with:
• Internal and external penetration testing.
• Vulnerability discovery and manual validation.
• Network and infrastructure security testing.
• Web application and API penetration testing.
• Cloud security assessments.
• Tools such as Nmap, Burp Suite, Nessus, Greenbone/OpenVAS, and appropriate exploitation frameworks.
• OWASP testing methodologies and recognized penetration-testing practices.
• Professional security reporting and risk-based remediation.
• Safe testing practices that protect production systems and business data.

Candidates must be able to explain their methodology, distinguish confirmed vulnerabilities from potential findings, and provide clear supporting evidence.

Required Deliverables
The selected service provider must deliver:
1. Assessment scope, methodology, and testing plan.
2. Executive summary of the overall security posture.
3. Detailed technical report documenting each finding.
4. Evidence supporting findings, including relevant screenshots or sanitized command output.
5. Severity ratings and an explanation of business impact.
6. Reproduction steps for validated findings, where safe and appropriate.
7. Recommended remediation actions for each finding.
8. Prioritized remediation roadmap.
9. Summary of confirmed vulnerabilities, potential findings, and informational observations.
10. Final presentation or review meeting with our team.
11. Follow-up validation report for remediation work included in the agreed contract.

Rules of Engagement and Authorization
All testing must be performed only against systems and assets explicitly authorized by the client.
Before testing begins, the consultant must agree to:
• Document the approved targets, scope, and testing windows.
• Avoid denial-of-service testing, destructive actions, and unnecessary access to sensitive data unless separately approved in writing.
• Protect client credentials, evidence, and confidential information.
• Notify the client promptly if a critical exposure or active compromise is discovered.
• Obtain written approval before expanding scope or implementing production changes.
• Securely handle and delete client data according to the agreed engagement terms.

Application Requirements

When submitting your proposal, please provide:
1. A brief introduction and summary of your penetration-testing experience.
2. Your relevant certifications and verification details.
3. Examples of similar VAPT engagements you have completed, with confidential information removed.
4. Your proposed assessment methodology and testing tools.
5. Your estimated project duration.
6. Your proposed hourly rate and/or fixed-price fee.
7. A clear breakdown of what is included in your fee.
8. Any additional charges for cloud assessments, remediation assistance, retesting, or reporting.
9. Your availability and expected start date.

Please do not include confidential information from previous clients in your application.

What Is Your Rate?

Please submit your most competitive professional rate for this engagement.

We are open to hourly or fixed-price proposals. We will evaluate candidates based on qualifications, technical capability, methodology, deliverables, and overall value—not price alone.

We are looking for a reliable, ethical, and technically proficient penetration tester or cybersecurity firm capable of helping us identify security weaknesses and improve our defenses.

We are looking for an experienced WordPress Security Expert to address and resolve malware issues across multiple websites under our management, ensuring the restoration of access and security to all affected sites. The ideal candidate will have a strong background in identifying, cleaning, and preventing malware on WordPress platforms, along with extensive experience in web security best practices.

Responsibilities:

Conduct thorough malware scans across all affected websites.
Identify and remove all instances of malware and any vulnerabilities that could lead to future infections.
Restore access to all websites where access has been blocked due to security concerns.
Update and secure WordPress, including all themes and plugins, to the latest versions.
Implement robust security measures to prevent future attacks, such as setting up security plugins, firewalls, and regular scanning schedules.
Provide a detailed report for each website detailing the malware removed, actions taken, and recommendations for future security measures.
Ensure that all websites are fully functional and monitor them for a set period to ensure no recurring security issues.

Requirements:

Proven track record of successful malware removal and security enhancement in WordPress.
Deep understanding of common WordPress vulnerabilities and their solutions.
Ability to work efficiently under pressure to restore service quickly and securely.
Excellent communication skills to report back on progress and provide clear maintenance and prevention guidelines.

Contract Details:

This is a fixed-price contract. Please provide your total bid for the complete recovery and securing of all sites.
Expected turnaround time for initial malware removal and restoration is ASAP.
Further monitoring and maintenance may be negotiated separately based on initial outcomes.

Application Process: Please submit your proposal with the word ALPHA with a breakdown of your strategy for tackling this project, your fixed bid, and examples of similar work you have performed. Include any certifications related to cybersecurity or web administration.

Those who don't follow directions with the keyword will not be reviewed.

Seeking remote I.T. Support Specialist with the desire to join a fast-growing company, team-oriented company with a family-feel for a San Diego Managed Service Provider. Growth opportunities are available as well as free, ongoing weekly training in a fun and casual environment where you can really be part of the long-term success of the company. We are a fast-paced MSP and ITSP company that has been in business for over 32 years. We provide fully managed IT, Voice, and Cloud solutions for small to mid-sized businesses.

The I.T. Support Specialist role would exemplify strong customer service skills and a good understanding of computers as well as building, troubleshooting, and maintaining workstations and Cloud Service, like Microsoft 365 (admin level) and others via remote support. Additionally, creating and updating procedures as needed and making sure client needs are met and exceeded.

Why Choose Natural Networks?

• Our mission is to create a place where Awesome People come to do meaningful work to grow personally and professionally and to believe in themselves.
• You can expect to work with a team of highly motivated individuals who inspire and challenge each other to grow.
• We genuinely CARE about our clients and the results they get.
• We genuinely CARE about our teammates and support them daily through flexible work schedules (hey, we all have doctor appointments and families), and continuing education.

Is This You?

• LOVE engineering, configuring, and implementing the RIGHT solution for stability and continuity in business environments
• A TEAM environment is where you thrive
• Ability to work on multiple priorities or projects simultaneously
• Problem-solving oriented, are a great troubleshooter, resourceful and detail oriented; you know how to find answers and when to delegate
• Willingness to develop personally and professionally
• Enjoys exercising great interpersonal, communication, and organizational skills with clients
• You are looking for a company that you can stay with for years to come

What Kind of Tech Can You Expect to Work on?

• Fully managed cloud and onsite services
• Microsoft 365 experience: Exchange, Teams, etc.
• Management and monitoring technologies (RMM Tools)
• Understanding of Windows firewall, DHCP, DNS, TCP/IP protocols
• Storage, backup and business continuity expertise (SAN, NAS, etc.)

Technical Requirements

1. Have a reliable, fast internet connection as well as a second connection in case the first one cannot connect.
2. Webcam capability on your computer monitor.
Education or Formal Training
• Associate's degree in computer science or related field, or equivalent combination of related education and experience
• A+ Technology Certification preferred
• Other relevant certifications are an advantage

Experience

• 3+ years IT experience
• Familiarity with networking standards is an advantage
• Advanced PC repair and troubleshooting is an advantage

Hours

• 8am – 5pm PDT/PST. These hours are subject to change.

Natural Networks is proud to be an Equal Employment Opportunity and Affirmative Action employer. We do not discriminate based upon race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics. All employment is decided based on qualifications, merit, and business need.

We can’t wait to meet you!

We are seeking an experienced Senior IT Infrastructure Engineer to support our team during an upcoming client interview for a managed IT services engagement.

The ideal candidate will have strong hands-on experience managing IT infrastructure, troubleshooting technical issues, and supporting managed IT services. You should be comfortable discussing practical infrastructure management, cybersecurity, service delivery, and IT operations with both technical and non-technical stakeholders.

This is initially an interview and advisory engagement, with the potential for additional consulting opportunities.

Key Responsibilities

Participate in a client-facing technical interview alongside our project and leadership team.

Discuss approaches to managing and supporting a small-to-medium-sized IT environment.

Answer technical questions related to infrastructure, networking, Microsoft 365, cloud services, end-user support, security, and backup and recovery.

Explain remote and onsite support models, monitoring, incident management, escalation procedures, and service continuity.

Provide technical input on transitioning IT services from an incumbent provider.

Review solution materials and prepare for likely technical and operational questions before the interview.

Communicate technical concepts clearly and confidently to diverse stakeholders.

Required Qualifications

8+ years of experience in IT infrastructure, systems or network administration, managed services, or a related field.

Strong knowledge of Windows Server, Microsoft 365, Active Directory/Entra ID, networking, firewalls, VPNs, wireless networks, and endpoint management.

Experience with infrastructure monitoring, patch management, cybersecurity, incident response, and backup and disaster recovery.

Familiarity with MSP/help desk operations, SLAs, ticket escalation, documentation, and vendor coordination.

Experience with infrastructure migrations, IT transitions, assessments, or modernization initiatives.

Excellent communication and client-facing presentation skills.

Ability to provide practical, confident answers to technical and operational questions.

Preferred Qualifications

Experience supporting government, municipal, public-sector, or regulated organizations.

Relevant Microsoft, Cisco, CompTIA, ITIL, cybersecurity, or infrastructure certifications.

Engagement Details

Engagement Type: Initial interview and technical advisory support.

Potential for Extension: Additional consulting support may be available based on project requirements.

Ideal Candidate: A senior, hands-on infrastructure professional with strong technical expertise and the ability to represent a team confidently in a client-facing discussion.

Please highlight your relevant infrastructure experience, managed services background, client-facing interview experience, and any applicable certifications in your proposal.

I need reliable, hands-on help getting a small Local Area Network running smoothly. The environment is straightforward—just a mix of Windows and macOS computers, a few laptops, and several servers / network-attached storage units—but I want it configured properly from the start and fully documented.

Here’s what I expect you to handle:
• Assign static and dynamic IP addresses so every computer, laptop, and storage server sits in the right subnet with zero conflicts.
• Fine-tune the router and switch settings (layer-2/3 VLANs, basic routing, link aggregation if useful) to maximise performance and resilience.
• Troubleshoot any connectivity or throughput issues you uncover, using standard diagnostic tools (ping, traceroute, Wireshark, etc.) as well as your own proven workflow.
• Produce clear, step-by-step documentation of the final topology, addressing scheme, and any command-line or GUI steps taken. I’ll use this for future maintenance, so plain language and screenshots are welcome.

A solid grasp of TCP/IP fundamentals, routing and switching basics, and common firewall principles is essential. If you notice anything that could be tightened up—DHCP reservations, firmware updates, security hardening—feel free to suggest and, once approved, implement it. Once everything is stable and properly recorded, the job is complete.

Skills: Linux, Computer Security, Troubleshooting, Cisco, Technical Support, Network Administration, Technical Documentation, Network Security, Network Engineering, Firewall

**Job Title: Windows Cybersecurity Specialist – Malware & Security Audit for 2 PCs**

**Project Type:** Fixed Price – One-Time Project

**Budget:** $75–150 USD (Negotiable based on experience and scope)

### Job Description

We are looking for an experienced cybersecurity specialist to perform a comprehensive security inspection of two Windows computers.

The objective is to identify and remove any viruses, malware, spyware, unauthorized remote-access tools, suspicious software, or signs of unauthorized access.

### Scope of Work

1. Perform comprehensive malware, virus, spyware, and Trojan scans on both computers using reputable security tools.
2. Inspect installed software, background processes, startup applications, scheduled tasks, and suspicious services.
3. Check for unauthorized remote-access applications, backdoors, and suspicious network connections.
4. Review Windows Defender, Firewall, Windows security settings, and relevant security logs.
5. Identify potentially unwanted programs, browser extensions, and suspicious system modifications.
6. Check Windows updates and recommend necessary security improvements.
7. Remove confirmed threats only after receiving our approval.
8. Provide a written security report for each computer, including findings, tools used, actions taken, and recommendations.

### Security and Access Requirements

- All work must be performed during scheduled supervised sessions.
- No unattended remote access is permitted.
- No passwords, private files, or confidential business information may be copied or accessed without authorization.
- No software installation, deletion, or system modification without prior approval.
- No persistent remote-access tools or background monitoring software.
- The specialist must explain the tools and procedures before starting.

### Required Qualifications

- Proven experience in Windows endpoint security, malware detection and incident response.
- Experience with Microsoft Defender and reputable security analysis tools.
- Ability to identify unauthorized remote access and persistence mechanisms.
- Good communication skills and clear written reporting.

### Deliverables

- Security inspection of 2 Windows PCs.
- Malware and suspicious activity assessment.
- Approved remediation of confirmed threats.
- Separate security report for each PC.
- Final recommendations for securing both computers.

Please include your relevant cybersecurity experience, proposed tools, estimated completion time, and fixed price for both computers.

I am looking for an experienced AWS / Windows Server specialist to set up a cloud-based Windows virtual machine on Amazon Web Services (AWS) that will serve as a Remote Desktop (RDP) server.

The goal is to allow authorized users located outside Canada to connect remotely to the virtual machine and access social networking websites through a consistent Canadian-based internet connection.

Scope of Work

Set up an AWS EC2 instance running Windows 10/11 or a suitable Windows Server version, depending on licensing and compatibility.

Configure Remote Desktop (RDP) access for authorized remote users.

Ensure that internet traffic from the virtual machine uses a Canadian IP address.

Configure secure user accounts and access permissions for multiple users, if required.

Implement appropriate security measures, including firewall rules, restricted access, and protection against unauthorized connections.

Optimize the instance for web browsing and social media management rather than heavy computing.

Provide recommendations for minimizing AWS operating costs, including options to start and stop the instance on a schedule.

Test the complete setup and provide clear instructions for connecting to the server.

Requirements

Proven experience with AWS EC2 and Windows-based virtual machines.

Strong knowledge of RDP configuration and remote access security.

Experience with AWS networking, public IP addresses, and security groups.

Ability to recommend a cost-effective configuration for light browsing and social media management.

Good communication skills and the ability to document the setup.

Deliverables

A fully functional Windows virtual machine hosted on AWS.

Secure RDP access for the designated users.

A Canadian-based public IP address for outbound internet traffic.

Basic documentation covering connection instructions, maintenance, and cost management.

NO EMAILS OR WHATS UP. PLEASE ANSWER QUESTIONS TO QUALIFY:

Instructions for the candidate: Answer in writing, in your own words, a few sentences per question. Be specific about tools, versions and real projects. If you don’t know something, say so.

Over-the-air updates (M27, M28)

Which over-the-air update tools have you used in production (for example Mender, RAUC or SWUpdate)? How many devices were updated, and what went wrong at least once?
Walk us through updating 50 gateways in the field. What happens to a gateway that loses power halfway through its update?
How would you make sure a gateway only installs updates that Vivo actually published, and never a modified one?
Since a gateway must stay online for the entire update or it cannot recover, how would you schedule updates for sites with unreliable internet?

Gateway identity (M21)

A brand-new gateway is switched on at a site for the first time. How does it prove to Vivo’s servers that it’s a genuine Vivo gateway? How would you stop a copied or cloned gateway from connecting?
With mutual TLS, the gateway and Vivo’s server share the same certificate. How would you rotate that certificate every year across all gateways?
A gateway is stolen from a community. Step by step, what happens next on Vivo’s side?

Hardening and remote access (M23, M24)

What would you change on a fresh Ubuntu Server install before it goes into a residential community, and why?
The gateway must have no ports open to the internet, but Vivo support still needs to reach it. How would you make that work?
A gateway stops sending health data. Without a site visit, how do you find out what’s wrong?

Fleet operations and experience

How would you roll out a risky change to 200 gateways without breaking all of them at once?
Describe one real incident you handled on a fleet of devices: what you saw, what you tried first that didn’t work, the root cause, and how you fixed it.



Description:

Vivo Control builds software for residential communities. We’re deploying small Linux gateways at each community that record security cameras locally and connect securely to our cloud. The recording side is already being built. We need an experienced engineer to make these gateways secure, updatable and manageable as a fleet.

What you’ll build

Gateway identity and enrollment: each gateway gets its own key and certificate, enrolls securely the first time it’s switched on, and connects to our backend over an outbound-only, mutually authenticated channel.
Hardening: a locked-down Ubuntu Server build with least-privilege access, proper secret handling, a strict firewall and no ports open to the internet.
Remote support: controlled access to logs, diagnostics and support sessions without a site visit.
Over-the-air updates: signed software updates with automatic rollback when an update fails or power is lost.
Fleet rollout and recovery: staged rollouts, a device inventory, remote recovery and fleet-wide diagnostics.

The environment

Fanless x86 mini-PCs (Intel N100/N150), 16 GB RAM, 2 TB SSD
Ubuntu Server LTS, Docker Compose, systemd
Frigate for local camera recording, plus a health endpoint on each gateway
Ruby on Rails backend
Outbound-only networking; no manufacturer cloud or P2P services

What we’re looking for

Production experience with an OTA framework such as Mender, RAUC or SWUpdate, including A/B updates and automatic rollback
Device identity and PKI: X.509 certificates, mutual TLS and secure enrollment (TPM experience is a plus)
Linux hardening and secure networking: firewalls, SSH lockdown, VPN or tunnel-based remote access, secrets management
Fleet operations: staged rollouts, remote logging and diagnostics, recovering devices without a site visit
Clear written communication and solid documentation habits

How we work

Fixed-price milestones, each with written acceptance criteria, paid on acceptance
All code and configuration in Vivo-owned repositories from day one
Weekly status updates, plus some working-hour overlap with Puerto Rico time (UTC−4)
Long-term work is available for the right person as the fleet grows

Seeking a senior cybersecurity professional for a remote role focused on network architecture, security, and AI-driven solutions. You will lead the design and implementation of secure network infrastructure, evaluate emerging technologies, and support global security initiatives. The ideal candidate has strong experience in network security, threat detection, and scalable infrastructure planning. This is a long-term opportunity for someone who can collaborate across teams and drive strategic security improvements.

We are moving a small office to a new location and need a network engineer to readdress its FortiGate firewall and Cisco switches, then bring the network back online. You will work remotely, and a technician on site will handle the physical tasks.

You will back up all device configurations, move the firewall, switches and connected devices to a new IP addressing plan, and confirm that internet access, internal routing and VLANs work after the move. Some login credentials may be missing, so you should be comfortable recovering access. When the work is done, you will write a short summary of the final IP assignments, the changes you made and any open issues.

You should have hands-on experience with FortiGate firewalls and Cisco switching, along with past IP readdressing or office relocation projects. You also need to communicate clearly in writing and keep careful documentation. The cutover will happen during a scheduled maintenance window, and if the project goes well, we would like to work with you on future network projects.

We are looking a Microsoft 365 & Endpoint Security Administrator to own day-to-day IT and security.
We currently rely on an MSP for basic support. A hardened Microsoft 365 tenant, every device enrolled and compliant, threats caught before they become incidents, staff who can spot a scam, and licensing that matches what people actually use.

This is a hands-on role. You will run the tenant, fix what is broken, document what you change, and report on security posture to the client and to our Tech Lead.

- Own the Microsoft 365 tenant end to end: Entra ID, Exchange Online, SharePoint, OneDrive, Teams.
- Manage user lifecycle: onboarding, role changes and off-boarding within 24 hours, including mailbox, OneDrive and shared-access handover.
- Design and maintain Conditional Access policies: MFA for all users, block legacy authentication, location and device-compliance rules, built on Zero Trust principles.
- Keep Global Admins to two or three named accounts; use Privileged Identity Management (PIM) for just-in-time elevation.
- Configure Exchange Online Protection and Defender for Office 365: SPF, DKIM, DMARC (moving to p=reject), anti-phishing, Safe Links, Safe Attachments.
- Govern SharePoint and Teams: external sharing settings, guest access reviews, sensitivity labels, retention policies.
- Review Microsoft Secure Score monthly and deliver a steady improvement plan.

- Audit current Microsoft licences against actual usage and role needs; remove unused and duplicate licences.
- Recommend the right mix (Business Basic, Standard, Premium, E3/E5, add-ons such as Defender, Intune, Purview) and model the cost impact.
- Manage renewals, true-ups and CSP or reseller relationships; track licence assignment per user and department.
- Report licence spend and savings to the client quarterly.

- Enroll all company Windows, macOS, iOS and Android devices in Intune; use Autopilot for zero-touch provisioning of new laptops.
- Build compliance and configuration policies: BitLocker/FileVault encryption, OS version minimums, firewall, screen lock, local admin removal.
- Manage BYOD with app protection policies so company data stays inside managed apps.
- Own patching for OS and third-party apps through Windows Update for Business and Intune; report patch compliance monthly.
- Keep an accurate hardware and software asset inventory, including warranty and lifecycle dates.

- Deploy and tune Microsoft Defender for Endpoint, Defender for Office 365 and Defender for Identity (or the equivalent in the licensed tier).
- Monitor alerts, triage incidents, and contain threats: isolate devices, revoke sessions, reset credentials, block senders and URLs.
- Run vulnerability management: weekly review of Defender exposure scores and remediation of critical findings within agreed windows.
- Centralize audit and sign-in logs; alert on risky sign-ins, new admin assignments, mailbox forwarding rules and mass downloads.
- Maintain backups for Microsoft 365 data (Exchange, SharePoint, OneDrive) with Microsoft 365 Backup, and run quarterly restore tests.
- Follow and improve the incident response runbook: contain, preserve evidence, eradicate, recover, notify, retro within five business days.
- Run phishing simulations through Defender Attack Simulation Training (or similar) at least quarterly and track click and report rates.
- Deliver short, practical training on phishing, invoice and payment fraud, gift-card scams, MFA fatigue, and social engineering by phone and text.
- Set up a simple way for staff to report suspicious email (Report Message button) and respond to every report.
- Work with finance on payment-verification controls, such as call-back checks for any change to banking details.

- Run an annual security risk assessment of the client's Microsoft 365 and endpoint environment and keep a prioritized remediation roadmap.
- Measure the tenant against the CIS Microsoft 365 Foundations Benchmark and map controls to NIST CSF and CIS Controls.
- Write and maintain IT security policies: acceptable use, access control, device, password and MFA, incident response, backup and recovery.
- Support PIPEDA obligations, including breach record-keeping and reporting of real risk of significant harm.
- Review the security of third-party apps connected to the tenant (OAuth consents, enterprise apps) and of key IT vendors.
- Coordinate the yearly external penetration test with a third-party provider and track findings to closure.

- Act as the escalation point for end-user IT support; manage tickets to agreed SLAs.
- Document the environment: tenant configuration, policies, network, admin accounts, vendors and runbooks.
- Produce a monthly report for the client covering Secure Score, device compliance, patch status, incidents, phishing results and licence changes.
- Help answer client security questionnaires and support compliance work (PIPEDA, SOC 2 readiness, cyber insurance requirements).
- 4+ years in IT administration, with at least 2 years running a Microsoft 365 tenant for an organization of 25+ users.
- Hands-on Entra ID experience: Conditional Access, MFA rollout, PIM, app registrations, hybrid identity (Entra Connect) where on-prem AD exists.
- Proven Intune deployment: Autopilot, compliance and configuration profiles, app deployment, BYOD app protection.
- Working knowledge of the Defender suite and how to read and act on its alerts.
- Clear understanding of Microsoft licensing tiers and what each includes.
- Exchange Online mail flow and email authentication (SPF, DKIM, DMARC).
- PowerShell scripting for Microsoft Graph, Exchange and Entra administration.
- Has handled at least one real security incident (phishing compromise, business email compromise, malware) from detection to close.
- Working knowledge of security frameworks: CIS Controls, NIST CSF, and ideally ISO 27001 or SOC 2.
- Degree or diploma in IT, Computer Science or Information Security, or equivalent experience.
- Writes clear documentation and can explain risk to non-technical people without jargon.
- Eligible to work in Canada; able to pass a background check.

Certifications (one or more):
- MS-102: Microsoft 365 Administrator
- MD-102: Endpoint Administrator
- SC-300: Identity and Access Administrator
- SC-200: Security Operations Analyst
- AZ-500: Azure Security Engineer
- SC-401: Information Security Administrator (Purview)
- CompTIA Security+, or for a more senior hire CISSP or CISM
Experience:
- Microsoft Sentinel.
- Microsoft Purview: DLP, sensitivity labels, eDiscovery, retention.
- Azure infrastructure basics: VMs, NSGs, Azure Backup.
- Microsoft Entra Global Secure Access (Private Access and Internet Access) and Azure Firewall.
- Microsoft Defender Vulnerability Management.
- MSP or agency background supporting several clients at once.
- Canadian public-sector requirements: Protected A/B, Canadian Centre for Cyber Security guidance, ITSG-33.
- Cyber insurance questionnaires, SOC 2 or ISO 27001 evidence gathering.
Area
Tools
Identity
Entra ID, Conditional Access, PIM, Entra Connect
Devices
Intune, Autopilot, Windows Update for Business, Apple Business Manager
Security
Defender for Endpoint, Defender for Office 365, Defender for Identity, Attack Simulation Training
Email and collaboration
Exchange Online, SharePoint, Teams, OneDrive
Compliance and data
Purview, sensitivity labels, retention, Microsoft 365 Backup
Automation
PowerShell, Microsoft Graph
Support
Ticketing system, password manager, Intune Remote Help
First 30 days
- Clean handover from the outgoing MSP: all admin credentials, documentation, vendor contacts and open tickets transferred.
- Full inventory of users, devices, licences and admin roles.
- Baseline report: Secure Score, MFA coverage, device compliance, licence waste.
First 90 days
- MFA enforced for 100% of users; legacy authentication blocked.
- 90%+ of company devices enrolled in Intune and compliant.
- SPF, DKIM and DMARC in place; DMARC at quarantine or reject.
- Licence clean-up done, with savings reported.
- First phishing simulation run and training delivered.
First year
- Secure Score up by an agreed target over baseline.
- Monthly security report delivered on time, every month.
- Quarterly restore test passed and documented.
- No repeat incidents from the same root cause.

We are looking for an experienced OPNsense firewall engineer/consultant to assist our technical team with troubleshooting an IPsec site-to-site VPN.

Our environment includes:
OPNsense 26.1.11_10-amd64 virtual firewall
SonicWall Gen 7 firewall at the remote site
Site-to-site IPsec VPN
Our internal team has experienced SonicWall engineers, but we have limited experience with OPNsense. The VPN has been configured and will connect, but we are experiencing issues with the tunnel remaining stable and properly routing traffic between the networks.
We are looking for someone who can remotely work with our engineers to:

Review the existing OPNsense IPsec configuration
Verify Phase 1 / IKE and Phase 2 settings
Review local and remote identifiers
Verify encryption, authentication, PFS, lifetimes, and DPD settings
Review routing and firewall rules
Verify NAT configuration and any required NAT exemptions
Troubleshoot tunnel disconnects or rekey issues
Troubleshoot traffic passing across the VPN
Review logs and identify configuration issues
Recommend and assist with any necessary configuration changes

Preferred Experience
Strong hands-on experience with OPNsense
Extensive experience troubleshooting IPsec site-to-site VPNs
Experience with SonicWall-to-OPNsense VPNs is highly preferred
Strong understanding of routing, NAT, firewall policies, IKE, and IPsec
Comfortable working collaboratively with an experienced network engineering team

Availability

This will be a live remote troubleshooting session with our technical team. Candidates should be available during U.S. Eastern Time business hours and comfortable working collaboratively by screen share and/or remote access.

Cybersecurity Consultant Needed — Enterprise Infrastructure Security Assessment

Engagement Type: Contract / Project-Based Consulting
Experience Level: Experienced Cybersecurity Consultant
Work Arrangement: On-site and remote support, as required

Position Overview

We are seeking an experienced Cybersecurity Consultant to assess, secure, and improve the security posture of a business IT infrastructure spanning two locations.

The ideal candidate will have hands-on experience securing physical servers, Windows Server virtual environments, enterprise network infrastructure, end-user devices, and hybrid cloud environments. The consultant must be able to identify security weaknesses, assess risks, recommend practical remediation measures, and deliver a professional technical report with an executive summary.

Current IT Infrastructure

The environment includes the following:

1. Physical Server Infrastructure
• Four HP ProLiant physical servers located across 2 locations.
• Server configuration, access controls, firmware, patching, and security hardening.

2. Virtualization and Windows Server
• Twelve virtual machines running Windows Server environments.
• Virtual machine security, administrative access, patch management, backup configuration, and isolation.

3. Network Infrastructure
• Two FortiGate firewalls.
• Two Internet Service Providers (ISPs).
• Five Cisco switches.
• Two MikroTik routers.
• Firewall rules, network segmentation, routing, VPN security, redundancy, and configuration reviews.

4. End-User Environment
• Approximately 100 end users.
• Endpoint protection, access permissions, authentication, patching, device configuration, and security awareness.
5. Cloud and Business Applications
• Hybrid integration with Microsoft 365 (Office 365).
• Sage ERP.
• Cloud identity and access management, email security, MFA, audit logging, data protection, and secure integration between on-premises and cloud systems.

Scope of Work
The consultant will be responsible for:

1. Conducting an authorized cybersecurity assessment of the existing infrastructure.

2. Reviewing the security configurations of the HP ProLiant servers and Windows Server virtual machines.

3. Assessing FortiGate firewall policies, Cisco switching, MikroTik routing, and ISP failover arrangements.

4. Reviewing Microsoft 365 security settings, user permissions, MFA, email protection, and audit logging.

5. Evaluating Sage ERP access controls, integration security, and data protection measures.

6. Reviewing endpoint protection and security controls across approximately 100 users.

7. Evaluating backup security, disaster recovery, business continuity, and incident response readiness.

8. Identifying confirmed vulnerabilities, configuration weaknesses, and potential security risks.

9. Classifying findings by severity: Critical, High, Medium, Low, and Informational.

10. Providing prioritized remediation recommendations and an actionable security improvement roadmap.

11. Delivering a written assessment report and presenting key findings to management.
All active testing must be authorized in advance, with agreed testing windows and safeguards to minimize disruption to business operations.

Required Skills and Experience

Applicants should demonstrate practical experience with:

• HP ProLiant server administration and security.
• Windows Server security and virtualization.
• Fortinet FortiGate firewall configuration and security assessment.
• Cisco switching and enterprise network security.
• MikroTik RouterOS configuration and security.
• Microsoft 365 security administration and identity protection.
• Sage ERP security and enterprise application access controls.
• Endpoint protection for Windows workstations.
• Vulnerability assessment, risk analysis, and security reporting.
• Backup validation, disaster recovery, and incident response planning.
Relevant certifications such as CISSP, CISM, Security+, CCNP Security, Fortinet certifications, Microsoft security certifications, or equivalent demonstrable experience are desirable.

Expected Deliverables

The selected consultant will provide:

• Infrastructure inventory and assessment scope.
• Technical findings with supporting evidence.
• Risk ratings and business impact analysis.
• Prioritized remediation recommendations.
• Executive summary for management.
• Technical report covering servers, networks, endpoints, and cloud services.
• Remediation roadmap with recommended priorities and timelines.
• Final findings presentation and handover session.

How to Apply

Interested consultants or cybersecurity firms should provide:
• A brief professional introduction.
• Relevant experience with similar enterprise environments.
• Certifications and technical qualifications.
• Proposed assessment methodology.
• Estimated project duration and availability.
• A breakdown of consulting fees and any additional expenses.

What Is Your Rate?

Please provide your proposed consulting rate in one or more of the following formats:
• Hourly rate
• Daily rate
• Fixed project fee for the complete assessment

My WordPress site is currently crippled by a hack that is causing unauthorized redirects, filling pages with spam, and throwing periodic 500 errors. I can still reach the dashboard, though many areas are greyed-out or throw “permission denied” messages, so deeper access (SSH, cPanel, or FTP) will probably be needed.

No previous cleanup attempts have been made—everything you find will be in its original compromised state. I need a specialist who can:

• Pinpoint and remove every piece of malicious code or file, whether it’s buried in the database, core, theme, or plugin folders.
• Restore proper core files and update WordPress, themes, and plugins to their latest safe versions.
• Reinstate full admin functionality so I’m no longer locked out of settings or plugin pages.
• Harden the installation (security keys, file permissions, .htaccess rules, malware firewall such as Wordfence or Sucuri, regular backups) so the same exploit cannot happen again.
• Provide a brief post-cleanup report outlining what was found, what was fixed, and recommendations for ongoing security.

I’m ready to hand over hosting credentials right away so you can start scanning with tools like WP-CLI, Maldet, or your preferred security suite. Speed is important because the redirects are damaging traffic and reputation, but I also need the job done thoroughly—no quick band-aid that leaves backdoors behind.

When you reply, please confirm you can begin within the next 24 hours and estimate how long the full cleanup and hardening will take.

Skills: PHP, Web Security, WordPress, MySQL, Web Hosting, Web Development, Website Optimization, Database Management, cPanel, Security Auditing

We are looking for an experienced Network & Security Engineer to assist with the setup, configuration, troubleshooting, and ongoing management of a multi-site network environment.

The ideal candidate must have strong hands-on production experience with both Fortinet and Cisco networking technologies.

Fortinet

FortiGate firewall and switch setup, configuration, and troubleshooting
Fortinet EMS Cloud setup and configuration
FortiClient deployment and management through EMS Cloud
Fortinet ZTNA design, deployment, and configuration across multiple sites
Firewall policies, NAT, VLANs, VPNs, and site-to-site connectivity

Cisco

Cisco Meraki firewall setup, configuration, and troubleshooting
Cisco Meraki switches setup and configuration
Cisco Meraki Wi-Fi / wireless access point setup and configuration
Cisco Catalyst switch setup and configuration
Meraki Dashboard administration and management
VLANs, trunking, Layer 2/Layer 3 switching, STP, and routing
Firewall policies, NAT, VPNs, and security configuration
Wireless network configuration, SSIDs, VLAN assignment, and troubleshooting
Multi-site Cisco Meraki network deployment and troubleshooting

Cloud & General Networking

Microsoft Azure networking
AWS networking
DNS and DHCP
Routing and switching
VLAN and subnet design
Site-to-site and remote-access VPNs
Multi-site network architecture
Network troubleshooting and performance optimization

Entra ID environment and help manage identity-related tasks. The work includes reviewing current configurations, identifying gaps, and recommending improvements to strengthen security and access control. You will also assist with day-to-day support, troubleshooting issues, and helping maintain a reliable identity management setup. Experience working in similar environments and handling identity-related challenges is important.
Connect it to Intune & Configure Windows Autopilot so a new laptop can ship in the box and set itself up at first sign-in.
Compliance policies: disk encryption (BitLocker / FileVault), OS update rings, screen lock, Defender active, firewall on.
Deploy standard apps: Office, Slack, Chrome, and our password manager.
Remote wipe and lost-device procedure tested.

Position overview

GainSide seeks a contract consultant to resolve Datto RMM agent upgrade issues on macOS devices managed by Microsoft Intune, SOTI MobiControl and Kandji. Our existing PPPC configurations worked correctly until recent Datto RMM agent upgrades; since then, permissions and Web Remote sessions no longer behave as expected. The consultant will find what changed in the new agent, update PPPC and related profiles across all three MDMs, and restore reliable, prompt-free agent and Web Remote operation.

Key responsibilities

Assessment and troubleshooting

- Compare the pre-upgrade and post-upgrade Datto RMM macOS agent: binary paths, bundle IDs, signing identities, designated code requirements, helper processes and system extensions.
- Identify why existing PPPC profiles stopped matching after the upgrade and which permissions are now missing or denied.
- Audit the Mac fleet for devices offline, stuck on old agent versions, or failing to upgrade.
- Diagnose using agent logs, MDM install reports, the unified log (log show), the TCC database and systemextensionsctl.
- Remediate stuck or orphaned agents, including clean uninstall/reinstall and duplicate device cleanup in the Datto RMM console.

Microsoft Intune (macOS)

- Update Intune macOS custom configuration profiles (PPPC, system extensions, notifications, managed login items) to match the upgraded agent.
- Deploy and upgrade the agent via Intune macOS PKG/LOB apps or shell scripts.
- Troubleshoot profile delivery, assignment and filter conflicts, and shell script execution failures.

Kandji (macOS)

- Revise Kandji PPPC Library Items and Custom Profiles for Full Disk Access, Accessibility and Screen Recording/Screen Capture to match the new agent's binaries and code requirements.
- Update System Extension, Notification and Managed Login Item payloads as required by the current agent version.
- Maintain Custom App and Custom Script items to install and upgrade the agent via Blueprints.
- Validate on Apple silicon and Intel Macs across supported macOS versions.

SOTI MobiControl (macOS)

- Update macOS configuration profiles (PPPC and related payloads) delivered through SOTI MobiControl.
- Deploy and upgrade the agent through SOTI packages and scripts on managed Macs.
- Troubleshoot package delivery, script execution context and device check-in issues.

Datto RMM Web Remote troubleshooting

- Resolve Web Remote sessions that fail to connect, show a black or frozen screen, are view-only, or cannot send keyboard/mouse input.
- Confirm Screen Recording/Screen Capture and Accessibility permissions are granted to the correct Web Remote components after each agent upgrade.
- Address cases where Screen Recording cannot be pre-approved via MDM, including standard-user approval settings and recurring macOS capture prompts.
- Check network and firewall requirements for Web Remote and the behavior of sessions at the login window versus a logged-in user.

Upgrade strategy and documentation

- Design a phased upgrade plan with a pilot group, success criteria and rollback steps.
- Define a repeatable pre-upgrade check so PPPC profiles are validated against each new agent release before fleet rollout.
- Produce runbooks for packaging, PPPC/permissions and Web Remote troubleshooting by MDM.
- Train GainSide IT staff to handle future agent upgrades independently.

Required qualifications

- 3+ years administering Datto RMM on macOS, including agent deployment, upgrades, site configuration and Web Remote.
- Deep understanding of macOS PPPC/TCC: building profiles with bundle IDs and code requirements (codesign -dr), and troubleshooting with tccutil, log show, systemextensionsctl and profiles.
- Proven experience diagnosing permission regressions after third-party agent updates (changed binaries, helpers or signing).
- Hands-on macOS management in Microsoft Intune: custom configuration profiles, PKG/LOB apps and shell scripts.
- Hands-on Kandji experience: Custom Apps, Custom Scripts, Custom Profiles, PPPC Library Items and Blueprints.
- Working knowledge of SOTI MobiControl for macOS profile and package delivery.
- Strong Bash/zsh scripting for install, upgrade, detection and cleanup.
- Clear written documentation and the ability to explain fixes to internal IT staff.

Preferred qualifications

- Experience with large-scale Mac agent upgrades (500+ endpoints).
- Familiarity with Apple Automated Device Enrollment, managed login items and Screen Capture changes in recent macOS releases.
- Knowledge of macOS endpoint security tools (EDR/AV) and how they interact with RMM agents.
- Certifications such as Apple Certified IT Professional, Kandji or Jamf administrator, Microsoft MD-102, or Datto/Kaseya RMM training.
- MSP or multi-tenant environment background.
- Deliverables and engagement details

Deliverables

- Root-cause report: what changed in the upgraded agent and why the existing PPPC configuration stopped working.
- Corrected PPPC, System Extension, Notification and Login Item profiles for Intune, Kandji and SOTI, tested on current macOS versions.
- Working Web Remote on managed Macs, with the required permissions documented.
- Tested macOS agent install/upgrade packages or scripts for each MDM.
- Phased upgrade plan with pilot results, rollback procedure and a pre-upgrade PPPC validation checklist.
- Runbooks, a troubleshooting guide and knowledge-transfer session(s) with GainSide IT.

To apply: send a summary of relevant Datto RMM and MDM projects, examples of PPPC profiles or deployment scripts you have built (sanitized), availability and rate.

Need a Cisco certified network technician or network engineer or network administrator to help train one of our interns two days a week, one hour each session.

The schedule would be Tuesdays 8pm to 9pm CST and Thursdays 8pm to 9pm CST.

The intern is using our lab which consists of a Cisco Firepower FPR 1010 firewall router, Cisco Catalyst C9200L switch, Cisco Aironet access point, Cisco 5508 Wireless LAN Controller, Windows 2019 Server, and a Windows 11 laptop.

Need someone to connect with the intern using Zoom, Google Meet, AnyDesk, and/or RustDesk to establish a recorded meeting session and remote desktop assist to help train intern with Putty/SSH sessions, CLI commands, setting up lab to simulate a small to medium sized business, and train him ok CCNA and Cisco skills.

We are seeking an experienced CCIE-certified Network & IT Security Consultant to lead network infrastructure, cybersecurity, and IT security initiatives for a public-sector client in New Jersey. The consultant will serve as the primary technical point of contact and work closely with the client's IT Director.

Key Responsibilities

Configure, maintain, and troubleshoot Cisco and Fortigate firewalls, Aruba switches, and Avaya VoIP systems.

Lead network security assessments, architecture reviews, firewall upgrades, and security improvements.

Conduct quarterly vulnerability assessments and provide remediation recommendations.

Support cybersecurity incident response, disaster recovery planning, and simulations.

Oversee Microsoft Intune implementation, SIEM integrations, and Proofpoint email security integration.

Support domain migrations from .com to .gov.

Develop network diagrams, security documentation, and cybersecurity roadmaps.

Coordinate with client stakeholders and supporting technical teams.


Required Qualifications

Active CCIE (Cisco Certified Internetwork Expert) certification – Mandatory.

Strong hands-on experience with Cisco and Fortigate firewalls.

Proven experience with Aruba switches and Avaya VoIP infrastructure.

Expertise in network architecture, security configuration, troubleshooting, and vulnerability management.

Experience supporting enterprise or government IT environments.

Strong communication, documentation, and technical leadership skills.


Preferred: Experience with Microsoft Intune, SIEM platforms, Proofpoint, and government domain migrations.

VPN Protocol Architect — WireGuard over TCP & Stealth VPN Documentation

I am looking for an experienced VPN protocol architect to prepare comprehensive, implementation-ready technical documentation for two VPN transport solutions: WireGuard over TCP and a Stealth VPN protocol with traffic obfuscation.

This is a documentation and architecture assignment. Full implementation is not required.

Scope of Work

1. WireGuard over TCP

* Explain the architecture, required components, and how WireGuard traffic can be transported over TCP.
* Document the server-side and client-side changes, connection flow, configuration, and compatibility requirements.
* Cover connection management, error handling, performance considerations, and security limitations.

2. Stealth VPN

* Propose a technically feasible architecture for an obfuscated VPN transport designed to make VPN traffic harder to identify and block.
* Document the protocol design, encapsulation, handshake, transport layer, server configuration, and client integration.
* Explain how it differs from standard WireGuard and WireGuard over TCP, including security and performance trade-offs.

3. Client Applications
The documentation must explicitly cover integration on the application/client side for:

* Windows
* Android
* iOS

Include required components, APIs or libraries, connection lifecycle, configuration exchange, reconnection, error handling, and platform-specific limitations.

4. Server Infrastructure
Document the server architecture, dependencies, installation and configuration steps, firewall and port requirements, certificate or key management where applicable, monitoring, logging, troubleshooting, and deployment procedures.

Required Deliverables

* Architecture diagrams and connection-flow diagrams.
* A complete technical specification for both solutions.
* Step-by-step server deployment and configuration instructions.
* Step-by-step client integration instructions for all three platforms.
* Required libraries, tools, dependencies, and version requirements.
* Security analysis, limitations, performance considerations, and testing procedures.
* Acceptance criteria and a practical implementation checklist for a separate development team.

Important Requirements

The documentation must be detailed enough for another qualified development team to implement the solutions without relying on undocumented assumptions.

Please identify any technically infeasible requirements, licensing restrictions, platform limitations, or major risks before finalizing the architecture.

No existing source code will be provided at this stage. The proposed architecture and documentation must be based on the requirements supplied, without assuming access to an existing codebase.

Proposal Requirements

Please include:

* Relevant experience with VPN protocols, WireGuard, network security, and traffic obfuscation.
* Examples of similar work or technical documentation, where available.
* Your proposed technical approach and deliverables.
* Your estimated timeline and your own fixed-price proposal.

Do not begin implementation or assume access to existing source code. The initial engagement is limited to architecture and technical documentation.

Build a lightweight on-premise integration agent and the inbound Infor M3 connector. The agent runs inside the customer network, calls M3 locally and opens only outbound HTTPS (443) to Nvelop – no inbound firewall openings and no M3 modifications.

Deliverables
1. On-prem integration agent (Docker container or Windows service): M3 API REST client (m3api-rest/execute), M3 Event Hub subscriber, local encrypted credential store, outbound-only tunnel (mTLS or signed tokens), retries with backoff, MI call throttling.
2. Optional ION connection point support (BODs such as SyncItemMaster, SyncSupplierPartyMaster, SyncPurchaseOrder) if the customer standard is ION.
3. Purchase Order Proposals → Nvelop: Event Hub on MPOPLP with PPS170MI read; fallback polling every 15 min. Configurable filters (facility, warehouse, item group, buyer, status, value threshold).

Must have
- Hands-on Infor M3 (13.x / CloudSuite) integration experience: MI programs, M3 API REST, EXPORTMI, M3 tables (MITMAS, MPOPLP, MPLINE, CIDMAS etc.)
- Bring your own M3 Setup
- M3 Event Hub and/or Infor ION (BODs, connection points)
- Strong backend skills (Java, C#/.NET, Python or Node), Docker, secure on-prem agent design
- Clear written English; overlap with CET/IST working hours

Nice to have
- MEC, Infor OS, procurement/sourcing (PPS) processes, M3 multi-company/multi-division setups

To apply
Tell us about one M3 integration you built (which MI programs/Event Hub/ION, volumes), your preferred stack for the agent, and your availability. A detailed technical spec is shared with shortlisted candidates.

I need an experienced Linux admin to set up a newly colocated Ubuntu server for a FileMaker environment. The server is racked and has Ubuntu installed, with nothing else on it yet.

The work:
- Identify and mount the storage arrays (9 disks, 4 arrays, mix of hardware RAID and SATA), mounted by UUID so they survive reboots
- Install Claris FileMaker Server directly on the Ubuntu host, with SSL certificate import
- Install the 360Works SuperContainer web service inside a VM on the same machine, so it can be restarted independently
- Harden the server: firewall, key-based SSH, restricted admin access
- Set up FileMaker scheduled backups plus an offsite copy (iDrive), and run a real restore test
- Basic monitoring, then support the cutover from the existing servers
- Written documentation at the end

What I'm looking for:
- Several years running Ubuntu servers in production
- Hands-on FileMaker Server experience on Linux, including the SSL certificate process
- Comfortable with virtualization (KVM or similar)
- Has done a server migration with a rollback plan
- Based in the U.S. timezone, available evenings and some weekends
- Clear written English; you'll report progress and explain decisions plainly

To apply, please tell me:
1. A similar FileMaker on Linux setup you've done
2. How you would back up a live FileMaker database, and why a plain filesystem snapshot isn't enough
3. Your rate or a fixed price, and when you could start (start immediately)

This is may lead to ongoing support work.