Find Firewall Projects on Upwork Efficiently

My site is currently blocked by Google for “Phishing content” and visitors are met with a red-screen warning. I need that warning lifted within the next 24 hours.

The site already passes a routine antivirus scan, yet something is still triggering Google’s Safe Browsing list. I’m looking for someone who can:

• Pinpoint and remove every file, script, or injected link that resembles phishing content.
• Verify the cleanup through Google Search Console and request an immediate review so the flag clears without delay.
• Run a broader security audit once the urgent fix is done, documenting any additional vulnerabilities you spot and recommending hardening steps (firewall rules, extra scanning tools, headers, etc.).

Deliverables for the urgent phase
1. Clean set of site files with malicious items removed.
2. Screenshot or log from Search Console showing “No issues detected” and confirmation that the review request was submitted.

Deliverables for the audit phase
1. Brief security report highlighting other weaknesses.
2. Actionable remediation checklist.

Speed is critical; I’ll grant you server and Search Console access as soon as we agree. If you have experience getting phishing warnings lifted the same day, I’d like to start immediately.

Skills: PHP, Web Security, Risk Management, Internet Security, Penetration Testing, Content Management System (CMS), Data Protection, Incident Response

We need a freelancer to perform a penetration test on our website to identify security vulnerabilities and recommend fixes. The work includes reviewing the site, testing for common issues, and providing a clear report with findings and remediation steps. Please share relevant experience and examples of similar projects.

*Please do not apply if you lack specific relevant experience with VPS setup and config - this is critical and I don't want to waste your time, thank you :) *

Hi - I run two ecommerce businesses in Australia and am looking to replace much of my current app stack/manual process work with automated workflows. We want to do it right from the beginning, so have scoped this job (the server setup) as phase 1 of the larger project.

Overview:
I need a self-hosted automation stack set up for two separate ecommerce businesses, sharing one VPS but strictly isolated from each other, with a documented path to split either business onto its own server later if needed.

Scope of work:
• Provision one Linux VPS with Docker/Docker Compose
• Security hardening: firewall, SSH key-only access, automatic updates, backup schedule
• Two fully isolated stacks, one per business: separate Docker containers, separate PostgreSQL databases, separate n8n instances or fully separate credentials/workflows, separate NocoBase instances or isolated projects, separate Git backup repos, separate subdomains
• Reverse proxy with SSL (Nginx or Caddy) for both businesses' subdomains
• Role-based access per business, 2 admins each
• A written and tested migration runbook for moving one business's stack to its own dedicated VPS later, with minimal downtime and zero risk to the other business's systems

Requirements:
• Proven experience self-hosting (not cloud-hosted) n8n and/or comparable workflow-automation tools
• Experience with Docker-based production deployments, security hardening, and genuine multi-tenant isolation on shared infrastructure
• Clear communication and documentation — I'll need a short handover doc explaining what was set up, how to access/maintain it, and the migration process
• Comfortable quoting fixed price for defined scope

Nice to have (for potential follow-on work - noting these are not the most important thing right now):
• Experience building n8n workflows that call LLM APIs (Claude, OpenAI)
• Experience with Chatwoot or similar self-hosted omnichannel inbox tools
• Experience integrating Xero, Shopify, Klaviyo, or Meta/Google Ads APIs into automation workflows

Please include:
Relevant past projects (self-hosted, not cloud/SaaS versions, ideally including multi-tenant setups), your fixed-price estimate for the scope above, and your availability to start.

Thank you. Check out my feedback, I'm a good employer and easy to work with :)

Thanks
Ross

We manufacture roughly 250 building products (mostly in-front-of-wall: cabinets, quartz countertops, plumbing fixtures, windows/doors and also structural connectors and framing fasteners) and broker a handful of additional lines. We need an experienced takeoff professional to generate accurate material quantity takeoffs and bills of materials from construction drawings/plans across multiple divisions including, but not limited to, Divisions 5 through 12. All our drawings, specs, and terminology are U.S.-based, so this role requires fluency in American English construction terms and imperial measurements.

Responsibilities:
• Perform material takeoffs from architectural, structural, and plumbing drawings
• Produce a bill of materials for each project
• Quantify our manufactured and brokered product lines against project plans
• Flag discrepancies, missing drawing pages, or unclear specs before finalizing a takeoff
• Turn around takeoffs within agreed timelines per project

Sales Channels you'll support:
• Builder Distributor
• Direct to Builder
• Retail

Sales segments:
• Multi-family (primary focus)
• Single Family (production)
• Manufactured Homes
• Military
• Hotel/Motel
• MRO

Requirements:
• Proven takeoff experience in residential/commercial construction, ideally with exposure to multifamily and production builder projects
• Comfortable reading architectural, structural, and plumbing plan sets
• Fluent in American English construction terminology (for example, "lavatory" refers to a sink/basin in U.S. trade usage, not a toilet as in British English) and working knowledge of imperial measurements, inches and feet, not metric
• Experience with structural connectors, fasteners, countertops, or plumbing/shower hardware is a strong plus
• Detail-oriented, deadline-driven, able to work independently on a contract basis
• Ability to provide suggestions on value engineering decisions that streamline a BOM and enable a better fit with our manufactured product lines.
• Ability to understand and communicate specifications by product line (ex: windows and doors specs and ratings, firewall requirements, UL ratings, etc)

To apply:
Please share 1-2 sample takeoffs (redacted if needed) and note which segments/channels above you have direct experience with.

Job Description

We are looking for an experienced full-stack developer to help build and deploy a modern real-time video communication website.

The ideal candidate must have strong experience with WebRTC, React, Node.js, GitHub, and WHM/cPanel. You should understand both front-end development and back-end infrastructure, including real-time connections, video streaming, deployment, security, and server configuration.

Required Skills
WebRTC video and audio communication
React front-end development
Node.js back-end development
WebSocket or Socket.IO signaling
STUN and TURN server configuration
GitHub repositories, branches, commits, and pull requests
WHM and cPanel server management
Linux server deployment
SSL certificate and domain configuration
Responsive desktop and mobile interfaces
API development and integration
Application security and performance optimization
Project Responsibilities

The selected developer will be expected to:

Build and improve a WebRTC-based video communication application.
Develop a responsive and user-friendly React interface.
Create and maintain the Node.js back end.
Implement reliable WebRTC signaling and peer connections.
Configure STUN and TURN services when required.
Troubleshoot video, audio, connection, browser, and firewall problems.
Manage the source code and development workflow through GitHub.
Deploy and maintain the application using WHM/cPanel.
Configure domains, subdomains, SSL certificates, environment variables, and server services.
Test the application across desktop and mobile browsers.
Improve application performance, reliability, privacy, and security.
Document the code, deployment process, and server configuration.
Preferred Experience

Preference will be given to developers who have previously built:

Video-chat platforms
Live-streaming applications
Peer-to-peer communication systems
Multi-user video rooms
Real-time messaging platforms
Browser-based audio and video applications
Moderation, reporting, or user-management systems
Production applications hosted through WHM/cPanel
What You Must Include in Your Proposal

Please include the following:

A short description of your WebRTC experience
Links to relevant projects or GitHub repositories
An explanation of your experience with React and Node.js
Your experience configuring STUN and TURN servers
Your experience deploying Node.js applications through WHM/cPanel
Your availability and estimated weekly hours
Your hourly rate or estimated project price

Please do not submit a generic proposal. Start your application with the words “WebRTC Developer” so we know you read the complete job description.

Screening Questions
What WebRTC applications have you previously built?
How would you implement signaling for a React and Node.js video application?
Have you configured Coturn or another TURN server?
How do you handle users located behind restrictive NATs or firewalls?
How would you deploy and keep a Node.js application running through WHM/cPanel?
How do you protect WebRTC sessions and signaling connections?
Can you provide a live example or GitHub repository showing similar work?
Are you comfortable documenting the application and deployment process?
Working Relationship

We are looking for a dependable developer who communicates clearly, commits code regularly, documents their work, and provides honest progress updates. Successful completion of the initial project may lead to ongoing development, maintenance, and feature work.

Profile : Azure Cloud Architect

💼 Experience: 8+ Years

⚡ Immediate Joiners Preferred

📄 Contract/Contractual candidates are also welcome to apply

Key Skills
🔹 Azure Cloud Architecture & Solution Design
🔹 Azure Security & Networking
🔹 Azure Migrate & Site Recovery
🔹 AKS / Kubernetes & Azure Lighthouse
🔹 Azure Firewall, WAF & Application Gateway
🔹 Cost Optimization & FinOps
🔹 Monitoring, Logging & Cloud Automation

Job Description
• Design and implement end-to-end Azure cloud architectures for enterprise workloads.
• Drive cloud migration, modernization, security, and disaster recovery initiatives.
• Design and manage Azure infrastructure including Networking, Application Gateway, Firewall, WAF, DDoS, VPN, and monitoring solutions.
• Work on AKS/Kubernetes and multi-tenant Azure environments, including centralized management using Azure Lighthouse.
• Drive Azure Cost Optimization and FinOps, including right-sizing, Reserved Instances, Savings Plans, and resource optimization.
• Identify opportunities for automation and AI-driven cloud operations to improve efficiency and reduce operational efforts.

We are seeking an experienced Network Infrastructure Consultant to perform an onsite LAN and Structured Cabling Infrastructure Assessment at our client's office in Leeds, England,

The objective is to assess communications rooms, structured cabling infrastructure, network cabinets, patching standards, network hardware, power infrastructure, and overall physical network environment. The consultant will identify deficiencies, risks, optimisation opportunities, and provide practical remediation recommendations.

Scope of Work

Review communications rooms, network closets and cabinet environments
Assess cable management and structured cabling standards
Review patch panels, patching standards and port utilisation
Assess network switches, routers, firewalls and wireless access points
Review UPS and power distribution infrastructure
Inspect physical security and environmental conditions
Capture photographic evidence of findings
Produce a detailed assessment report with prioritised recommendations

Deliverables

Executive Summary
Findings Register
Risk Assessment
Photographic Evidence
Prioritised Recommendations (Critical, High, Medium, Low)
Estimated remediation effort for identified issues

Required Experience

Structured cabling assessments
Enterprise LAN infrastructure
Network cabinet audits
Communications room assessments
Technical report writing in English
Preferred Qualifications
BICSI RCDD
CNCI
Cisco Certification
Aruba Certification
Fortinet Certification

Location
Barcelona, Spain (Onsite)

Estimated Effort
Site Assessment: 1 day
Reporting: 1 day

Uso la versión gratuita de Elementor y cada vez que presiono “Guardar” dentro del editor aparece el mensaje “access denied”. No utilizo ningún plugin de seguridad ni firewall, así que el bloqueo no proviene de allí.

Necesito que revises la configuración de WordPress, permisos de archivos, reglas de .htaccess y cualquier restricción del servidor que pueda estar impidiendo que Elementor escriba los cambios. Agradeceré que documentes los pasos aplicados para que pueda entender la causa y evitar que se repita.

Entrego acceso temporal a:
• Escritorio de WordPress
• cPanel / FTP

Espero una solución funcional y probada en el sitio en producción, junto con una breve guía de prevención para el futuro.

Skills: PHP, WordPress, MySQL, HTML, Website Management, Web Development, Elementor, cPanel

I need a clean, well-documented OpenVPN deployment on a Windows server. The box will act as the single entry point for up to ten remote users who must enjoy full, seamless access to our internal network once connected.

Here is what I expect from you:
• Install the current OpenVPN Community or Access Server build (whichever you recommend for Windows) and make sure the service starts automatically.
• Generate the CA, server certificate, and 10 client profiles, each bundled as an .ovpn file.
• Configure routing, firewall rules, and DNS push so that a connected client can reach any internal resource exactly as if they were on-site—file shares, RDP sessions, line-of-business apps, everything.
• Harden the server: TLS cipher settings, proper key sizes, and Windows firewall tweaks to allow only the necessary ports.
• Provide a brief, step-by-step document (or screen-recording, if you prefer) so I can add or revoke users later without needing further assistance.

I will supply RDP access to the Windows host and any static network information you need (subnet, gateways, DNS). Once you confirm that a test client can authenticate, obtain an IP, and reach internal devices, the job is done.

Skills: System Admin, Linux, Windows Server, Network Administration, OpenVPN, Documentation, Network Security, VPN

Hey if you're someone who genuinely enjoys owning infrastructure and solving real production problems, this might be a good fit.

We're BikeFixUp, a tech-driven two-wheeler service startup based in India. We're small, we move fast, and we're looking for a DevOps engineer we can actually trust with our production environment not just someone to restart services when things break.

What you'll be working with:
Ubuntu VPS · Caddy · Cloudflare · PostgreSQL · Redis · Laravel/PHP backend · Multiple live projects

What the role actually involves:

Keeping our servers hardened, patched and monitored
Managing Caddy routing, Cloudflare DNS/SSL and firewall rules
Deploying applications, handling rollbacks, managing queues and workers
Owning database health PostgreSQL primarily, some MySQL and Redis
Troubleshooting beyond the server app config, runtime errors, connectivity, permissions
Maintaining a clean infrastructure runbook so nothing lives only in one person's head
Responding to critical incidents when they matter most
Proactive monitoring catching issues before they become outages

You're probably a good fit if:

You have 4+ years of hands-on Linux/DevOps experience in production environments
PostgreSQL isn't scary backups, restores, permissions, performance
You've worked with Caddy or Nginx, Cloudflare and Redis before
You can explain a real incident you diagnosed and fixed root cause and all
You're comfortable with a long-term, stable retainer arrangement
You can respond to critical issues promptly when needed

What we're offering:

$35/month fixed retainer this is a startup budget and we're upfront about it
Direct access to the founding team no middlemen, no ticket queues
Real ownership of a live production environment across multiple projects
A stable, long-term engagement if the relationship works well
Honest communication and genuine respect for your expertise

A few practical notes:

An NDA is required before production access is granted
We follow least-privilege access you'll have what you need, nothing unnecessary
Docker may be used case-by-case where it makes sense

To apply, start your message with: TRUSTED DEVOPS

Then tell us:

Your years of DevOps/Linux experience
Your familiarity with our stack (Ubuntu, PostgreSQL, Redis, Caddy/Nginx, Cloudflare)
One real production incident you diagnosed and resolved
Your backup and disaster recovery experience
Your typical response time for critical incidents
Confirmation you're okay signing an NDA

We're not looking for a vendor. We're looking for a technical partner who wants to grow with us.

Bonus (not required): Familiarity with PHP / Laravel — our main project runs on it, so if you've worked with it before, that's a plus when troubleshooting application-level issues.

I have between one and five WordPress sites running on a WHM-based server and need them moved to a new WHM environment. The job covers the full point-to-point transfer—accounts, files, databases, email setups, SSL certificates, and DNS updates—so that everything works exactly as it does now on the new machine.

While you are inside each account, I also want basic security enhancements applied. That means tightening WordPress core settings, checking file permissions, disabling unused plugins, and confirming the firewall rules on the destination server are in place.

You’ll get root-level WHM access on both ends plus temporary WordPress admin logins. The work is finished when every site loads over HTTPS without errors, admin areas function smoothly, and a short hand-over note explains what was secured and how to roll back if needed.

Skills: PHP, Linux, WordPress, Technical Support, Web Hosting, Website Optimization, Database Management, Content Management System (CMS)

We are looking for an experienced RustDesk Server Pro specialist to complete the initial configuration of an existing self-hosted RustDesk environment.

This is a small, clearly defined assignment. The Linux/VPS infrastructure is already being prepared separately. We are not looking for general Linux administration or a large implementation project.

Environment

RustDesk Server Pro
Self-hosted on Ubuntu Server 24.04 LTS
Dedicated IONOS VPS
DNS and network infrastructure already prepared
RustDesk Pro license will be provided
Microsoft Entra ID is our identity provider
Initial technician team: approx. 3–5 users
Managed endpoints: Windows PCs/notebooks and servers

Scope

The specialist should:

Assist with the secure initial startup and Pro license activation.
Immediately replace and secure the initial administrator credentials.
Configure and verify the RustDesk Server Pro Web Console.
Configure Microsoft Entra ID / OIDC SSO for technician authentication.
Configure a simple role/group structure using named technician accounts.
Configure the initial remote-access baseline:
User PCs/notebooks: end-user consent required.
Servers/infrastructure: unattended access only for authorized technicians.
Verify required functionality:
Remote access
UAC/admin scenarios
Clipboard
File transfer
Reconnect/reboot
Audit logging
Review the existing RustDesk server/network configuration and flag any security-relevant issue.
Provide a short handover explaining the important settings and where they are managed.

We deliberately want to keep the configuration simple and maintainable. No unnecessary complexity or custom development.

Required experience

Please apply only if you have hands-on experience with RustDesk Server Pro.

Experience with the free/OSS RustDesk server alone is not sufficient.

You should have practical experience with:

RustDesk Server Pro Web Console
Server Pro licensing
OIDC / SSO configuration
User, role and device/group access controls
Centralized RustDesk policies
Attended and unattended access
RustDesk audit logging
Secure self-hosted deployments

Microsoft Entra ID / OIDC experience is strongly preferred.

Deliverable / Acceptance

The assignment is complete when:

RustDesk Server Pro is securely operational.
Entra/OIDC login works.
Named technicians can authenticate.
Workstation consent and server unattended-access rules are correctly enforced.
Audit logging works.
The agreed remote-access functions have been tested.
RRCG receives a short configuration handover.

The Linux specialist will remain responsible for VPS/Ubuntu hardening, Docker/runtime, firewall, monitoring and backup. Coordination with him may be required during the initial activation.

Please answer these questions when applying:

How many RustDesk Server Pro installations have you configured?
Have you configured OIDC/SSO with Microsoft Entra ID for RustDesk Server Pro?
Have you configured RustDesk user/device groups, access controls and centralized policies?
Can you provide a brief example of a similar RustDesk Server Pro project?
Are you available for a short coordinated setup session with our Linux specialist?

My WordPress site, running the Avada theme, has started acting strangely and deeper checks revealed both a backdoor and a credit-card skimmer hiding in the code. I have not made any recent updates or configuration changes, so the intrusion is likely exploiting an Avada-related RCE vulnerability.

I need a security-focused WordPress specialist to investigate, clean, and then harden the installation so the issue cannot recur.

Core tasks and deliverables
• Locate and remove every malicious file, injected script, hidden admin user, and rogue database entry.
• Verify and, if needed, safely reinstall WordPress core plus the Avada theme to guarantee integrity.
• Patch and harden against known Avada remote-code-execution vectors: correct file permissions, disable unused endpoints, regenerate salts, secure wp-config, and lock down uploads.
• Implement ongoing protection—firewall/WAF rules, real-time malware monitoring, and scheduled scans—without affecting site performance or design.

Acceptance criteria
• Wordfence or Sucuri scans return 0 critical or high-severity issues.
• No outbound calls to unknown domains on checkout or any other page.
• Server logs stay clean for 24 hours after hand-off, with no suspicious cron jobs or processes.

You will receive cPanel, SSH, phpMyAdmin, and WP-admin access. I’m aiming for a 24- to 48-hour turnaround, but let me know if you need a different window so we can coordinate downtime.

Skills: PHP, Web Security, WordPress, Internet Security, phpMyAdmin, Website Optimization, Firewall, cPanel, Incident Response, Security Auditing

Deploy and configure a centralized multi-company Odoo Enterprise system on
custom server infrastructure to manage international oilfield operations, well
services, field ticketing, and multi-currency accounting across 4 group entities.
This self-hosted platform will provide total server control, high-performance
database execution, and unlimited custom code flexibility, unifying operations
from remote wellsite execution and custom digital field ticketing to automated
OCR bill processing, multi-currency bank reconciliations, and consolidated group
financial reporting.
The system will:
● Seamlessly execute full historical data migration from legacy platforms
(Zoho Invoice, Xero) and Google Drive repositories, importing historical
invoices with original numbering, attached PDF copies, contact master
lists, open AR/AP ledgers, and fixed asset registers across all active group
entities.
● Digitize end-to-end oilfield service operations through a structured
operational workflow spanning Project → Quote → Purchase Order →
Field Ticket → Invoice, ensuring precise task progression and
multi-company transactional clarity across all group entities.

● Provide a dedicated Private Server Infrastructure hosting Odoo Enterprise,
giving the group full data sovereignty, zero platform limits, and complete
control over custom backend modules and database performance across 4
corporate entities.
● Capture remote job execution metrics via custom offline-capable digital
Field Tickets that log site activity, operational data, and on-site client
representative signatures on mobile devices.
● Automate vendor bill digitizing using Odoo Enterprise OCR (AI Document
Digitization) and company-specific email gateways to match physical/PDF
receipts automatically against purchase orders.
● Streamline payment runs by generating standard SEPA/ISO20022 XML
batch payment files and triggering API payout requests for fast, secure
approval inside online banking portals.
● Connect group bank accounts (Wise, Tide, Revolut, WIO) via Odoo
Enterprise Open Banking Feeds, while enabling drag-and-drop statement
file imports (OFX/CSV) for local institutions like Banca Transilvania.
● Enforce localized statutory compliance using Enterprise localization
packages for Romanian e-Factura transmission (ANAF API), SAF-T (D406)
generation, and UK HMRC Making Tax Digital (MTD) reporting.
● Deliver real-time multi-currency accounting, automated inter-company
transaction sync (sales/purchase mirroring), expense tracking, and
consolidated financial reporting (P&L and Balance Sheet) across all 4 group
entities.

3. Scope of Work
The solution will be developed on Odoo 19 Enterprise deployed on your custom
server infrastructure. It will utilize built-in modules where appropriate.

These will be complemented by custom modules tailored specifically to your
international oilfield operations, wellsite service management, and
multi-company corporate structure.
3.1. Modules to be Implemented
● Odoo Data Migration & Legacy System Import Engine (Custom Scripts):
For extracting, transforming, and loading (ETL) historical master data,
opening balances, open AR/AP ledgers, contacts, and transaction histories
from Zoho and Xero, alongside a custom script for migrating Romania's
historical Google Drive expense PDFs into Odoo.
● Odoo Multi-Company & Localisation Module (Built-in + Custom
Configuration): For managing isolated ledgers, multi-currency accounting
(RON, GBP, USD, AED), tax structures, Romanian e-Factura integration
(ANAF API), SAF-T (D406) compliance, and UK HMRC Making Tax Digital
(MTD) reporting across 4 corporate entities.
● Odoo Sales & CRM Module (Built-in + Custom Integration): For capturing
client service inquiries, managing multi-currency quotations, tracking
service contract approvals, and converting accepted offers directly into
active operational projects.
● Odoo Project & Operational Task Module (Built-in + Custom Integration):
For tracking wellsite jobs, managing sequential service workflows,
monitoring task dependencies, and assigning field personnel across
international project locations.
● Odoo Purchase & Vendor Management Module (Built-in + Custom
Integration): For managing vendor RFQs, issuing multi-currency purchase
orders, tracking equipment/material deliveries, matching bills against POs,
and evaluating supplier performance.

● Odoo Accounting & Finance Module (Built-in + Custom Integration): For
group-wide financial management, inter-company transaction mirroring
(sales invoice to vendor bill), multi-currency bank reconciliations (Wise,
Tide, Revolut, WIO feeds; Banca Transilvania imports), and automated
SEPA/ISO20022 XML batch payment generation.
● Odoo Documents & OCR Module (Built-in + Custom Configuration): For
processing incoming supplier bills via dedicated company email gateways,
automated optical character recognition (OCR) extraction, and digital
archiving of physical/PDF bill attachments directly to transaction records.
● Odoo Custom Field Tickets & Wellsite Operations Module (Custom): For
generating, executing, and logging remote wellsite operations. Features
full offline functionality on mobile devices, operational metric tracking, job
consumption logging, and on-site client representative digital signature
capture.
● Odoo Access Control & Security Module (Built-in + Custom
Configuration): For configuring strict role-based access levels across 4
entities (Field Technicians, Project Managers, Operations Leads, Finance
Managers, External Accountants, and Executive Leadership).
● Odoo Scheduled Actions & Automated Sync Module (Custom
Configuration): For automated inter-company transaction syncing,
recurring bank statement fetching, background offline data
synchronization, and automated low-margin or budget variance alerts.
3.2. Infrastructure and Deployment
Recommended Platform: Odoo 19 Enterprise on Private Custom Server
For a multi-company enterprise architecture requiring specialized custom
code and high-concurrency database execution, I will deploy Odoo 19
Enterprise directly onto your designated private custom server
environment.

Why Enterprise Edition on a Custom Server is the right choice:
● Complete System Sovereignty & Freedom: Operating on a
dedicated server removes platform limitations, allowing unlimited
custom backend Python module development, third-party database
integrations, and full environment tuning.
● High-Performance Architecture: Custom server hardware optimized
for PostgreSQL provides high throughput during simultaneous
offline field ticket synchronizations, heavy OCR batch processing,
and multi-company financial reporting.
● Data Isolation & Enterprise Security: Hosted within your private
server infrastructure using enterprise-grade SSL/TLS encryption,
custom firewall configurations, dedicated database isolation, and
automated server-level backup routines.
● Enterprise Functional Capabilities: Built-in Enterprise features,
including multi-company consolidation, advanced OCR document
digitization, open banking API connectors, and automated
multi-currency localization, integrate seamlessly with your custom
operational apps.
3.3. Testing and Go Live

● User Acceptance Testing (UAT) Coordination: Coordinate UAT
sessions with key operational leads, finance teams, and field
managers to validate multi-company invoicing, bank feeds, offline
ticket sync, e-Factura submissions, and overall financial workflows
before production deployment.
● Data Migration & Go-Live Preparation: Execute custom data
transformation and migration scripts to import historical
accounting, vendor, customer, and operational data from legacy

systems (Zoho, Xero). Configure the live private server environment,
establish user security roles, provide end-user and admin training,
and deliver dedicated post-launch support.
● End-to-End Operational Testing: Perform end-to-end testing across
the complete business pipeline: lead capture, quotation, project
initiation, offline field ticket execution with signature, bill
upload/OCR, SEPA payment generation, and consolidated group
financial reporting.

4. Communication Plan
To ensure complete transparency and timely project execution, communication
will be maintained throughout the engagement as follows:
● Collaboration Channels: Project tracking will be managed through agreed
communication platforms (e.g., Upwork, Slack, Discord or Microsoft
Teams) for asynchronous day-to-day updates, issue tracking, and
scheduled technical syncs.
● Weekly Progress Meetings: Regular syncs to review completed work,
demonstrate live features, discuss upcoming milestones, and address
technical or workflow questions.
● Milestone Completion Reports: Detailed updates summarizing
deliverables, live system walk-throughs, and completed modules ready for
client review and formal sign-off.
● Documented Decision Trail: All architectural decisions, scope refinements,
module specifications, and action items will be logged in writing to
maintain a clear technical history and complete project alignment.

5. Deliverables

● Historical Data Migration (Includes Item 11): Extracted, cleaned, and
transformed historical accounting, inventory, contact, and transactional
data successfully migrated from Zoho and Xero into Odoo. Includes a
custom Python migration script to parse historical Romanian expense PDFs
from Google Drive and automatically link them directly to generated
vendor bill records without consuming OCR credits.
● Multi-Company Architecture & Financial Core: Fully configured 4-entity
Odoo Enterprise instance running on custom server infrastructure,
handling localized accounting, multi-currency transactions (RON, GBP, USD,
AED), and automated inter-company transaction mirroring.
● Romanian & UK Compliance Engine: Operational e-Factura integration via
ANAF API connection, SAF-T (D406) audit report generation for Romanian
entities, and HMRC Making Tax Digital (MTD) setup for UK entities.
● Custom Offline Field Ticket Module: A specialized web/mobile module
enabling remote field staff to record wellsite job logs, capture
materials/services rendered, work without an internet connection, and
collect on-site client representative signatures.
● Automated Bill Processing & OCR Gateway: Dedicated email-to-bill
routing per company, automated OCR text extraction, and purchase order
matching to digitize incoming supplier invoices.
● Bank Feed & Payment Processing Integration: Configured open banking
feeds for Wise, Tide, Revolut, and WIO, statement import engines
(CSV/OFX) for Banca Transilvania, and automated SEPA/ISO20022 XML
batch payment file generation.
● Unified Contact & Master Data Directory: Centralized partner architecture
providing shared customer and supplier contact management across all 4
group entities while maintaining company-specific financial rules.

● Role-Based Security & Executive Dashboards: Tailored access permissions
and dedicated dashboards for Field Staff, Operations Managers, Finance
Teams, and Group Executives showing real-time operational status, job
profitability, and consolidated financial metrics.
● Complete Testing, UAT, & Private Server Deployment: Full end-to-end
testing, User Acceptance Testing (UAT) execution, production server
configuration, user role provisioning, staff training sessions, and dedicated
go-live support.
● Technical & System Documentation: Comprehensive technical deployment
guides, administrator system documentation, and operational end-user
manuals for daily business processes.

Part-Time | Long-Term Monthly Retainer | NDA Required

We are looking for a reliable DevOps/Linux engineer to manage, secure, monitor and troubleshoot our production infrastructure.

This is a hands-on role for someone who can investigate problems across the full stack, identify the root cause, apply safe fixes and document important changes.

Our Environment:
Ubuntu VPS
Caddy
Cloudflare
PostgreSQL
Redis
Production APIs and backend services
Multiple applications and environments

Docker is not our default production approach, but may be used when technically appropriate and approved.

Main Responsibilities:
Server Administration & Security
Manage and harden Ubuntu production servers
Configure firewalls and secure SSH access
Apply security updates and patches
Monitor CPU, RAM, disk space, network and services
Investigate suspicious activity and unauthorized access
Minimize unnecessary public exposure
Manage credentials, keys and secrets securely
Caddy & Cloudflare
Configure reverse proxy routing
Manage domains, DNS and SSL/TLS
Maintain Cloudflare proxy and security settings
Protect origin servers from unnecessary direct access
Troubleshoot routing, DNS and certificate issues
Deployments & Production Operations
Deploy and maintain applications
Manage Git/GitHub-based releases
Configure environments and services
Handle rollbacks and service recovery
Manage workers, queues and scheduled jobs
Verify deployments and document production changes
Databases & Redis

Strong PostgreSQL experience is required.

You should also be comfortable with:

PostgreSQL backups, restores, permissions and troubleshooting
MySQL/MariaDB administration
Basic MongoDB troubleshooting
Redis administration and connectivity issues
Queue and worker failures
Database performance and connection problems
Application-Level Troubleshooting

You must be able to troubleshoot beyond the server itself.

Problems may involve:

Application configuration
PHP or Node.js runtime
Database connectivity
Redis or queues
File permissions
Caddy
Firewall
DNS or Cloudflare
Server resources
Deployment configuration

We need someone who finds the root cause—not someone who simply restarts services and hopes the issue disappears.

Backups, Monitoring & Recovery
Maintain automated backups
Verify backups and test restores
Monitor server, application, database, Redis, SSL and queues
Create recovery and rollback procedures
Respond to critical production incidents
Documentation Requirement

You must maintain a clear infrastructure runbook covering:

Servers and services
Ports and dependencies
Caddy and Cloudflare configuration
Deployment and rollback procedures
Database and Redis setup
Backup and restore procedures
Security configuration
Common troubleshooting steps
Disaster recovery

A new engineer should be able to understand and recover the environment without relying on one person’s memory.

Security & Confidentiality

An NDA is required before production access.

You must:

Use individual accounts where possible
Follow least-privilege access
Never share credentials or production data unnecessarily
Never commit secrets to Git
Never create undocumented access
Never expose internal services without approval
Report security incidents immediately

All infrastructure, source code, credentials and business information belong to BikeFixUp and must remain confidential.

Requirements
4+ years of practical DevOps/Linux experience preferred
Strong Ubuntu production experience
Strong PostgreSQL experience
Redis experience
Caddy or Nginx experience
Cloudflare experience
Production deployment and troubleshooting experience
Server security and backup/restore knowledge
Ability to explain real production incidents you have resolved
Comfortable with long-term monthly retainer work
Available for critical production issues when needed
About the Engagement

This is a part-time, long-term retainer with a small startup and a limited monthly budget.

We currently have a small team and around four active projects. In return, you will receive:

Real production infrastructure experience
Ownership and responsibility
Exposure to multiple projects and technologies
Direct communication with the founding team
Opportunity to grow with the company
Potential for a long-term professional relationship

We are looking for a trusted technical partner—not someone interested only in a one-time setup.

To Apply

Please include:

Years of DevOps/Linux experience
Experience with Ubuntu, PostgreSQL, Redis, Caddy/Nginx and Cloudflare
A real production incident you diagnosed and resolved
Your backup and disaster-recovery experience
Your availability and typical critical-incident response time
Your monthly expected fee
Confirmation that you are comfortable signing an NDA

Start your proposal with:

“TRUSTED DEVOPS”

We are not simply hiring someone to manage a server. We are looking for someone we can trust with our production infrastructure.

Critical Uptime, Security & Attack Response

The DevOps engineer must be proactively available to maintain maximum possible server uptime (target: 100%) and respond immediately to critical production incidents.

This includes:

Continuous monitoring of server health and critical services
Strong firewall configuration and port protection
SSH hardening and unauthorized-access prevention
Monitoring and responding to suspicious activity, brute-force attempts, DDoS/DoS attacks and other security threats
Protecting servers and databases from unauthorized public exposure.

Cloudflare security configuration and origin-server protection
Prompt investigation of malware, intrusion attempts or abnormal server activity
Immediate response to critical security incidents and service failures

Regular security updates, patching and server hardening
Proactive identification and prevention of vulnerabilities that could cause downtime

The goal is maximum uptime, strong cybersecurity and rapid incident response. The engineer should not wait for a service to go down before taking action proactive monitoring and prevention are expected.

Long-term: $40/month fixed.

Program Manager – Cyber Security & Network Infrastructure

Employment Type: Full-Time
Experience Required: 18+ Years
Working Time Zone: IST
Role: Senior Program Management – Network Infrastructure & Cyber Security

About the Role

We are looking for a highly experienced Program Manager – Cyber Security & Network Infrastructure to lead and manage complex enterprise Network Infrastructure and Cyber Security programs.

The successful candidate will be responsible for managing multiple concurrent projects and technical workstreams, coordinating technical teams and vendors, managing senior stakeholders, and ensuring successful delivery against agreed scope, timelines, budgets and quality requirements.

This is a full-time permanent position and requires strong experience in both Network Infrastructure and Cyber Security program delivery.

Key Experience Required
18+ years of overall IT industry experience, with at least 7–8 years in Project/Program Management roles.
Minimum 5+ years of experience managing Network Infrastructure and/or Cyber Security programs within large enterprise environments.
Proven experience managing multiple concurrent projects and complex technical workstreams.
Experience managing large technology programs, preferably with program values of AUD $2M–$5M+.
Strong experience delivering programs involving:
LAN/WAN
Data Centre Networks
Firewalls & Network Security
SD-WAN
Wireless Infrastructure
Cloud & Hybrid Cloud Connectivity
Cyber Security
Demonstrated experience managing firewall refresh/migration programs.
Experience with network transformation and modernisation initiatives.
Experience managing data centre migration programs.
Experience with EOL/EOS remediation and technology lifecycle programs.
Experience delivering security uplift and infrastructure modernisation initiatives.
Strong experience managing customers, senior stakeholders, architects, engineers, vendors and delivery partners.
Excellent program governance, risk management, financial management, resource management and executive reporting capabilities.
Exceptional English communication skills, with strong verbal, written, presentation and senior stakeholder engagement capabilities.
Key Required Certifications

Candidates must hold at least one recognised Project/Program Management certification:

PMP – Project Management Professional
PRINCE2 Practitioner
MSP – Managing Successful Programmes
Highly Desirable Certifications
ITIL 4 Foundation or higher
SAFe Agilist / Agile Project Management
CISSP – Certified Information Systems Security Professional
CISM – Certified Information Security Manager
Working Hours

The position will operate primarily in the IST time zone. Candidates should be comfortable working an early-start schedule, preferably from approximately 7:00 AM IST or earlier when required, to support customer and project requirements.

I’m rolling out a new Asterisk-based PBX that spans both an on-prem rack server and a small cloud instance. I need a specialist who can take the project from a clean slate to a fully functional, production-ready system.

Here’s what I’m expecting:
• Complete installation of the latest stable Asterisk on each node (one local, one cloud) with SIP trunks registered and ready.
• Seamless call routing between sites, extension dialing, voicemail, IVR, and basic queue logic operating flawlessly across the hybrid topology.
• Secure configuration—TLS/SRTP, strong authentication, sensible firewall rules, fail-over settings between the two servers.
• Real-time monitoring and alerting set up (Nagios, Zabbix, Grafana, or a tool you’re comfortable with) so I can track call quality, trunk status, disk/CPU, and receive instant notifications on issues.
• Clear, concise hand-over documentation and a quick walkthrough so I can maintain day-to-day tasks internally.

Acceptance criteria:
• Both servers pass test calls (internal, external, fail-over) without packet loss or noticeable latency.
• All configured services appear clean—no critical alerts—on the monitoring dashboard for 48 consecutive hours.
• Documentation is delivered in an editable format and accurately reflects the live environment.

If you’ve built hybrid Asterisk systems before and can move fast while keeping things tidy, let’s get started.

Skills: Linux, Asterisk PBX, VoIP, Telecommunications Engineering, Debian, Network Administration, Alerting, SIP

My home network needs a thorough security overhaul focused on cybersecurity and data protection. I’m looking to tighten every layer—router configuration, firewall rules, Wi-Fi encryption, secure remote access, and reliable backup strategies—so that every device in the house stays protected without slowing anything down.

Here’s what I expect from your work:
• Assess the current home-grade modem/router and recommend or apply best-practice hardening.
• Set up WPA3 (or strongest available) Wi-Fi security, strong passwords, and guest isolation.
• Implement endpoint protection on laptops, phones, tablets, and any IoT gear.
• Configure automatic, encrypted backups to local NAS or trusted cloud storage.
• Provide a concise hand-off document so I can maintain these settings confidently.

You’re free to choose the security tools you trust—as long as they’re mainstream and well-supported—and you can walk me through any license purchases if needed. Clear communication, minimal downtime, and evidence of previous home-network hardening projects will put your proposal on top.

Skills: Web Security, Computer Security, Network Administration, Internet Security, Encryption, Network Security, Firewall, Data Protection

My current VPS has been compromised and I need to relocate the entire site—including all files, a MariaDB database, and its DNS server setup—to a fresh, hardened Ubuntu box. We will work side-by-side in real time over Zoom with shared screen; no unattended access will be granted.

What you’ll be helping me do
• OPTIONAL - Audit the existing Apache2 + php-fpm stack, vBulletin 5/6 installation, and Webmin settings to confirm the scope of infection.
• Package and move every site asset and the MariaDB dump to the new host.
• CREATE NEW MASTER DNS FROM ANOTHER DNS - Re-create DNS records and verify propagation.
• Lock down the new server with best-practice hardening (firewall, SSH, permissions, fail2ban, etc.) so the forum is protected against both outside attacks and potential insider missteps.
• Validate that vBulletin loads correctly, attachments work, and logins succeed.

Your background
During our Zoom sessions please be ready to show or discuss prior hands-on work with:
• php-fpm tuning on Ubuntu
• vBulletin 5.x or 6.x upgrades or migrations
• MariaDB / MySQL optimisation and backups
• WEBMIN REQUIRED - Webmin or similar control panels
• Incident response for hacked sites and the steps you took to re-secure them

Session logistics
– Fluent spoken English is essential.
– AI tools are welcome, but only while we are both watching the same screen.
– I expect concise documentation of the steps we take so I can maintain the server afterward.

Deliverables (signed off live)
1. VERIFY Clean site fully running on the new host
2. Written summary of security measures applied
3. Transfer checklist / rollback notes in case of emergency

If this collaborative, on-camera style suits you, tell me about one similar migration you led and the security layers you added. Let’s get started soon.

Skills: System Admin, Linux, Apache, DNS, vBulletin, Web Hosting, Ubuntu, MariaDB, Firewall

We are seeking an experienced Level 2 Helpdesk Technician to serve as an escalation point for our Tier 1 team and to independently resolve complex technical issues across a diverse, multi-client environment. The ideal candidate has prior MSP experience, thrives on variety, communicates clearly with non-technical users, and documents everything.

Key Responsibilities
Serve as the escalation point for Tier 1 technicians, resolving issues beyond first-level scope
Diagnose and resolve advanced desktop, server, network, and application issues across multiple client environments
Administer and troubleshoot Microsoft 365 tenants (Exchange Online, SharePoint, Teams, Entra ID/Azure AD, Intune)
Support Windows Server environments: Active Directory, Group Policy, DNS, DHCP, file/print services
Troubleshoot network infrastructure: firewalls, switches, wireless access points, VPNs, and VLANs
Manage endpoints and patching through RMM tooling; respond to monitoring alerts
Support business VoIP systems and assist with moves, adds, and changes
Assist with backup verification, disaster recovery testing, and data recovery efforts
Perform on-site visits for issues that cannot be resolved remotely, including hardware replacement and structured cabling support
Document all work thoroughly in the ticketing/PSA system and contribute to client knowledge base articles
Mentor Tier 1 technicians and identify recurring issues for root-cause resolution
Participate in an on-call rotation for after-hours emergency support
Required Qualifications
3+ years of IT support experience, with at least 1 year at a Tier 2 level (MSP experience strongly preferred)
Strong working knowledge of Windows 10/11, Windows Server 2016–2022, and Microsoft 365 administration
Solid understanding of networking fundamentals: TCP/IP, DNS, DHCP, VLANs, VPN, firewall rules
Experience with Active Directory and Group Policy administration
Familiarity with RMM and PSA/ticketing platforms
Excellent troubleshooting methodology and the ability to work independently
Clear, professional written and verbal communication with both technical and non-technical audiences
Valid driver's license and reliable transportation for client site visits
Ability to lift up to 50 lbs (equipment installs, cabling work)
Preferred Qualifications
Industry certifications: CompTIA A+/Network+/Security+, Microsoft (MS-102, AZ-104, or similar), or Cisco CCNA
Experience with pfSense or other business-class firewalls
Exposure to VoIP administration (SIP, PBX platforms)
Experience with backup/BDR platforms and data recovery
Basic scripting ability (PowerShell)
Prior military service (we are proudly veteran-owned)

Dinstar UC2000-VE-4T + FreePBX/Asterisk + Retell AI Voice Setup

Project Description

We are looking for an experienced individual VoIP/Asterisk freelancer to configure a small business telephone system.

Hardware available:

Dinstar UC2000-VE-4T LTE/VoLTE Gateway

2 mobile SIM cards initially

4 available gateway channels


Required configuration:

Install and configure FreePBX/Asterisk

Configure the Dinstar UC2000-VE-4T with 2 SIM cards

Create two completely independent inbound/outbound call routes

Configure two remote SIP softphone users working from PCs/mobile phones

Each user must make and receive calls through their assigned SIM/number

Incoming caller ID should be passed correctly to the remote user

Configure correct outbound routing so each user always calls through their assigned SIM

Integrate 2 separate Retell AI voice agents/accounts

Incoming new calls should first be answered by the appropriate Retell AI agent

Configure AI-to-human call transfer to the appropriate softphone

Configure callback/outbound calling through the correct SIM

Configure basic PBX/network security

Test simultaneous calls, audio quality, caller ID, transfers, inbound and outbound routing

Provide basic documentation/admin handover after setup


Implementation/Test Stages

Stage 1:
Dinstar → FreePBX/Asterisk → remote softphones.
Both numbers must work independently for incoming and outgoing calls.

Stage 2:
FreePBX/Asterisk → Retell AI integration for both numbers, including AI-to-human transfer.

Freelancer Requirements

Strong practical experience with:

Asterisk / FreePBX

Dinstar or similar GSM/LTE/VoLTE gateways

SIP trunks and SIP routing

Remote SIP softphones

NAT/firewall/security configuration

Retell AI, Vapi or another AI voice/SIP platform preferred


Please mention in your proposal:

1. Your experience with Dinstar/GSM-LTE gateways


2. Your experience with FreePBX/Asterisk


3. Whether you have previously integrated Retell AI, Vapi or another AI voice agent with Asterisk/SIP


4. Your recommended softphone


5. Your fixed price for the complete setup and testing


6. Estimated completion time

We're seeking a skilled and experienced Network Engineer with expertise in MikroTik routers and switches.

We need assistance with designing, implementing, maintaining, and troubleshooting our network infrastructure. The ideal candidate will have experience with MikroTik devices (e.g., RB750, RB922UAGS-5HnD-S, EC100) and a strong understanding of networking.

Responsibilities:
Design, implement, and support network solutions using MikroTik routers and switches
Configure routing protocols (e.g., OSPF, RIP), VLANs, NAT, DHCP, firewall rules, Hotspot etc.
Troubleshoot complex network issues via remote access or on-site visits
Develop and manage scripts for automation of repetitive tasks

Requirements:

- 2+ years of experience as a Network Engineer or similar role
- In-depth knowledge of MikroTik routers, switches, and devices (RB500 series, RB850 series, etc.)
- Strong understanding of networking fundamentals (TCP/IP, DNS, DHCP)
- Experience with routing protocols (OSPF, RIP), firewall configuration, and NAT/SATP
- Strong English Communication ability

Availability:

We're looking for someone to work on a flexible schedule between 2-20 hours per week. This could be a short-term or long-term contract, depending on the scope of the project.

What We Offer:
Opportunity to work with a talented, dynamic team
Flexibility in scheduling and workload

If you're a skilled Network Engineer with experience in MikroTik devices, please submit your proposal outlining:

Your experience and qualifications
Your availability and estimated hourly rate

We look forward to reviewing your proposals!

My WordPress site has started showing unauthorized content (https://www.stevensonridge.com/) and sometimes kicks visitors over to unrelated domains. I have traced it back to a corrupt plugin, but I need a specialist to pinpoint the exact files, clean the infection, and harden the installation so the problem does not return.

You will have full cPanel access; everything (files, database and the built-in backup utility) is available there. I have not rolled back because I first want to be sure the root cause is removed rather than simply hidden.

The job is complete when:
• The offending plugin code is isolated or replaced,
• No malicious redirects or injected content remain across the site or database,
• Core, theme and all other plugins scan clean, and
• I receive a brief report outlining what was fixed and any security measures you implemented or recommend (firewall rules, update schedule, backup routine, etc.).

If you normally work with tools such as Wordfence, Sucuri, or direct server-side scans, feel free to leverage them—just document what you run so I can follow along in future. I’m ready to give you immediate access and approve milestones as each step is verified live on the site.

Skills: PHP, Web Security, WordPress, MySQL, Website Management, Web Development, Website Optimization, Database Management, cPanel, Security Auditing

We are looking for an experienced Linux/DevOps security specialist for a fixed-scope setup project, followed by ad-hoc (zero-hours) support.

Scope & Deliverables
° Server provisioning, OS, hardening. Create production, development, and shared services projects
° Configure networking, VPCs, firewall rules, Cloud NAT, and IAM
° Terraform configuration (Vultr provider) covering: compute instances, firewall rules, reserved IP, object storage buckets, DNS records. Remote state stored in object storage with locking.
° A written architecture proposal covering: VPS sizing, whether PostgreSQL runs self-hosted in Docker or on Vultr Managed Database (with cost/benefit and AWS migration implications), Redis topology, region selection, and the reverse proxy choice (nginx vs Caddy).
° Docker images (Dockerfiles). CI/CD pipeline definition
° An ADR (architecture decision record) file per significant decision, committed to the repo.
° Secrets storage & rotation procedure
° Infrastructure monitoring & alerting
° Confirmed monthly infrastructure cost estimate.

Required skills
° PostgreSQL administration and backup strategies
° CI/CD pipeline implementation
° GitHub Actions or similar deployment automation tools
° Cloud networking and security fundamentals
° Portability to AWS

I need a small service that does two things seamlessly. First, once a month it should crawl Amazon and pull only those products whose “Country of Origin” field shows India. From each matching listing I’m interested in the product name, its full description, current rating score and review count, plus the Country-of-Origin flag itself. Everything you gather should be written into a MySQL table so I can query it later.

Second, I want a REST-style API exposed on my Hostinger account that reads from that database and returns clean, focused search results. If someone asks the endpoint for “fridge”, I must not see fridge magnets or unrelated accessories—just actual refrigerators. The API has to run behind a localhost restriction (i.e. accept calls only from 127.0.0.1), yet still sit on Hostinger so I can interact with it through server-side scripts.

Key points you should cover while building:
• Schedule the scraper to run monthly without manual intervention.
• Respect Amazon’s structure changes with selectors that are easy for me to tweak later.
• Store data in a well-indexed MySQL schema so the API responds quickly.
• Deploy the code on Hostinger and document any cron or firewall rules used to lock the API to localhost.

Deliverables
1. Scraper source code with setup guide.
2. MySQL schema and seed script.
3. Deployed API with a sample CURL request returning relevant product JSON.
4. Brief read-me covering environment variables, how to update selectors, and how to run the monthly job.

I’m comfortable with Python (Scrapy, BeautifulSoup, Selenium) or Node, so feel free to use whichever stack lets you meet the above goals cleanly.

Skills: PHP, Python, Web Scraping, Software Architecture, MySQL, Scrapy, BeautifulSoup, API Development

We have a website/server that is experiencing recurring DDoS attacks and periodically becomes unavailable or heavily overloaded.

We are looking for an experienced DDoS mitigation / Cloudflare / server security specialist to investigate the issue and implement a permanent mitigation strategy.

Required work:

Analyze server/access logs and identify the attack pattern

Check whether the origin server IP is exposed

Review Cloudflare DNS, proxy, WAF and security configuration

Configure appropriate WAF/rate-limiting/bot protection rules
Harden the origin server/firewall where appropriate

Identify any application/WordPress-level vulnerabilities contributing to the issue

Test the website after mitigation

Provide documentation of everything changed

Provide short post-fix monitoring/support

Important: We are not looking for someone who will simply enable Cloudflare's "Under Attack" mode. We need someone to investigate the actual cause and implement a robust long-term mitigation.

Please provide examples of DDoS mitigation projects you have personally handled.

Part-Time | Long-Term Monthly Retainer | NDA Required

We are looking for a reliable DevOps/Linux engineer to manage, secure, monitor and troubleshoot our production infrastructure.

This is a hands-on role for someone who can investigate problems across the full stack, identify the root cause, apply safe fixes and document important changes.

Our Environment:
Ubuntu VPS
Caddy
Cloudflare
PostgreSQL
Redis
Production APIs and backend services
Multiple applications and environments

Docker is not our default production approach, but may be used when technically appropriate and approved.

Main Responsibilities:
Server Administration & Security
Manage and harden Ubuntu production servers
Configure firewalls and secure SSH access
Apply security updates and patches
Monitor CPU, RAM, disk space, network and services
Investigate suspicious activity and unauthorized access
Minimize unnecessary public exposure
Manage credentials, keys and secrets securely
Caddy & Cloudflare
Configure reverse proxy routing
Manage domains, DNS and SSL/TLS
Maintain Cloudflare proxy and security settings
Protect origin servers from unnecessary direct access
Troubleshoot routing, DNS and certificate issues
Deployments & Production Operations
Deploy and maintain applications
Manage Git/GitHub-based releases
Configure environments and services
Handle rollbacks and service recovery
Manage workers, queues and scheduled jobs
Verify deployments and document production changes
Databases & Redis

Strong PostgreSQL experience is required.

You should also be comfortable with:

PostgreSQL backups, restores, permissions and troubleshooting
MySQL/MariaDB administration
Basic MongoDB troubleshooting
Redis administration and connectivity issues
Queue and worker failures
Database performance and connection problems
Application-Level Troubleshooting

You must be able to troubleshoot beyond the server itself.

Problems may involve:

Application configuration
PHP or Node.js runtime
Database connectivity
Redis or queues
File permissions
Caddy
Firewall
DNS or Cloudflare
Server resources
Deployment configuration

We need someone who finds the root cause—not someone who simply restarts services and hopes the issue disappears.

Backups, Monitoring & Recovery
Maintain automated backups
Verify backups and test restores
Monitor server, application, database, Redis, SSL and queues
Create recovery and rollback procedures
Respond to critical production incidents
Documentation Requirement

You must maintain a clear infrastructure runbook covering:

Servers and services
Ports and dependencies
Caddy and Cloudflare configuration
Deployment and rollback procedures
Database and Redis setup
Backup and restore procedures
Security configuration
Common troubleshooting steps
Disaster recovery

A new engineer should be able to understand and recover the environment without relying on one person’s memory.

Security & Confidentiality

An NDA is required before production access.

You must:

Use individual accounts where possible
Follow least-privilege access
Never share credentials or production data unnecessarily
Never commit secrets to Git
Never create undocumented access
Never expose internal services without approval
Report security incidents immediately

All infrastructure, source code, credentials and business information belong to BikeFixUp and must remain confidential.

Requirements
4+ years of practical DevOps/Linux experience preferred
Strong Ubuntu production experience
Strong PostgreSQL experience
Redis experience
Caddy or Nginx experience
Cloudflare experience
Production deployment and troubleshooting experience
Server security and backup/restore knowledge
Ability to explain real production incidents you have resolved
Comfortable with long-term monthly retainer work
Available for critical production issues when needed
About the Engagement

This is a part-time, long-term retainer with a small startup and a limited monthly budget.

We currently have a small team and around four active projects. In return, you will receive:

Real production infrastructure experience
Ownership and responsibility
Exposure to multiple projects and technologies
Direct communication with the founding team
Opportunity to grow with the company
Potential for a long-term professional relationship

We are looking for a trusted technical partner—not someone interested only in a one-time setup.

To Apply

Please include:

Years of DevOps/Linux experience
Experience with Ubuntu, PostgreSQL, Redis, Caddy/Nginx and Cloudflare
A real production incident you diagnosed and resolved
Your backup and disaster-recovery experience
Your availability and typical critical-incident response time
Your monthly expected fee
Confirmation that you are comfortable signing an NDA

Start your proposal with:

“TRUSTED DEVOPS”

We are not simply hiring someone to manage a server. We are looking for someone we can trust with our production infrastructure.

Critical Uptime, Security & Attack Response

The DevOps engineer must be proactively available to maintain maximum possible server uptime (target: 100%) and respond immediately to critical production incidents.

This includes:

Continuous monitoring of server health and critical services
Strong firewall configuration and port protection
SSH hardening and unauthorized-access prevention
Monitoring and responding to suspicious activity, brute-force attempts, DDoS/DoS attacks and other security threats
Protecting servers and databases from unauthorized public exposure.

Cloudflare security configuration and origin-server protection
Prompt investigation of malware, intrusion attempts or abnormal server activity
Immediate response to critical security incidents and service failures

Regular security updates, patching and server hardening
Proactive identification and prevention of vulnerabilities that could cause downtime

The goal is maximum uptime, strong cybersecurity and rapid incident response. The engineer should not wait for a service to go down before taking action proactive monitoring and prevention are expected.

Long-term: $35/month fixed.

Looking for an experienced Linux SysAdmin / DevOps engineer to set up a clean, high-performance Mautic 5.x instance on DigitalOcean using CloudPanel, complete with full AWS SES email authentication and deliverability setup.

​Required Scope of Work:

​Server Build & Hardening: ​Provision a DigitalOcean droplet (Ubuntu LTS). ​Install and configure CloudPanel with SSL certificates. ​Basic server hardening: UFW firewall, Fail2ban, SSH key access only, and automated backups. ​Mautic 5.x Setup: ​Install latest stable Mautic 5.x on a custom subdomain. ​Configure PHP, MySQL, and background cron jobs / queue processing for maximum delivery reliability. ​AWS SES & DNS Deliverability: ​Connect AWS SES API to Mautic. ​Set up full domain authentication DNS records: SPF, DKIM, DMARC, and Custom MAIL FROM domain alignment. ​Configure automated Bounce & Complaint handling using AWS SNS to Mautic Webhooks. ​Draft and submit the AWS SES Sandbox exit request. ​Testing & Handover: ​Perform test sends (verify inbox placement, passing headers for SPF/DKIM/DMARC, and SNS bounce webhook triggers). ​Provide brief handover notes with access details.

​Budget: $250 Flat Fee

Timeline: 24-48 Hours

We are looking for a network and infrastructure engineer to take over a live corporate environment for one of our US clients: Palo Alto firewalls and GlobalProtect, the corporate network and its routing into cloud, wireless, Citrix and VMware. Hands-on production work from day one.

LCloud is a Polish cloud and infrastructure consultancy — AWS Premier Partner, 50+ specialists, fully remote since 2012. You contract with us and work directly with the client's IT team.

WHAT YOU WILL DO

- Palo Alto and GlobalProtect: security policy, portals and gateways, SAML, certificates.
- The corporate network: routing, switching, VLANs, DNS, DHCP, VPN — and BGP routing between the corporate network and cloud environments (AWS).
- Wireless, IPAM / network documentation and monitoring (we use Ruckus, NetBox and PRTG; equivalents are fine).
- Citrix administration and support.
- VMware vSphere and end-to-end server and infrastructure troubleshooting.

WHAT YOU NEED

- 5+ years in network or infrastructure engineering.
- Production ownership of Palo Alto (PAN-OS) and GlobalProtect — configured by you, not watched over someone's shoulder.
- BGP and on-premises to cloud routing, hands-on.
- Citrix administration in production.
- VMware vSphere, plus enough Windows and Linux to troubleshoot a server end to end.
- English at C1 — daily contact with the client's team, service desk and vendors.

Nice to have: Azure, HYCU or comparable backup, Teams Phone / SBC, vulnerability remediation, PowerShell or Python. Microsoft Entra ID and Microsoft 365 administration is not part of this role.

THE ENGAGEMENT

- Hours are flexible, but they have to sit inside New York business hours (US Eastern) — on a full day that means at least 6 hours of overlap. From Europe, roughly 15:00–21:00 CET.
- Start immediately. The term is extended month by month. After about three months, if the work speaks for itself on both sides, we come back to you with a long-term proposal.
- You must be able to contract from your country of residence in the EU/EEA. One individual contractor — no agencies.

HOW TO APPLY
Start your proposal with the word PANORAMA, then answer:

1. Years running Palo Alto in production, and the size of the environment (firewalls, sites, VPN users).
2. One routing problem between an on-premises network and a cloud environment that you diagnosed and fixed.
3. Which of these you have run yourself, and for how long: Citrix, enterprise wireless, IPAM/documentation, monitoring, VMware.
4. The hours you can cover in US Eastern time, and your earliest start date.

Proposals without the first-line word, or without a concrete example from your own work, will not be reviewed.

My service-portfolio site is throwing browser security warnings, so I know malicious code has slipped in. I need someone who can quickly pinpoint the entry point, wipe out every infected file, snippet, or database injection, and harden the entire WordPress stack so the warnings disappear for good.

Here is what has to be accomplished before we talk about any redesign:

• Trace and document the exact backdoor or vulnerability that let the malware in.
• Eradicate all malicious files, scripts, and database entries without disrupting legitimate content.
• Patch core, theme, and plugin weaknesses, then apply best-practice hardening (firewall rules, secure file permissions, updated keys, etc.).
• Validate that the site loads cleanly across modern browsers with no security alerts and that all service-and-portfolio pages render and function as expected.

I will supply server and wp-admin access, plus any logs you request, in a private chat once I shortlist candidates.

Proven WordPress malware-removal and security experience is essential; please share a brief note on similar cleanups you have completed. After the site is fully secured, I plan to start a separate project to revamp the design, so a smooth, documented cleanup now is critical for the next phase.

Skills: PHP, Website Design, Web Security, WordPress, Website Management, Internet Security, Web Development, Website Optimization

Siamo una piccola ONG con un sito WordPress già online. Mi serve un professionista che si occupi di mantenerlo efficiente e aggiornato nel tempo.

Cosa voglio che tu gestisca:
• Contenuti e testi – pubblicazione di nuove pagine o modifiche, formattazione coerente, ottimizzazione SEO di base.
• Design e layout – piccoli ritocchi grafici o di struttura per tenere il sito moderno, sempre restando fedeli al tema esistente.
• Funzionalità e plugin – aggiornamenti sicuri, sostituzione di plugin obsoleti, configurazioni mirate (backup, sicurezza, caching).

Frequenza degli interventi: Occasionalmente, quando necessario. Alcuni mesi potremmo non avere richieste, altri potremmo averne più di una: cerco quindi un rapporto flessibile a richiesta.

Tema: Mantenere il tema attuale. Eventuali migliorie o child-theme saranno bene accetti purché non stravolgano l’identità visiva.

Aspetti tecnici desiderati:
– Versioni WordPress e plugin sempre aggiornate senza downtime.
– Backup completo prima di ogni modifica sostanziale.
– Controllo compatibilità PHP e sicurezza di base (firewall, limit login, ecc.).
– Report rapido via e-mail o chat al termine di ogni intervento con lista delle azioni svolte.

Se hai esperienza con WordPress, sicurezza, copy editing leggero e un buon occhio per l’usabilità, fammi sapere: descrivi brevemente casi simili gestiti e indicami le tempistiche tipiche per un piccolo update.

Skills: PHP, Website Design, SEO, WordPress, HTML, Website Management, Website Optimization, Web Design