Find Firewall Projects on Upwork Efficiently

We are looking for an experienced Windows and Office 365 administrator for support as detailed below. Live/screen shared calls 8-3pm CST preferable.

Office 365 – Teams, Exchange, Azure, Sharepoint, App integrations, new release features
Security Configuration – Defender, Firewall, user profiles, IP address
New Computer Configuration
Remote Desktops and Server Access - Remote Apps with RDP Wrapper, VPNs – Hamachi
Access Database Maintenance

Tengo una tienda WooCommerce en plena producción que ya recibe picos de tráfico altos y necesito llevar su rendimiento y seguridad a nivel top.

Objetivos clave
• Tiempo de carga inicial por debajo de 1 s, con especial énfasis en minimizar scripts y servir imágenes optimizadas sin perder calidad.
• WPO integral: auditoría, implementación y validación de cachés (Object Cache, Full-Page), compresión, lazy-loading, precarga de recursos críticos y revisión de consultas SQL/PHP.
• Estabilidad del servidor ante picos: ajuste de Nginx/Apache, PHP-FPM, Redis u OPcache, y monitorización proactiva vía tools como New Relic o Grafana.
• Seguridad y mitigación de ataques: hardening WordPress, control de firewall, reglas WAF, CAPTCHAs, bloqueo de IPs y revisión de logs para detectar patrones de ataque.

Lo que espero del entregable
1. Informe inicial con benchmarks Lighthouse/GTmetrix, análisis de bottlenecks y plan de acción.
2. Implementación técnica completa dentro de un entorno de staging y posterior despliegue en producción.
3. Documento final con métricas comparativas antes/después, check-list de seguridad aplicada y guía de mantenimiento.

Perfil que valoro
– Experiencia senior demostrable en WordPress/WooCommerce, PHP avanzado y administración de sistemas Linux.
– Dominio de JavaScript moderno para optimizar y diferir assets sin romper funcionalidades.
– Casos de éxito en WPO, alta disponibilidad y hardening.
– Trabajo independiente; no agencias de marketing generalistas.

Si cumples estos requisitos y puedes aportar referencias, cuéntame tu enfoque y el tiempo estimado para cada fase. Estoy listo para empezar de inmediato.

Skills: PHP, JavaScript, WordPress, Apache, Nginx, MySQL, Redis, WooCommerce

Join our team as a Red Team Blackbox Pentester to simulate real-world attacks and enhance our security posture. You'll conduct thorough network and system assessments, identifying vulnerabilities and providing actionable insights. Your expertise will help us strengthen our defenses and protect against potential threats.

Our website is down for quite a long time now and has a problem at its back end. We are using WordPress for our website.
The job I'm offering will be as an IT support professional for troubleshooting, recovery and maintenance of our website.

Our staff and students cannot open a brand-new educational website when they are connected to the school’s office Wi-Fi. Every device—laptops, tablets and phones—shows the same “error connection loading” message, so the problem is clearly network-side rather than user-side. The site works perfectly once we switch to mobile data or an external network.

I need a network specialist who can quickly diagnose why this single educational domain is being blocked or timing out inside our LAN/WLAN and apply a clean, permanent fix. Whether it involves firewall rules, DNS filtering, SSL inspection, proxy settings or VLAN segmentation, I’m looking for clear root-cause identification and a working solution that lets the page load normally on all devices while keeping our existing security policies intact.

Deliverables:
• Identify the exact point of failure (router, firewall, DNS, content filter, etc.).
• Implement or guide us through the corrective change.
• Provide a short write-up so we can document the adjustment for future reference.

If remote access to our controller or firewall is required, I can arrange that immediately. Let me know your preferred troubleshooting tools and an estimated timeframe, and we’ll get started right away.

Skills: Linux, Web Security, DNS, Network Administration, Internet Security, Network Security, Network Engineering, Firewall

# Network & Infrastructure Consultant (Fortinet / Hyper-V / HPE Alletra / Veeam) — SaaS Company Serving K-12 Schools

## About Us

We're a small enterprise SaaS company serving K-12 schools with a Student Information System (SIS) platform. Our infrastructure is self-hosted (on-prem/colo) and supports a multi-tenant production environment that schools rely on daily. We're a .NET shop (ASP.NET, IIS, Windows Server, MS SQL Server multi-tenant database).

We're looking for a network and infrastructure expert — individual, small team, or agency — to serve as our ongoing technical authority for our core hardware/network stack, and to guide our onsite engineer through implementation, upgrades, and day-to-day best practices.

## Our Current Environment

- **Firewall/WAF:** Fortiweb (Web Application Firewall)
- **Switching:** Fortinet switches
- **Compute:** 2x Hyper-V servers (host our virtualized Windows Server environment)
- **Storage:** HPE Alletra storage array
- **Backup/DR:** Veeam (backup and restoration)
- **Application stack:** ASP.NET, IIS, Windows Server, MS SQL Server (multi-tenant)

We have an onsite engineer who can execute physical/hands-on work under your direction — you don't need to be local, but you do need to be able to produce clear, actionable guidance and documentation they can follow.

## Scope of Work

**Phase 1 — Assessment & Documentation**
- Conduct a full audit of our current network and hardware environment
- Produce a detailed network/hardware map (topology diagram, IP schema, VLANs, firewall rules/policies, switch configs, storage layout, backup jobs/retention, and how it all interconnects)
- Document current-state configuration for Fortiweb, Fortinet switches, Hyper-V hosts, HPE Alletra storage, and Veeam backup jobs
- Identify single points of failure, security gaps, and configuration risks

**Phase 2 — Recommendations**
- Provide a prioritized list of improvements: security hardening, redundancy/high availability, performance, and scalability
- Recommend capacity planning for growth (storage, compute, bandwidth) given we run a multi-tenant SaaS workload
- Advise on backup/DR strategy adequacy (RPO/RTO) using our existing Veeam setup
- Flag any end-of-life/end-of-support hardware or firmware concerns

**Phase 3 — Execution & Ongoing Support**
- Guide (and where appropriate, remotely execute alongside) our onsite engineer on approved upgrade/improvement projects
- Available for ongoing advisory support as we scale (new hardware procurement guidance, configuration changes, troubleshooting escalations)
- Be a resource we can reach out to for architecture decisions as the business grows

## What We're Looking For

- Proven hands-on expertise with **Fortinet products** (FortiWeb WAF and FortiSwitch, FortiGate/FortiOS knowledge a plus)
- Strong experience with **Microsoft Hyper-V** virtualization (host configuration, clustering/HA, performance tuning)
- Experience with **HPE Alletra** (or comparable enterprise SAN/storage platforms — HPE Nimble, 3PAR experience relevant too)
- Deep familiarity with **Veeam Backup & Replication** (backup strategy, job configuration, restoration testing, DR planning)
- Solid understanding of enterprise networking fundamentals: VLANs, routing, firewall policy design, network segmentation, security best practices
- Experience working with environments running **Windows Server, IIS, and MS SQL Server** (understanding how infrastructure decisions affect a .NET/SQL Server application stack is a big plus)
- Experience supporting SaaS or other environments where uptime and data integrity are business-critical
- Comfortable creating clear, professional documentation (network diagrams, runbooks, config docs) that a less-senior onsite engineer can follow
- Strong communication skills — able to explain technical tradeoffs to a non-network-specialist stakeholder

## Nice to Have

- Experience in education technology (EdTech) or other regulated/compliance-sensitive SaaS environments
- Relevant certifications (Fortinet NSE, VMware/Hyper-V, HPE storage certifications, Veeam VMCE)
- Prior experience as a fractional/virtual infrastructure lead for a small company

## Engagement Details

- **Engagement type:** Project-based to start (assessment + documentation), with strong potential for an ongoing retainer/advisory relationship
- **Team size:** Open to individual consultants, small teams, or agencies — please indicate which you are
- **Remote:** Yes — work will be guided remotely, executed onsite by our engineer, with occasional coordination calls
- **Timeline:** Looking to begin the assessment phase as soon as possible

## To Apply, Please Include

- Relevant experience with Fortinet, Hyper-V, HPE storage, and Veeam specifically
- An example of network documentation or an infrastructure assessment you've produced (redacted is fine)
- Whether you're applying as an individual, team, or agency, and your general availability
- Your proposed approach to Phase 1 (assessment) and a rough estimate of time/cost for it

We need a senior engineer to install, integrate and test a completely on-premises voice AI stack for a production customer-care agent.

Our server has:

2 × NVIDIA RTX PRO 6000 Blackwell GPUs
96 GB VRAM per GPU
Self-hosted LiveKit and SIP
An existing Python voice-agent runtime

No caller audio, transcripts, prompts, customer data or responses may be sent to external inference APIs.

Proposed Stack
NVIDIA Parakeet for streaming STT
Whisper large-v3-turbo as an accuracy fallback
Gemma 4 E4B as a fast turn interpreter
Gemma 4 26B-A4B as the main LLM
Kyutai streaming TTS
vLLM or SGLang
LiveKit Audio Turn Detector v1-mini
Silero VAD and local interruption handling
Docker, PostgreSQL, Redis and Qdrant
Prometheus, Grafana and OpenTelemetry

The final model selection may be adjusted based on measured accuracy and latency.

Responsibilities
Configure NVIDIA drivers, CUDA, PyTorch and NVIDIA Container Toolkit for Blackwell.
Deploy and optimize the local STT, LLM and TTS models.
Integrate all services with LiveKit Agents and our Python runtime.
Configure self-hosted LiveKit SIP, Redis, TURN, TLS, firewall and media ports.
Validate telephone codecs, sample rates and audio resampling.
Optimize product-name recognition using local aliases and phonetic matching.
Benchmark STT accuracy using real anonymized 8 kHz telephone audio.
Measure TTFA, barge-in latency, GPU usage and concurrent-call capacity.
Build reproducible Docker containers and production health checks.
Configure monitoring, automatic recovery and outbound network restrictions.
Provide complete installation and operations documentation.
Required Experience

Applicants should have hands-on experience with:

NVIDIA CUDA and GPU inference
NVIDIA Blackwell or recent enterprise GPUs
vLLM or SGLang
PyTorch and Hugging Face
Streaming STT and TTS
NVIDIA NeMo or Parakeet
Whisper
Gemma models
LiveKit, WebRTC and SIP
Python and FastAPI
Docker and Linux
Prometheus and Grafana

This is not a prompt-engineering or hosted-API project.

Deliverables
Fully working on-premises voice AI stack
Reproducible Docker deployment
Pinned dependency and model versions
STT accuracy report
TTFA and concurrency report
Monitoring dashboards
Security and outbound-traffic verification
Installation, operations and troubleshooting guides
Source code committed to our repository
Knowledge-transfer session

We are a boutique financial consultancy firm managing high-net-worth corporate portfolios and institutional investments. Our digital presence must reflect the premium, authoritative nature of our services. We are currently undertaking a comprehensive website redesign and are actively seeking an elite WordPress developer to spearhead the technical execution of this project.

Our primary objective is to transition away from our outdated digital footprint and build a highly secure, modern WordPress website that instills immediate trust and makes it seamless for corporate clients to request private consultations.

The Role:
We are not looking for a basic template installation. We need a seasoned web developer who understands how to build a bespoke, scalable architecture from the ground up. You will act as our lead technical partner, utilizing Elementor alongside a lightweight framework to create a visually striking, high-performance platform. This project requires a true professional who excels in both backend logic and frontend responsive design.

Core Responsibilities:

Custom Architecture Build: Execute a full website redesign to deliver a polished, corporate-grade WordPress website that perfectly aligns with our provided brand guidelines.
Elementor Implementation: Utilize the Elementor page builder (pro version) to construct global templates (headers, footers, archives) while keeping the codebase lean and fast.
Dynamic Content Structuring: Develop and integrate Custom Post Types (CPTs) and Advanced Custom Fields (ACF) to house our complex data, specifically our Team Profiles, Financial Whitepapers, and Investment Case Studies.
Flawless Responsive Design: Guarantee pixel-perfect responsive design across all viewports (desktop, tablet, and mobile) so our corporate clients experience a flawless interface on any device.
Consultation Funnel Integration: Implement premium landing page web design for our primary contact funnels to maximize corporate lead generation.
Security & Hardening: Execute top-tier security protocols. As a financial firm, this custom WordPress environment requires strict SSL configuration, database prefix updates, customized login paths, and robust firewall deployment.
Backend Usability: Design a heavily streamlined, intuitive backend interface so our non-technical financial staff can publish weekly market insights effortlessly without navigating complex builder menus.

Ideal Candidate Profile:

Proven track record as a senior WordPress developer and web developer, specifically working with corporate, legal, or financial brands.
Absolute mastery of Elementor Pro, dynamic tags, and custom loops.
Deep understanding of responsive design frameworks and advanced CSS/HTML.
Strong capabilities in technical SEO optimization and core web vitals, ensuring the new WordPress website loads instantly to prevent bounce rates.
Ability to operate as a full stack web developer when custom PHP or database troubleshooting is required.

To Apply:
Please submit your proposal with a brief outline of your approach to securing a financial website. To ensure you have read this brief in its entirety, please begin your cover letter with the exact phrase: "CORPORATE WEALTH". Please also include links to 3 live corporate or B2B portfolio sites you have built.

We're looking for an experienced Penetration Tester and Ethical Hacker to assess the security of our web applications, APIs, and network infrastructure. You'll identify vulnerabilities before attackers do and help us strengthen our overall security posture.

What you'll do:
- Conduct penetration tests on web applications, APIs, and network infrastructure
- Identify, document, and prioritize vulnerabilities based on risk and impact
- Perform manual and automated testing (OWASP Top 10, API security, network scanning)
- Deliver clear, actionable reports with remediation recommendations
- Retest fixes to confirm vulnerabilities are properly resolved

What we're looking for:
- Proven experience in penetration testing and ethical hacking across web, API, and network environments
- Strong knowledge of OWASP Top 10, common attack vectors, and security frameworks
- Hands-on experience with tools like Burp Suite, Nmap, Metasploit, and similar
- Ability to write clear, professional reports for both technical and non-technical audiences
- Relevant certifications preferred (OSCP, CEH, or similar)

Nice to have:
- Experience testing SaaS platforms or cloud environments (AWS, Azure, GCP)
- Familiarity with compliance frameworks like SOC 2 or ISO 27001

To apply, please share relevant experience, certifications, and a sample report or case study if available.

I keep hitting the Cloudflare 1015 “rate-limited” error across every site I maintain, including our developer instances, and I need a clean, lasting fix that does NOT rely on rotating proxies or other work-arounds that might break later.

Context
• CDN in use: Cloudflare on all domains.
• The same error appears on production and developer environments; I have not pinpointed any regional pattern yet.
• I want the root cause identified and eliminated so traffic flows normally for every visitor, everywhere.

Deliverable
A step-by-step solution (configuration changes, code tweaks, or Cloudflare rule adjustments) that you implement and verify on one site, then document so I can replicate it on the rest. The fix must survive cache purges, deploys, and Cloudflare updates without needing proxy swaps.

Acceptance Criteria
1. No 1015 responses for 48 hours under normal load, confirmed via logs and real-time testing.
2. No degradation in performance, security, or SEO.
3. Clear rollback instructions and a concise report of what was changed.

If you’ve already cracked this problem before, tell me how long it took and what tools you’ll bring—Cloudflare Rate Limiting settings, Workers, firewall rules, server-side throttling adjustments, etc.—so we can move quickly.

Skills: PHP, Linux, Web Security, SEO, Ubuntu, Network Administration, API, Cloudflare

We are an AI company and are looking for meetings with high value prospects who are interested in our products.

- An agentic AI platform for creating autonomous agents that streamline and improve BAU processes (Budget holders looking to use AI to streamline/automate processes)
- Our agentic AI testing platform that automates the end-to-end QA lifecycle - from requirements analysis to test execution and defect reporting - helping reduce release cycle effort by 50 % (budget holders: Chief Technology Officers, Head of QA testing)
- A semantic AI firewall that sits between AI models and use/application requests to ensure no data leakage. (budget holders responsible for AI models security)
- Threat Intelligence that gives you predictive, inteligence led defence. (budget holders in cyber security)
- Security Operations Centre providing you with 24/7 managed detection and response, (budget holders with SOC responsibility)
- A Workforce Intelligence Platform - turning AI investment into measurable capability & operational value. identifying champions driving adoption and value as well as teams that need reskilling support. (budget holders in HR rolling out global platforms and responsible for AI)

If you can help us with setting up with meetings in the financial services sector and non-financial services sector please reach out

We are seeking an experienced and highly motivated **Senior Cybersecurity Specialist** to join our growing team and help protect our clients' IT environments from evolving cyber threats. In this role, you will be responsible for securing networks, cloud platforms, endpoints, and business-critical systems while working closely with IT professionals and clients to implement industry best practices. The ideal candidate has a strong background in managed IT services, cybersecurity operations, vulnerability management, and cloud security, with the ability to proactively identify risks and recommend effective security solutions.

Your day-to-day responsibilities will include monitoring and maintaining secure IT infrastructures, performing security assessments and vulnerability scans, configuring and managing firewalls, endpoint protection, VPNs, and multi-factor authentication, and responding to security incidents when they arise. You will also assist with Microsoft 365, Google Workspace, Microsoft Azure, and AWS security, ensuring that client environments remain compliant, resilient, and protected against modern cyber threats. Experience with security monitoring tools, SIEM platforms, identity and access management, disaster recovery planning, and security policy implementation will be highly valued.

We are looking for someone who has at least three years of hands-on cybersecurity experience and is comfortable working in a fast-paced managed services environment. Professional certifications such as CompTIA Security+, CySA+, CEH, CISSP, AZ-500, SC-200, or similar certifications are preferred but not mandatory if you can demonstrate strong practical experience. A solid understanding of Windows Server, Active Directory, Microsoft Entra ID (Azure AD), networking fundamentals, endpoint detection and response (EDR), and common firewall platforms such as Fortinet, SonicWall, Cisco, or Palo Alto is highly desirable.

Success in this role requires excellent analytical and troubleshooting skills, strong written and verbal communication, and the ability to explain technical concepts clearly to both technical and non-technical stakeholders. We value professionals who are proactive, detail-oriented, dependable, and passionate about helping businesses strengthen their cybersecurity posture through preventative measures rather than reactive fixes.

When applying, please include a brief summary of your cybersecurity experience, the security tools and technologies you have worked with, any relevant certifications, examples of similar projects you have completed, your availability, your time zone, and why you believe you would be a great fit for this position. We are looking for someone who is committed to delivering exceptional service, building long-term client relationships, and contributing to a collaborative team focused on security excellence.

I need a live, online trainings for VPS which is hosted on Bigrock.com hosting provider.

Scope of training
• Server setup & configuration – handling SSH, user management, package management and automated updates
• Uploading Website, Update Website and Database Management
• Security practices – basic firewalling with iptables/ufw, fail2ban, intrusion-detection basics,
• Server backup/restore strategy and routine audits
• Performance optimisation

Format
– 100 % live delivery over Zoom
– Clear step-by-step instructions
– Immediate Q&A and troubleshooting during the hands-on portions
– Session recordings shared within 24 h for later review

If this matches your expertise, feel free to apply on this project.

Skills: System Admin, Linux, Apache, MySQL, Website Management, VPS, Security, Database Management, Firewall, Zoom

1 day onsite at Ho Chi Min Vietnam (Client's site)

SOW will be update upon confirmation.

Reset client's firewall, configure an access point (AP), and a TP-Link device. The main requirement is changing their internal network segment to the required subnet.
Their existing subnet has causing a conflict when setting up the SD-WAN.

Will work with client IT team overseas.

I need a complete, pre-recorded training session that equips intermediate-level professionals with practical, immediately applicable skills in Network Security, Ethical Hacking, and Data Protection. The session must be delivered as a high-quality video with slides, smoothly blending screen-recorded demonstrations and a narrated slide deck so viewers can follow along step by step.

Content depth should assume the audience already understands basic terminology yet still needs guidance on real-world implementation—think firewall hardening, vulnerability scanning workflows, exploit demonstration, and best-practice data-handling procedures. Wherever possible, showcase widely used tools such as Wireshark, Nmap, Metasploit, Burp Suite, and OWASP resources to ground the theory in hands-on practice.

I will handle distribution internally, so please ensure you own or can transfer all usage rights for both the video and slide assets.

Deliverables (attach in a single hand-over package):
• One MP4 (1080p or higher) containing the full “video with slides” lecture
• The matching slide deck in PowerPoint or PDF for reference
• Any sample scripts, lab files, or configuration snippets used during demonstrations

Acceptance will be based on:
• Clear, professional audio and visuals throughout
• Logical flow that covers Network Security → Ethical Hacking → Data Protection without large knowledge gaps
• Practical walkthroughs that an intermediate learner can replicate on his or her own lab environment

Let me know your estimated runtime and turnaround time, and feel free to suggest minor outline tweaks if it helps sharpen the learning outcome.

Skills: Video Production, Video Editing, Training Development, Network Security, Instructional Design, Content Creation, Audio Engineering, Data Protection

We need a full security analysis on a vibe coded app and added guardrails for future developments with Claude.

Ideally looking for someone with certification and who can help develop the document to follow.

We are optimizing a high-concurrency web application frontend and data pipeline interacting with complex REST and GraphQL endpoints. While 95% of our system architecture is complete, we have hit a major roadblock regarding request handling under heavy load, specific cloud infrastructure responses, and session state synchronization.

We need a backend and network traffic specialist who deeply understands modern web application architectures, cloud caching layers, API Gateway behavior, and browser-vs-script request execution differences.

---

### **Key Technical Challenges to Resolve:**

1. Data Latency & Caching Layers:
- Investigating update propagation delays between GraphQL search queries and REST detail endpoints during high-frequency data changes. Analyzing how caching layers (such as CDN/edge or intermediate caches) affect data freshness.

2. Automated vs. Browser Request Execution:
- Troubleshooting a scenario where specific state-updating HTTP methods (`PUT`) succeed seamlessly when executed natively inside a browser context, but encounter edge gateway/firewall blocks when automated via custom HTTP clients, despite identical payload and authentication structure.

3. Inventory State & Concurrency Control:
- Analyzing backend race conditions, TTL-based soft reserves, and inventory count synchronization models under high request volumes.

4. Lifecycle & Persistence Management:
- Reviewing entity creation lifecycles, database persistence rules, and automatic expiration windows for uncommitted workflow tokens.

---

### **Ideal Candidate Profile:**
- Deep expertise in AWS serverless infrastructure, API Gateway configuration, and advanced request routing/security policies.
- Advanced proficiency in inspecting complex browser network traffic, session header requirements, and programmatic client integration.
- Practical, hands-on experience solving complex networking and concurrency bottlenecks in high-load web systems.

Please share your background with network analysis, API optimization, and similar architectural troubleshooting when applying.

Skills: Cloud Computing, Web Development, API, Backend Development, Frontend Development, Cloud, GraphQL, API Development, Web Application, REST API

We are optimizing a high-concurrency web application frontend and data pipeline interacting with complex REST and GraphQL endpoints. While 95% of our system architecture is complete, we have hit a major roadblock regarding request handling under heavy load, specific cloud infrastructure responses, and session state synchronization.

We need a backend and network traffic specialist who deeply understands modern web application architectures, cloud caching layers, API Gateway behavior, and browser-vs-script request execution differences.

---

### **Key Technical Challenges to Resolve:**

1. Data Latency & Caching Layers:
- Investigating update propagation delays between GraphQL search queries and REST detail endpoints during high-frequency data changes. Analyzing how caching layers (such as CDN/edge or intermediate caches) affect data freshness.

2. Automated vs. Browser Request Execution:
- Troubleshooting a scenario where specific state-updating HTTP methods (`PUT`) succeed seamlessly when executed natively inside a browser context, but encounter edge gateway/firewall blocks when automated via custom HTTP clients, despite identical payload and authentication structure.

3. Inventory State & Concurrency Control:
- Analyzing backend race conditions, TTL-based soft reserves, and inventory count synchronization models under high request volumes.

4. Lifecycle & Persistence Management:
- Reviewing entity creation lifecycles, database persistence rules, and automatic expiration windows for uncommitted workflow tokens.

---

### **Ideal Candidate Profile:**
- Deep expertise in AWS serverless infrastructure, API Gateway configuration, and advanced request routing/security policies.
- Advanced proficiency in inspecting complex browser network traffic, session header requirements, and programmatic client integration.
- Practical, hands-on experience solving complex networking and concurrency bottlenecks in high-load web systems.

Please share your background with network analysis, API optimization, and similar architectural troubleshooting when applying.

Skills: Cloud Computing, Web Development, API, Backend Development, Frontend Development, Cloud, GraphQL, API Development, Web Application, REST API

# Website Functional Specification – Section Details

## 1. Technology Requirements

This section defines the technology stack used to build the website.

It includes:

* Content Management System (CMS)
* Website builder/framework
* Database
* Programming language
* Hosting compatibility
* SSL certificate
* Automatic backups
* Staging environment
* Performance optimization
* Security standards
* Future scalability

---

## 2. Branding

This section defines your company's visual identity.

It includes:

* Company logo
* Brand colors
* Typography (fonts)
* Icons
* Banner design
* Image style
* Button styles
* Card design
* Page layouts
* Brand consistency

---

## 3. Header

This is the top section visible on every page.

It includes:

* Company logo
* Navigation menu
* Search bar
* Contact phone
* Email
* Business hours
* Request Quote button
* Customer Login
* Language selector (future)
* Sticky navigation while scrolling

---

## 4. Homepage

The homepage is the company's main marketing page.

It includes:

* Hero banner
* Company introduction
* Featured products
* Product categories
* Why Choose Us
* Company statistics
* Services
* Delivery information
* Food Safety
* Certifications
* Customer testimonials
* Latest news
* Latest blog posts
* Partner logos
* Newsletter signup
* Contact section
* Google Map
* Footer

---

## 5. Product Categories

Organizes all products.

Each category contains:

* Category image
* Description
* Product count
* Product listing
* Category filters
* Pagination

---

## 6. Individual Product Pages

Each product page displays detailed product information.

It includes:

* Product images
* Image gallery
* Product name
* SKU
* Product description
* Product specifications
* Weight
* Packaging
* Unit
* Country of origin
* Halal information
* Fresh/Frozen status
* Storage instructions
* Shelf life
* Nutritional facts
* Ingredients
* Allergen information
* Product availability
* Related products
* Recently viewed products
* PDF specification sheet
* Request Quote button

---

## 7. Search

Allows users to quickly find products.

Includes:

* Keyword search
* Live search suggestions
* Search by SKU
* Search by category
* Search by product name
* Search by brand

---

## 8. Filters

Allows customers to narrow search results.

Includes filters for:

* Category
* Meat type
* Brand
* Package size
* Weight
* Origin
* Halal
* Fresh/Frozen
* Availability

---

## 9. Customer Portal

A secure area for registered customers.

Features:

* Registration
* Login
* Password reset
* User profile
* Saved addresses
* Saved products
* Quote history
* Order history
* Favorite products
* Account settings

---

## 10. Quote Request System

Allows customers to request pricing.

Customers can:

* Select products
* Enter quantities
* Upload documents
* Add notes
* Submit quote requests

Administrator receives:

* Customer information
* Product list
* Requested quantities
* Delivery location
* Notes

---

## 11. Contact Page

Provides communication methods.

Includes:

* Contact form
* Sales email
* Support email
* Phone numbers
* Business address
* Google Maps
* Office hours
* Social media links

---

## 12. Blog

Used for marketing and SEO.

Includes:

* Articles
* Industry news
* Company news
* Recipes
* Food safety tips
* Search function
* Categories

---

## 13. Careers

Allows applicants to apply online.

Includes:

* Job listings
* Job descriptions
* Resume upload
* Online application form

---

## 14. Food Safety

Shows your company's quality standards.

Includes:

* Food handling
* Storage procedures
* Transportation standards
* Quality assurance
* HACCP information
* Halal certification
* Best practices

---

## 15. Delivery

Explains delivery services.

Includes:

* Delivery areas
* Delivery schedule
* Delivery policies
* Minimum order requirements
* Delivery charges
* Delivery FAQs

---

## 16. FAQ

Answers common customer questions.

Topics include:

* Products
* Orders
* Quotes
* Delivery
* Food safety
* Returns
* Contact information

---

## 17. Contact Forms

Different forms for different inquiries.

Examples:

* General inquiry
* Sales inquiry
* Wholesale account application
* Supplier inquiry
* Career application
* Customer support request

---

## 18. Footer

Appears on every page.

Includes:

* Company logo
* Company description
* Navigation links
* Product categories
* Contact details
* Business hours
* Social media links
* Copyright
* Privacy Policy
* Terms & Conditions

---

## 19. Admin Dashboard

The website management area.

Administrator can:

* Manage products
* Manage categories
* Manage customers
* Manage quote requests
* Manage pages
* Manage blog
* Manage banners
* Upload images
* Manage SEO
* View reports
* Export data
* Import data
* Manage users

---

## 20. SEO

Improves search engine visibility.

Includes:

* SEO-friendly URLs
* Meta titles
* Meta descriptions
* Image alt text
* XML sitemap
* Robots.txt
* Schema markup
* Internal linking
* Breadcrumbs

---

## 21. Security

Protects the website.

Includes:

* SSL certificate
* Firewall
* CAPTCHA
* Spam protection
* Malware scanning
* Login protection
* Daily backups
* Activity logs

---

## 22. Performance

Ensures a fast user experience.

Includes:

* Image compression
* Browser caching
* Lazy loading
* Code optimization
* Database optimization
* CDN compatibility
* Core Web Vitals optimization

---

## 23. Integrations

Allows future connections with business software.

Examples:

* Accounting software
* CRM
* ERP
* Inventory systems
* Shipping providers
* Barcode systems
* Email marketing platforms

---

## 24. Website Pages

Complete list of pages to be developed.

Includes:

* Home
* About Us
* Products
* Categories
* Wholesale
* Delivery Areas
* Food Safety
* Certifications
* Industries We Serve
* Blog
* FAQ
* Careers
* Contact
* Request a Quote
* Privacy Policy
* Terms & Conditions
* Delivery Policy
* Return Policy
* Sitemap
* 404 Error Page

---

## 25. Deliverables

Everything the developer must hand over at project completion.

Includes:

* Complete website
* Source code
* WordPress administrator access
* Elementor templates
* Documentation
* Training session
* Website backup
* Database backup
* SSL configuration
* Google Analytics setup
* Google Search Console setup
* XML sitemap
* Mobile optimization
* Speed optimization
* Browser compatibility testing
* Bug fixes during the agreed support period

Skills: PHP, Website Design, Graphic Design, SEO, HTML, Web Development, Website Optimization, Content Management System (CMS)

Independent project team looking for an experienced Python developer to implement/code/deploy a trading bot into production. This new project requires professional deployment, API integration, and real-time monitoring capabilities.

What needs to be done:

1.Cloud Deployment:
-Set up production server on cloud provider (Linode)
-Configure Ubuntu with Python environment
-Implement systems service for auto-restart and reliability
-Set up SSL, firewall, and security hardening
-Configure automated backups and log management

2.Broker API Integration:
-Integrate with broker APIs
-Set up real-time market data streaming
-Implement order execution system (market orders, stops, limits)
-Handle error recovery and connection management
-Ensure low-latency execution

3.Real-time Notifications:

-Create notification system for real-time alerts.
-Send notifications for:
-Trade entries and exits with prices and PnL
-System status and errors
-Daily performance summaries
-Connection issues.

4.Monitoring and Logging:

-Comprehensive logging system for all activities
-Performance monitoring (uptime, latency, errors)
-Web dashboard for system status
-Trades activity - tracking and reporting

5. Strategy coding with Python (and backtesting environment).

Required Skills

Essential:
-ACTUAL TRADING KNOWLEDGE IS A MUST! That includes knowing how to trade both manually and/or with automated systems - we're focused on the major indexes FUTURES MARKETS! (this is NOT a crypto project)
-Python recent versions (pandas, asyncio, websockets, requests, etc.)
-Linux server administration (Ubuntu preferred)
-Cloud deployment experience (linodes, etc.)
-Trading/Financial APIs experience
-Real-time systems development
-Notification systems integration
-Data analysis frameworks

Preferred:
-4 years min. Python development
-2 years min. with trading systems or financial APIs
-DevOps experience (Docker, CI/CD)
-High-availability systems experience

Deliverables:

1.Production server setup and configured

2.Broker API integration and testing

3.Notification system working

4.Monitoring and logging implemented

5.Complete documentation and handover training

6.Live system tested and operational

7. Complete Python bot (also with backtesting environment)

To Apply, Please Include:

-Examples of similar trading bots deployments
-Cloud infrastructure projects you've done
-API integration experience (especially financial)
-Your approach to this project
-Timeline and availability
-Emergency support availability.

Important Notes
-This is a production trading system - reliability is critical!
-99.999% uptime required during market hours
-Emergency support needed for critical issues
-There will be some strategy development/optimization required
-Security and performance are top priorities.

Success Criteria
-System runs non-stop without manual intervention
-All trades executed without technical failures
-100% notification delivery rate
-Complete documentation for future maintenance
-Smooth handover and knowledge transfer.

Looking for a professional who understands that trading systems require the highest reliability. Fluent/native Romanian language speaker can be a PLUS!

This will be a project based contract (Upwork fixed contract with milestones), where gradual payments will be released upon milestones achievements. It will be considered finalized when all deliverables will be done/completed. The total budget for this project will be discussed and agreed upon. By agreeing/accepting the contract, it automatically means adherence and acceptance to an NDA agreement - TOTAL CONFIDENTIALITY is a NON-NEGOCIABLE!

I’m launching a proprietary-funding firm and need a full website built from the ground up. Think FTMO or FundedNext for overall flow, but on a smaller scale and powered by a Match-Trader white-label backend.

Core goals
• Modern, sleek look that immediately inspires trust.
• Seamless client journey: landing page → plan selection → quick sign-up → account creation on Match-Trader.
• Self-service client area where traders can view balances, open challenges, and manage personal details.
• Embedded checkout that handles card and alternative payments, routes funds to the correct plan, and triggers account provisioning automatically.

What I’ll hand over
• Domain name and Match-Trader credentials.
• Brand colours, logo, and copy draft.

What I need from you
• UX/UI design (responsive, desktop & mobile).
• Front-end build (React, Vue, or another modern stack is fine) and CMS setup so I can tweak text and pricing.
• Back-end or middleware that calls Match-Trader’s API to create, suspend, or upgrade accounts.
• Payment gateway integration (Stripe preferred, open to others).
• Hosting configuration and deployment on my chosen VPS or a managed platform.
• Basic on-page SEO and security hardening (SSL, firewall rules, anti-bot on forms).

Acceptance criteria
1. New user can purchase a challenge, complete checkout, and receive platform credentials automatically within minutes.
2. Existing user can log in, see account metrics pulled live from Match-Trader, and download monthly statements.
3. Site scores 90+ on Google PageSpeed for both mobile and desktop.
4. All pages match approved Figma mock-ups pixel-perfectly.

If you have shipped a trading, fintech, or SaaS site before, that’s a plus—send over links. I’m ready to start right away and will be active in providing feedback throughout the build.

Skills: PHP, Website Design, Graphic Design, User Interface / IA, CMS, Balustrading, Web Development, Payment Gateway Integration, Vue.js

I need an experienced network security specialist to set up zones and configure firewall rules for my homelab using Ubiquiti UniFi.

Requirements:
- Secure access to servers, network appliances, and IoT devices
- Segment network traffic to enhance security

Ideal Skills and Experience:
- Proficiency in Ubiquiti UniFi
- Strong knowledge of firewall rules and network segmentation
- Experience with securing homelabs or similar environments

Your expertise will help me prevent unauthorized access and effectively segment my network traffic.

Skills: Web Security, Computer Security, Cisco, Network Administration, Network Security, Network Engineering, Firewall, Ubiquiti

Summary
need an experienced network engineer to configure a secure home VPN using 3 GL.iNet routers (Flint 2 & Slate AX).

Objective

Travel to anywhere in the world and have all devices connected to my travel router use my home internet connection and public IP address. The setup should automatically establish a WireGuard tunnel to my home router so my traffic exits through my home network.

Current Equipment

* Slate AX Travel Router (GL-AXT1800)
* Flint 2 (GL-MT6000) as the home base router
* AT&T Router is the home's primary internet router
* Dynamic DNS available
* WireGuard preferred

Requirements

* Configure the home router as the WireGuard server.
* Configure one travel router as WireGuard clients.
* Route all traffic from the travel router through the home router.
* Ensure DNS is configured correctly with no leaks.
* Optimize MTU, routing, NAT, firewall, and performance.
* Verify everything works from an external network.
* Explain the final configuration so I can manage it in the future.

Experience Required

* GL.iNet routers
* OpenWrt
* WireGuard
* Site-to-site VPNs
* Advanced networking (routing, NAT, DNS, firewall)

Please only apply if you have successfully configured similar GL.iNet/WireGuard travel router setups before. My goal is a reliable, secure, high-performance setup that always uses my home IP address while traveling.

We are a New York-based (MSP) looking for two experienced Level 2 IT Support Engineers to support a leading healthcare organization on the U.S. East Coast. Join a collaborative team, work with modern technologies, and make a real impact by delivering exceptional IT support in a fast-paced environment.

OVERVIEW
JOB TITLE: IT Support Engineer (L2)
LOCATION: Remote
WORKING HOURS: Monday–Friday | Full-time | EST
START DATE: August 2026

RESPONSIBILITIES

1) L2 IT Support & Escalation
. Serve as the primary escalation point for L1 Engineers.
. Troubleshoot and resolve intermediate to complex technical issues.
. Support endpoints, identity platforms, cloud services, networking & business applications.
. Administer macOS, Windows 11, mobile devices, Google Workspace, Slack, Okta, and clinic applications.
. Manage user onboarding, offboarding, access, and device provisioning while driving automation.
. Drive tickets to resolution, ensuring SLA compliance & stakeholder communication.
. Coordinate with vendors & internal teams to resolve technical issues.

2) Infrastructure Management & Projects
. Co-administer the company’s IT infrastructure and core technology platforms.
. Perform maintenance, patching, monitoring, and health checks.
. Support infrastructure migrations, deployments, and technology upgrades.
. Manage endpoint lifecycle, security initiatives, and technology rollouts.
. Validate implementations and provide post-deployment support.
. Drive process optimization and automation initiatives.

3) IT Methodology & Continuous Improvement
. Create and maintain technical documentation, runbooks, and knowledge base articles.
. Identify recurring issues, perform root cause analysis, implement long-term corrective actions.
. Improve IT workflows, operational processes & ticket quality.
. Support KPI reporting, operational reviews, and service improvement initiatives.
. Promote automation, standardization, and IT best practices.
. Assess & recommend technologies that improve operational efficiency and user experience.

4) Team Collaboration & Leadership
. Mentor and support L1 agents through coaching, ticket reviews, and knowledge sharing.
. Contribute to the continuous development of team capabilities and technical standards.
. Demonstrate accountability, ownership, and attention to detail across all activities.

REQUIRED QUALIFICATIONS

1) Experience
. Experience in an MSP, IT consulting company, or corporate IT environment.
. Previous experience handling technical escalations and advanced troubleshooting.
. Experience supporting multi-site organizations and remote users.

2) Technical Skills
. macOS and Apple hardware support.
. Google Workspace administration.
. Identity and access management platforms.
. Networking fundamentals including routing, switching, VLANs, VPNs, DNS, DHCP, and firewall concepts.
. Endpoint management and device lifecycle administration.
. ITSM platforms and ticketing systems.
. Strong documentation and process management skills.
. Microsoft 365, Azure, and Azure Virtual Desktop support.

3) Professional Skills
. Excellent verbal and written communication.
. Strong troubleshooting and analytical thinking.
. Ability to manage multiple priorities in a fast-paced environment.
. High level of accountability and ownership.
. Strong organizational skills and attention to detail.
. Self-motivated and capable of working independently.

We are looking for an experienced WordPress developer or small web-development agency to migrate an existing company website from a custom-built C# system to WordPress.

The company manufactures industrial digital printing machinery. The website includes product and machine pages, application pages, technical information, news, videos, downloadable brochures, contact forms and multilingual content.

This is not a simple template installation. We need a complete, professional WordPress system that is fast, secure, easy for our team to manage and properly prepared for SEO and AI search visibility.

The current website address will be shared with shortlisted candidates.

### Project Objectives

The selected developer will be responsible for:

* Auditing the existing website and its content
* Creating a complete inventory of existing URLs
* Migrating all relevant pages, content, images, videos and downloadable files
* Rebuilding the website in WordPress
* Preserving existing SEO value and rankings
* Creating a fast, mobile-responsive and technically clean website
* Building an easy-to-manage backend for our internal team
* Collaborating with our graphic designer on the visual design
* Preparing the complete website for launch

### Required WordPress Structure

The website should use structured content rather than treating everything as a basic page.

We expect appropriate WordPress content structures for areas such as:

* Machines and products
* Applications
* Printing technologies
* Industries
* Case studies and installations
* News and exhibitions
* Technical articles
* Videos
* Brochures and downloads
* Company locations and contact information

Machine pages should support structured information such as:

* Machine name
* Description
* Printing width
* Production speed
* Printhead technology
* Ink type
* Compatible materials
* Applications
* Technical specifications
* Images
* Videos
* Brochures
* Related machines and technologies
* Inquiry forms

The system should make it easy for us to add new machines, applications and articles without rebuilding pages manually.

### Design and Development Requirements

* Custom, professional WordPress implementation
* Collaboration with our graphic designer
* Responsive design for desktop, tablet and mobile
* Clean and lightweight frontend
* Reusable page sections or blocks
* Server-rendered, crawlable content
* Minimal unnecessary JavaScript
* No cheap multipurpose theme
* No excessive plugin usage
* No dependence on unsupported or pirated plugins
* Easy content management for non-technical users
* Staging and production environments

We prefer Gutenberg or another clean and maintainable WordPress editing system. We do not want a slow website overloaded with page-builder plugins.

### Multilingual Requirements

The existing website contains multiple languages. The new WordPress system must properly support multilingual content.

This includes:

* Separate URLs for each language
* Correct hreflang implementation
* Language-specific menus
* Language-specific metadata
* Correct canonical tags
* Easy translation management
* No automatic IP-based redirects that prevent crawling
* Proper multilingual XML sitemaps

Please explain which multilingual solution you recommend and why.

### SEO Migration Requirements

SEO preservation is a critical part of this project.

The developer must:

* Crawl and audit the existing website before migration
* Create a complete old-to-new URL mapping
* Preserve important URL structures where practical
* Implement individual 301 redirects
* Avoid redirecting all old pages to the homepage
* Preserve or improve page titles and meta descriptions
* Implement canonical tags
* Configure XML sitemaps
* Configure robots.txt
* Implement breadcrumbs
* Add appropriate structured data and JSON-LD
* Optimize heading structure
* Preserve image alt text where available
* Prevent duplicate or thin pages
* Configure Google Search Console
* Configure Google Analytics
* Test redirects and crawlability before launch
* Monitor indexing and errors after launch

Experience with multilingual SEO migrations is strongly preferred.

### SEO and AI Search Readiness

The new website should be technically prepared for traditional search engines and generative search platforms.

Important information must be available directly in the HTML and should not exist only inside images, animations or PDF brochures.

The website should include appropriate structured data for:

* Organization
* Products
* Articles
* Technical articles
* Videos
* Breadcrumbs
* Locations
* Authors where applicable

Relevant legitimate search crawlers should not be accidentally blocked.

### Performance Requirements

The completed website should be optimized for:

* Fast loading times
* Core Web Vitals
* Mobile performance
* Image compression and next-generation image formats
* Lazy loading where appropriate
* Full-page caching
* Browser caching
* CDN integration
* Database optimization
* Minimal plugin and script bloat

Please include examples of websites you have built that perform well in Google PageSpeed Insights or Core Web Vitals.

### Hosting, Security and Maintenance

The developer should recommend and configure an appropriate managed WordPress hosting environment.

The setup should include:

* SSL
* CDN
* Web application firewall
* Daily backups
* Off-site backup storage
* Two-factor authentication
* Limited administrator access
* Staging environment
* Malware and security monitoring
* Update and rollback procedures
* Spam protection for forms
* Uptime monitoring

Please also provide an optional ongoing maintenance proposal after launch.

### Forms and Tracking

The website will require professional inquiry forms, including product-specific inquiries.

Forms should:

* Send reliable email notifications
* Store submissions securely
* Identify which machine or application generated the inquiry
* Include spam protection
* Support conversion tracking
* Be prepared for future CRM integration

### Expected Deliverables

The final delivery must include:

* Fully functional WordPress website
* Migrated and organized content
* Responsive frontend
* Multilingual setup
* SEO migration and redirect implementation
* Performance optimization
* Security configuration
* Analytics and Search Console setup
* Form configuration and testing
* Staging and production setup
* Administrator documentation
* Training session for our team
* Backup and rollback plan
* Post-launch support period
* Full transfer of code, licenses, credentials and ownership

The website will not be considered complete until the important pages, forms, downloads, languages, redirects and tracking systems have been tested.

### Required Experience

Applicants should have proven experience with:

* WordPress development
* Custom WordPress themes or block development
* Custom post types and structured content
* Multilingual WordPress websites
* SEO-sensitive website migrations
* 301 redirect mapping
* Technical SEO
* Structured data
* Core Web Vitals
* Website security
* Managed WordPress hosting
* Migrating websites from custom CMS platforms

Industrial, manufacturing, engineering or B2B website experience is a major advantage.

### Application Instructions

Please answer the following questions in your proposal:

1. Please provide three relevant WordPress websites you personally developed.
2. Have you migrated a multilingual website while preserving its SEO?
3. How would you create and verify the old-to-new URL redirect map?
4. Which multilingual WordPress solution would you recommend for this project?
5. Would you use a custom theme, Gutenberg blocks or a page builder? Explain your recommendation.
6. How would you structure machines, applications and technologies in WordPress?
7. How would you prevent plugin bloat and performance problems?
8. What hosting infrastructure would you recommend?
9. What information and access would you require before beginning?
10. What post-launch support and maintenance do you provide?

Please begin your proposal with the words **“Industrial WordPress Migration”** so we know you have read the full description.

Generic proposals that do not address the migration, multilingual structure and SEO requirements will not be considered.

We prefer a milestone-based fixed-price proposal. Please provide an estimated project structure, timeline, milestones and cost breakdown.

Hi,

My WhatsApp account was hacked, and I need help getting it back. I'm looking for someone who has experience with WhatsApp account recovery and knows the proper recovery process.

I am seeking an experienced WordPress developer to help resolve specific, well-documented file access and post-remediation issues on an existing website.
The site is hosted on a VPS and protected by SiteLock PreventPlus. Following DNS-level changes that routed all traffic through the SiteLock firewall (implemented December 23, 2025), the site has remained online and generally stable. However, a small number of legitimate site files intermittently fail to load, likely due to prior security cleanups, permission or ownership changes, or firewall/security rules that block execution of certain PHP or JavaScript files.
This engagement is assessment-first and narrowly scoped. I am not seeking a long-term maintenance contract at this stage.

Please see the attached PDF for details.

My WordPress site has been flagged for possible malware. I’m not sure where the infection sits, so the first step is a full scan of core files, themes, plugins, and the database. I already have a complete backup from within the last week, so you can work confidently and roll back if anything breaks.

Once the scan identifies the threats, I need every malicious file or script removed, injected code cleaned from the database, and permissions set correctly. After the cleanup, please harden the installation—update core, themes, and plugins; enforce strong passwords; disable risky PHP functions; and configure a real-time firewall such as Wordfence or Sucuri. A concise report explaining what was found, what was fixed, and any recommendations for ongoing security will wrap up the job.

Deliverables:
• Comprehensive scan report
• Fully cleaned, malware-free site with all functionality intact
• Security hardening configuration in place
• Final summary of actions and future-prevention tips

This task is time-sensitive, so same-day turnaround is strongly preferred. Let me know your estimated completion time and any server-access details you require.

Skills: PHP, Website Design, Web Security, WordPress, MySQL, Website Management, Website Optimization, Website Development

Looking for a Consultant who has experience as an IBM Z/OS mainframe Systems Programmer with 5 or more years’ experience.
Are you an IBM Mainframe Systems Programmer with experience on cloud integration? We're looking for a skilled professional to support our efforts in releasing Mainframe software that also transfers a text file to the cloud, definitely in AZURE with AWS experience an added benefit.

KEY RESPONSIBILITIES of hired consultant:
- Experience in administering and supporting IBM mainframe software
- Can design and implement secure file transfer processes from mainframe to Azure cloud, including intranet/internet firewall traversal/transfers
- Build workable JCL for file transfer (preferably SFTP/BPXBATCH)
- Understand the Infrastructure Request Ticket process
- Familiar with network security, and performance
- Support connectivity between mainframe and distributed systems
- Collaborate with others to resolve networking issues

REQUIRED QUALIFICATIONS:
- 5+ years of experience administering IBM mainframe systems programmer
- Hands-on experience transferring files from mainframe to cloud (Azure preferred), including SFTP/BPXBATCH JCL setup
- Familiarity with RACF security concepts and network-related security practices
- Excellent analytical, troubleshooting, and communication skills

PREFERRED QUALIFICATIONS:
- Experience with automation tools and scripting
- Prior Azure or cloud intranet server integration experience

WHAT WE OFFER:
- Competitive hourly rate

NOTE: This is an immediate-need position - the file transfer project needs to begin right away.

I already have a fresh Linux server waiting; what I need now is a reliable hand to bring my Next.js application to life on it and lock everything down properly. Your first task will be to install and configure Node, set up the Next.js production build, and wire it to a MySQL database. I want a clean, well-documented deployment process that I can repeat on staging and future boxes.

Beyond simply “making it run,” I expect the environment to be hardened: correct file permissions, HTTPS termination, sensible firewall rules, and system updates automated. Wherever possible, keep things lightweight—no over-engineering—yet leave me with the confidence that the stack can survive real-world traffic and common exploits.

Deliverables (acceptance criteria)
• Next.js app served by a process manager (pm2 or systemd) and reachable over HTTPS
• MySQL installed, secured (root password, remote access restrictions), and connected to the app with environment variables, not hard-coded credentials
• Nginx or Apache reverse proxy configured with SSL (Let’s Encrypt is fine)
• Basic firewall rules applied (ufw or firewalld) with only necessary ports open
• A short README or shell script that recreates the setup on another Ubuntu-based server

I’m available to provide the current repository and SSH access as soon as we agree on the approach. Looking forward to your proven expertise with Linux, Next.js, and MySQL.

Skills: Linux, Apache, Nginx, MySQL, Node.js, Documentation, Firewall, Next.js

Important: Automated malware scanners alone are not sufficient. We are looking for a manual forensic investigation to identify the original attack vector and all persistence mechanisms, ensuring the compromise cannot return. This is the highest priority.

We are looking for an experienced **Linux server security and WordPress malware removal expert** to investigate and completely clean a compromised VPS hosting multiple WordPress websites.

The server has already had passwords changed and basic cleanup performed, however the compromise persists. Malicious code continues to be injected into website files (including `.htaccess`), indicating that the attacker still has a method of regaining access.

We are looking for someone who can identify the root cause, completely eliminate the compromise, and secure the server to prevent future reinfections.

## Environment

* VPS hosted with Namecheap
* Linux server
* Multiple WordPress websites
* SSH access available
* Root access available

## Scope of Work

### 1. Full Security Investigation

* Determine how the server was compromised
* Identify every persistence mechanism used by the attacker
* Review system logs
* Review SSH access
* Review cron jobs
* Check startup scripts and scheduled tasks
* Inspect all websites for backdoors
* Identify vulnerable plugins, themes or outdated software
* Verify there are no malicious Linux users, SSH keys or hidden services

### 2. Website Cleanup

* Remove all malware and malicious code
* Remove web shells and hidden PHP files
* Clean infected `.htaccess` files
* Verify WordPress core integrity
* Verify plugins and themes
* Remove injected JavaScript or redirects
* Ensure every hosted website is clean

### 3. Server Hardening

* Close the security hole that allowed the compromise
* Harden the VPS against future attacks
* Secure SSH
* Review file permissions
* Configure firewall if necessary
* Disable unnecessary services
* Apply security best practices

### 4. Password & Credential Review

Review and advise on any credentials that should be rotated, including:

* Root password
* SSH credentials
* WordPress admin accounts
* Database credentials
* FTP/SFTP accounts
* API keys (if applicable)

### 5. Clean Backup

After confirming the server is completely clean:

* Create a verified clean backup of the entire hosting environment
* Ensure the backup can be restored if needed

### 6. Documentation

Provide a short report including:

* How the compromise occurred
* Files that were infected
* What was removed
* What security improvements were made
* Recommendations to prevent future compromises

## Required Experience

Please apply only if you have experience with:

* Linux server administration
* VPS security
* WordPress malware removal
* WordPress forensics
* Apache/Nginx
* SSH
* Malware persistence
* Root cause analysis

## When Applying

Please include:

* Similar compromised VPS recoveries you have completed
* Your approach to identifying persistent infections
* Your estimated timeline
* Your fixed price or hourly rate

This project requires finding the **root cause** of the compromise—not simply deleting infected files. The work will be considered complete only when the server is fully cleaned, hardened, verified, and a clean backup has been created.

Funds will be released after 7 days of job completion to make sure that the issue does not reoccur