Optimize Network Security Projects on Upwork

Server & Network Infrastructure Architect – Secure On-Prem Environment for AI, Data, Storage & Security

We are a growing organization that runs 24/7 across multiple departments, with about [150–300] staff users and highly sensitive, regulated data. We are planning a complete on-premise IT infrastructure (with optional hybrid cloud) and need an experienced architect to design it end to end.

This is not just web hosting. We need one secure, scalable environment that covers application hosting, AI workloads, data processing, analytics, storage, network security and access control.

CURRENT SETUP
- Web application: .NET REST API backend + Next.js frontend, with real-time features (SignalR)
- SQL database with sensitive personal and operational records
- Users on the local network and at remote locations
- Plans to run AI models locally so sensitive data never leaves our premises

SCOPE OF WORK

1. Server & Application Hosting
- Physical server sizing (CPU, RAM, storage) for current load and 3–5 years of growth
- Virtualization or container platform (Proxmox, VMware, Hyper-V, Docker, Kubernetes)
- Hosting for the .NET API, Next.js frontend, databases and background services
- Load balancing, reverse proxy, SSL, and separate environments (production, staging, UAT)

2. AI Infrastructure
- GPU server sizing for running LLMs and AI models locally (inference, possibly fine-tuning)
- Model serving stack recommendations (e.g., vLLM, Ollama, Triton)
- Keeping AI workloads isolated and secure from the core systems

3. Data Processing & Analytics
- Database architecture: primary/replica, high availability, performance tuning
- Data warehouse / reporting server kept separate from live transaction data
- ETL pipelines and BI/dashboard tools (e.g., Power BI, Metabase, Superset)

4. Storage, Backup & Disaster Recovery
- NAS/SAN design, RAID levels, capacity planning for documents, images and large files
- Backup strategy (3-2-1 rule, immutable/offline backups, ransomware protection)
- Disaster recovery plan with clear RPO/RTO targets and failover design

5. Network & Cybersecurity
- Firewall selection and setup (e.g., FortiGate, Sophos, pfSense/OPNsense)
- Network segmentation using VLANs (servers, staff, guest Wi-Fi, IoT-type devices, CCTV, AI servers)
- IDS/IPS, endpoint protection, SIEM / centralized logging and monitoring
- Patch management, vulnerability scanning, security hardening baseline

6. VPN & Access Control
- Site-to-site VPN between branches and remote-access VPN for staff and vendors
- Identity management (Active Directory / Azure AD / LDAP), SSO and MFA
- Role-based access control, least-privilege policies, privileged access management
- Audit trails: who accessed which data, and when

7. High Availability & Physical Infrastructure
- UPS, power redundancy, dual internet links with automatic failover
- Server room / rack layout, cooling and environmental monitoring
- Uptime monitoring and alerting (e.g., Zabbix, Grafana, Prometheus)

8. Compliance & Governance
- Design aligned with data-privacy and security best practices (encryption at rest and in transit, data retention, access logging)
- Documentation that can support future security audits

DELIVERABLES
- High-level and detailed architecture diagrams (network, server, data flow)
- Hardware and software bill of materials with recommended brands/models and estimated costs
- Security architecture document (firewall rules approach, VLAN plan, access-control model)
- Backup & disaster recovery plan
- Phased implementation roadmap (what to build first, what can wait)
- Optional: cloud vs on-prem vs hybrid cost comparison

REQUIRED EXPERIENCE
- 7+ years in infrastructure, systems or network architecture
- Proven work designing environments for data-sensitive, 24/7 organizations (finance, government, healthcare, large enterprise, etc.)
- Hands-on experience with firewalls, VPNs, VLANs, virtualization, NAS/SAN and backup systems
- Knowledge of on-prem GPU/AI server deployment is a strong plus
- Security certifications (CISSP, CCNP, CCNA Security, CEH, AWS/Azure Architect, etc.) are a plus
- Clear communicator who can explain technical decisions to non-technical management

IN YOUR PROPOSAL, PLEASE INCLUDE
1. A similar infrastructure you designed or built: the scale, number of users, and your role
2. How you would design remote vendor access without exposing internal servers
3. Your recommended approach for protecting backups from ransomware
4. Whether you have deployed AI/LLM models on local hardware, and which setup you used
5. Your estimated timeline and rate for the design phase

I need a trusted ethical hacker to help me with a blackmail situation. I am looking for someone who can provide reliable support, maintain confidentiality, and act with integrity throughout the process. Please share relevant experience and how you would approach this type of sensitive case. I need someone who can work discreetly and communicate clearly while helping me understand the best steps forward.

Our in-house team is wrapping up a custom lending portal that consolidates every stage of the loan lifecycle and provides separate dashboards for investors, borrowers, and brokers. Because the platform stores and exchanges highly-sensitive documents—personal IDs, financial records, and legal agreements—I need an independent specialist to run a single, thorough security review right before we move to production.

My top priority is verifying that data encryption is rock-solid at rest and in transit. In addition, each role (investor, borrower, broker) has its own workflow, so you’ll need to confirm that our access-control logic keeps information strictly segregated.

What I expect from you
• Pen-test and code-level review focused on encryption implementation (TLS, key management, database-level encryption, file-storage encryption)
• Validation that role-based permissions cannot be escalated or bypassed
• Vulnerability report with severity ranking, reproduction steps, and practical remediation guidance
• A follow-up call to walk me through findings and recommended fixes

Acceptance criteria
1. All critical and high-severity issues clearly documented with actionable remediation steps.
2. Encryption routines confirmed to meet current NIST or industry-equivalent standards.
3. Verification that investor, borrower, and broker users cannot retrieve or modify data outside their scope.

Tech stack details, staging credentials, and architecture diagrams will be provided once we sign an NDA. Looking forward to your expertise in locking this platform down before launch.

Skills: Compliance, Penetration Testing, Encryption, Network Security, Risk Assessment, Data Protection, Incident Response, Security Auditing

I want to create a professional mock client project for my cybersecurity portfolio. The project should represent the type of Web Application Security Assessment service I plan to offer on freelance platforms such as Upwork, Freelancer, Mostaql, and Khamsat.

Project Title:
Web Application Security Assessment & Vulnerability Report

Project Description:
Create a realistic, professional cybersecurity assessment project for an authorized web application in a legal training environment.

The goal is to simulate a real client requesting a security assessment of their web application. The project should demonstrate practical skills in web security testing, vulnerability identification, documentation, and professional reporting.

Requirements:

* Use Burp Suite and Nmap for security testing.
* Perform reconnaissance and identify relevant services and technologies.
* Test for common web application vulnerabilities in an authorized lab.
* Document discovered vulnerabilities with screenshots and technical evidence.
* Explain the impact and severity of each finding.
* Provide practical remediation recommendations.
* Create a professional PDF security assessment report.
* Include an executive summary suitable for a non-technical client.
* Make the project realistic and suitable for showcasing in a freelance portfolio.

Deliverables:

1. Professional Web Application Security Assessment Report (PDF).
2. Vulnerability findings with descriptions and risk ratings.
3. Technical evidence and screenshots.
4. Remediation recommendations.
5. Executive summary.
6. Portfolio-ready project presentation.

The project should be beginner-friendly but look professional, with a clean structure and realistic client requirements. All testing must be performed only in authorized training environments.

Skills: Web Security, Computer Security, Technical Writing, Report Writing, Website Testing, Internet Security, Penetration Testing, Technical Documentation, Network Security, Risk Assessment

A client of mine in the United States is looking for a freelance professional to assess their current office network setup and perform a basic security review. The scope includes identifying open ports, checking for potential vulnerabilities, reviewing the overall network environment, highlighting relevant security risks, and providing practical recommendations to improve their security posture.

This is a small, part-time engagement ideal for someone who can work independently, communicate findings clearly, and deliver actionable next steps.

Below is the simple requirement.
[1] Check the source of unauthorised certain database table being deleted
[2] Check the source of unauthorised certain database table being modified with a different contents.

Date that this happened:
12 September 2026 / 13th September 2026.

Deliverables
• Identify source of unauthorised database access.
• Block/remove source of unauthorised database access.
• Identify and remove the backdoor files.

Below is the simple requirement.
[1] Check the source of unauthorised certain database table being deleted
[2] Check the source of unauthorised certain database table being modified with a different contents.

Date that this happened:
12 September 2026 / 13th September 2026.

Deliverables
• Identify source of unauthorised database access.
• Block/remove source of unauthorised database access.
• Identify and remove the backdoor files.

Penetration Testing – Perform web, API, network, cloud, mobile, Active Directory, wireless, and segmentation testing across enterprise environments.
Security Architecture & Assessment: Design and review secure architectures across networks, applications, APIs, cloud environments, identity management, Zero Trust, and data protection.
Security Testing: Conduct authorized testing of applications, APIs, networks, cloud platforms, mobile solutions, identity environments, wireless systems, and network segmentation.
AI and Generative AI Security: Assess AI applications, language models, retrieval systems, AI agents, and integrations for security, privacy, and operational risks.
Compliance and IT Audit: Perform gap assessments, control testing, audit-readiness activities, and compliance support across major security and privacy frameworks.
Identity and Zero Trust Evaluation: Review authentication, authorization, privileged access, role-based access, and non-human identity controls.
Risk and Vulnerability Management: Identify, prioritize, document, and monitor vulnerabilities and control gaps based on risk and business impact.
Reporting and Remediation: Develop audit documentation, risk registers, management reports, remediation plans, and validation-testing results.

I'm looking for a lawyer or specialist experienced with the Digital Services Act (DSA) and social media account appeals to help me challenge an unfair account suspension by Meta.

Background:
One of my Instagram account (@xxx), active since 2020 with no prior violations, was suspended on 10 September 2026 and as a consequence, has also blocked my personal FB and my personal IG account — both unrelated to any violation I'm aware of. The last content posted on xxx was in October 2025 and I havent posted any scam or money guaranteed, is a page where i post about crypto, trading, and how I am navigating this market, I havent had any violation or flag since the beginning.

Then this august I posted a real on my own personal account tagging the xxx page where I share how I made a good amount of profit trading gold and I was going to use those to finance the creation of an app — no false claims, no scam, no solicitation of funds.

Trough my personal account I have also access to a meta business suite where we are advertising on a different project, which I am now not able to access anymore.

What I need help with:
- Reviewing my case and advising on the strongest legal/procedural path forward
- Filing and/or strengthening a dispute with the Appeals Centre Europe (the certified DSA out-of-court dispute settlement body)
- Drafting or reviewing formal correspondence to Meta if needed
- General guidance on my rights as an EU/Italian citizen under the DSA regarding platform account suspensions

Please share relevant experience with similar cases (platform bans, DSA disputes, Appeals Centre Europe submissions) when applying.

Looking for an Microsoft Entra, Intune and Azure expert for cloud consulting on deployment, best practices, baselines, security hardening of access, data retention, and Azure architecture improvements with Cloudflare security.

This is a training and advisory job to guide us, optimize the setup and answer technical questions, so the initial work is all done via video calls with screenshare. Follow-up work may include the contractor executing projects in the backend.

Microsoft Entra ID: Conditional Access policy design, Privileged Identity Management (PIM), sign-in/risk policies, custom roles, administrative units, least-privilege admin access structure.

Microsoft Intune: security baseline deployment (Windows and mobile), compliance policies, configuration profiles aligned to Microsoft/CIS best practices

Azure architecture review: network topology cleanup, network security, recommendations, integrate Cloudflare Zero Trust.

Microsoft Partner: Delegated admin, GDAP review and setup.

Ideal times for work session are weekends. Would like to start as soon as possible. This can lead to a long-term engagement.

Embedded SNMPv3 Developer Required – STM32H723 + lwIP

I am looking for an experienced embedded developer who has previously implemented SNMPv3 on STM32 or similar microcontrollers using lwIP.

I already have basic SNMPv1 GET and TRAP functionality working on an STM32H723-based board. The middleware, BSP, FreeRTOS tasks, and UDP stack are already in place. The task is to extend the existing SNMP agent to support secure SNMPv3 communication.

Project Requirements
Phase 1: SNMPv3 Communication
Implement SNMPv3 GET and TRAP functionality.
Enable SHA authentication and AES-128 privacy/encryption using USM.
Respond to authenticated and encrypted GET requests.
Support GETNEXT, if feasible.
Send authenticated and encrypted traps to Bitcom NMS.
Ensure a valid, unique SNMP engine ID for the device.
Maintain the existing SNMP functionality while adding SNMPv3 security.
Phase 2: Specification-Based Implementation

After successful SNMPv3 communication, extend the agent according to the attached technical specification.

The implementation should include:

Production support for SNMPv3 authPriv only; SNMPv1/v2c must be disabled.
Required MIB structure and enterprise OID.
GET, GETNEXT, TRAP, and INFORM support.
Mandatory event and status fields, including:
Event ID
Asset ID
Device type
Device IP
Event type
Event code
Severity
Health status
Timestamp
Description
Additional event information
Periodic status and failure notifications.
INFORM messages for critical events, including acknowledgment and retry handling.
Appropriate access control and SNMPv3 security configuration.
Acceptance Criteria
Wireshark shows valid SNMPv3 authPriv packets using SHA + AES-128.
A valid, unique SNMP engine ID is configured.
Successful communication with Bitcom NMS Server (preferred) or Net-SNMP tools such as snmpget and snmptrapd.
GET, TRAP, and eventually INFORM operations work correctly.
Code builds successfully in STM32CubeIDE.
Implementation fits within the existing Flash and RAM limits.
All required fields and notification formats comply with the attached technical specification.
Project Milestones

Milestone 1 – SNMPv3 GET & TRAP Communication (₹1,500) (2 Day deadline)
Implement and verify SNMPv3 communication with SHA authentication and AES-128 encryption using hardcoded credentials initially.

Milestone 2 – Specification-Based Implementation (₹1,500)(2 Day deadline)
Modify the SNMP agent according to the attached specification, including the required OIDs, MIB structure, event fields, status information, and notification formats.

Milestone 3 – SNMPv3 INFORM Implementation (₹1,500)(2 Day deadline)
Implement INFORM messages for critical events, including acknowledgement, retries, and fallback to TRAP where required.

Important

I want to first establish reliable SNMPv3 GET and TRAP communication. Once this is working, we will proceed with implementing the actual specification and INFORM functionality.

Please apply only if you have prior hands-on experience with SNMPv3, USM security, and embedded networking, preferably on STM32 + lwIP, and can start immediately.

Skills: C Programming, Debugging, Software Development, Embedded Systems, Network Security, STM32, Firmware Development

STRICT RULES - READ BEFORE BIDDING

1. NO BEGINNERS & NO EXPERIMENTS:
If you are a beginner or looking to "experiment" and figure things out on the go, your bid will be REJECTED. You must have proven, hands-on experience with ALL of these specific devices:

Cudy P2 5G Router

DrayTek Vigor 2915 Router

Yeastar S20 PBX

We are a live production business, NOT a testing ground. If you have not actively worked with these exact models inside out, DO NOT BID.

2. THE CORE AUTOMATION GOAL (MANDATORY):
We demand a 100% seamless, automated experience for the end-user. Moving in and out of the KSA office must require ZERO manual network adjustments.

3. STRICTLY ANYDESK OR ULTRAVIEWER ONLY:
ALL work MUST be done remotely via AnyDesk or UltraViewer on my machine. No direct access, VPN credentials, SSH keys, or passwords will be handed over.

4. MANDATORY BACKUPS & ROLLBACK:
You must take full configuration backups of all devices to my local PC before making a single change.

5. MILESTONES & 7-DAY GUARANTEE:
Payment will only be released after a 7-day stability testing period to ensure no VoIP drops, audio delays, or VPN disconnects occur.

6. NO TIME-WASTING (INSTANT BLOCK):
Your bid is your final price. Do NOT send me private messages asking "Please clarify what is required" or "What is the problem?". Everything you need to know is in this document. Anyone sending these generic questions in private will be AUTOMATICALLY BLOCKED.

7. THE "READ ME" TEST (MANDATORY TO BE HIRED):
To prove you are an expert, you MUST start your proposal by answering this exact question:
"Since our KSA router is behind a 5G CGNAT, how EXACTLY will you route both the HTTP signaling (Port 443) AND the UDP RTP media streams through the VPS/Caddy/WireGuard setup to successfully link with the remote Yeastar PBX without one-way audio issues?"
Proposals that do not start with a clear technical answer will be IGNORED.

PROJECT DETAILS & TECHNICAL SCOPE

We need an expert to troubleshoot and optimize the Routing and Site-to-Site Link between Saudi Arabia (5G behind CGNAT) and Egypt.

Current Infrastructure:

KSA Site: DrayTek Vigor 2915 router cascaded behind a Cudy P2 5G router.

Egypt Site: Yeastar S20 PBX on stable Fiber. (NOTE: The Egypt connection is 100% stable. NO network modifications are needed on the Egypt side. The job is STRICTLY about fixing the routing/link from KSA to Egypt).

Cloud VPS (Contabo, Germany): Used as a relay to bypass the KSA 5G CGNAT. It runs Docker, Caddy (reverse proxy) with a No-IP DDNS.

Tunnels: WireGuard is ALREADY SET UP on the Contabo server for the site-to-site link.

The Exact Deliverables to Fix (via AnyDesk):

1. Zero-Touch Automation (VPN & Linkus):
Both DrayTek Smart VPN and the Yeastar Linkus app must function automatically and flawlessly. They must transition seamlessly whether the user is inside the local office network or outside on external mobile networks, requiring ZERO manual switching or IP adjustments from the user.

2. Uninterrupted GUI Access:
You must configure the Reverse Proxy (Caddy/VPS) and routing to guarantee stable, remote web access to the admin pages of the Cudy Router, DrayTek Router, and Yeastar PBX. This must be done without causing Port 443 conflicts with the DrayTek SSL VPN or Linkus signaling.

3. MTU Optimization:
Calculate and adjust the exact MTU/MSS values across the network to completely eliminate voice drops, packet fragmentation, and ensure absolute connection stability over the 5G CGNAT.

4. Codec Optimization:
Adjust and enforce the optimal audio codecs on the Yeastar PBX to guarantee zero voice delay (latency) across the site-to-site link.

5. WireGuard Routing Efficiency:
Restructure and optimize the WireGuard routing tables to deliver the highest possible bandwidth efficiency, lowest overhead, and smoothest traffic flow between KSA and Egypt.

Skills: Linux, Cisco, VoIP, Network Administration, Docker, Network Security, Network Engineering, Automation, VPN, Network Monitoring

Hi Emanuel,
I need a hacker to figure out what is going on?
So I think I am being scammed online for months now. They have slowly, slowly taken lioe 7500£ as I am in the Uk with apple gift cards.
My problem is this person is taking it to another level as I keep blocking him and he keeps coming back with another nee mobile number?!
My issue is it started and still is a love scam but now he keep insisting on that he is a famous singer and he is so madly in love that he is leaving his label for me?! Ha ha. Wait the sweetest thing is he talked me into download an app called Trust its a bitcoin app and the crazy label of his sent me all of his money in Bitcoin. I have no clue on how bitcoin works and how u can take cash out of it, but he keeps coming insisting that I take it out in a bitcoin cash machine but it charges huge fees and u have to pay that fee in advance like 32000£ ?
Is this true and Is there no other way to cash this bitcoin out cheaper. I am also afraid of the tax in Uk liabilities as if u take it out in cash I would liable to pay tax after it?? No?
Can u help?

I already have basic SNMP v1 “get” and “trap” working on an STM32H723-based board, but now the device must speak full SNMP v3 with security enabled. On the application layer I need you to add:

• Authentication: SHA (usmHMACSHAAuthProtocol)
• Privacy/Encryption: AES-128 (usmAesCfb128PrivProtocol)
• Message handling: both Trap and Get operations exactly as they work today in v1, only now wrapped in v3 security headers

The middleware, BSP, FreeRTOS tasks and UDP stack are in place; your task is to extend the existing agent code (currently using lwIP’s raw API) so that the MCU can:

1. Build and send authenticated, encrypted traps to our NMS.
2. Respond to encrypted, authenticated Get (and ideally GetNext) requests.
3. Expose a simple hook where I can register additional OIDs.

Acceptance criteria
• Wireshark capture shows v3 packets with authPriv, SHA + AES-128, and a valid engine ID.
• Net-SNMP snmpget/snmptrapd can communicate successfully using the provided user/keys.
• Code builds in STM32CubeIDE and fits within current Flash/RAM limits.

Timing is critical, so I am looking for someone who has already implemented SNMP v3 on embedded targets (preferably STM32 + lwIP) and can dive straight into the codebase. We will work through a shared Git repository; please be ready to start immediately.

Skills: C Programming, Microcontroller, Embedded Systems, Encryption, Security, Network Security, STM32, Firmware Development

About Us

Marketing Sweet is an Australian based digital marketing company, we work with clients to build, manage, and protect their digital presence. As our client portfolio expands, so does our responsibility to keep their websites and platforms secure, and that's where you come in.
We're looking for a Cyber Security Consultant to join our team and assist with the the security side of our website and platform management. This is a hands-on role for someone who genuinely enjoys solving problems, staying ahead of threats, and making systems more resilient.

About the Role

As our Cyber Security Consultant, you'll be responsible for assessing, implementing, and maintaining security protections across a range of client websites and platforms. You'll work closely with our development and marketing teams to ensure every site we manage is secure by design and stays that way.

What You'll Be Doing

Implementing and managing security protections across client websites
Conducting security assessments and identifying vulnerabilities before they become problems
Monitoring and maintaining the security posture of websites hosted on GitHub and Vercel
Managing access controls, permissions, and deployment security across GitHub repositories and Vercel projects
Responding to and remediating security incidents as they arise
Keeping documentation, processes, and security protocols up to date
Staying current on emerging threats and recommending proactive improvements
Collaborating with the wider team to build security into everyday workflows, not just bolt it on afterward

What We're Looking For

A positive, pragmatic attitude — you solve problems calmly, communicate clearly, and don't catastrophize
Proven experience implementing protection and increasing security on websites — this isn't a theory-only role, we need someone who's done the work
Based in Adelaide — this is an in-office role at our North Adelaide location, so local candidates only
Familiarity with website management on GitHub and Vercel — you're comfortable navigating repositories, deployments, and platform settings on both

Nice to Have (Not Required)

Comfortable web development skills using React and Next.js
Familiarity with database systems such as Redis and MongoDB

If you don't tick every box here but have the core security experience and the right attitude, we'd still love to hear from you.

How to Apply

If this sounds like you, we'd love to see your application. Please submit your resume along with a brief cover note outlining your experience in cyber security.

STRICT RULES - READ BEFORE BIDDING

1. NO BEGINNERS & NO EXPERIMENTS:
If you are a beginner or looking to "experiment" and figure things out on the go, your bid will be REJECTED. You must have proven, hands-on experience with ALL of these specific devices:

Cudy P2 5G Router

DrayTek Vigor 2915 Router

Yeastar S20 PBX

We are a live production business, NOT a testing ground. If you have not actively worked with these exact models inside out, DO NOT BID.

2. THE CORE AUTOMATION GOAL (MANDATORY):
We demand a 100% seamless, automated experience for the end-user. Moving in and out of the KSA office must require ZERO manual network adjustments.

3. STRICTLY ANYDESK OR ULTRAVIEWER ONLY:
ALL work MUST be done remotely via AnyDesk or UltraViewer on my machine. No direct access, VPN credentials, SSH keys, or passwords will be handed over.

4. MANDATORY BACKUPS & ROLLBACK:
You must take full configuration backups of all devices to my local PC before making a single change.

5. MILESTONES & 7-DAY GUARANTEE:
Payment will only be released after a 7-day stability testing period to ensure no VoIP drops, audio delays, or VPN disconnects occur.

6. NO TIME-WASTING (INSTANT BLOCK):
Your bid is your final price. Do NOT send me private messages asking "Please clarify what is required" or "What is the problem?". Everything you need to know is in this document. Anyone sending these generic questions in private will be AUTOMATICALLY BLOCKED.

7. THE "READ ME" TEST (MANDATORY TO BE HIRED):
To prove you are an expert, you MUST start your proposal by answering this exact question:
"Since our KSA router is behind a 5G CGNAT, how EXACTLY will you route both the HTTP signaling (Port 443) AND the UDP RTP media streams through the VPS/Caddy/WireGuard setup to successfully link with the remote Yeastar PBX without one-way audio issues?"
Proposals that do not start with a clear technical answer will be IGNORED.

PROJECT DETAILS & TECHNICAL SCOPE

We need an expert to troubleshoot and optimize the Routing and Site-to-Site Link between Saudi Arabia (5G behind CGNAT) and Egypt.

Current Infrastructure:

KSA Site: DrayTek Vigor 2915 router cascaded behind a Cudy P2 5G router.

Egypt Site: Yeastar S20 PBX on stable Fiber. (NOTE: The Egypt connection is 100% stable. NO network modifications are needed on the Egypt side. The job is STRICTLY about fixing the routing/link from KSA to Egypt).

Cloud VPS (Contabo, Germany): Used as a relay to bypass the KSA 5G CGNAT. It runs Docker, Caddy (reverse proxy) with a No-IP DDNS.

Tunnels: WireGuard is ALREADY SET UP on the Contabo server for the site-to-site link.

The Exact Deliverables to Fix (via AnyDesk):

1. Zero-Touch Automation (VPN & Linkus):
Both DrayTek Smart VPN and the Yeastar Linkus app must function automatically and flawlessly. They must transition seamlessly whether the user is inside the local office network or outside on external mobile networks, requiring ZERO manual switching or IP adjustments from the user.

2. Uninterrupted GUI Access:
You must configure the Reverse Proxy (Caddy/VPS) and routing to guarantee stable, remote web access to the admin pages of the Cudy Router, DrayTek Router, and Yeastar PBX. This must be done without causing Port 443 conflicts with the DrayTek SSL VPN or Linkus signaling.

3. MTU Optimization:
Calculate and adjust the exact MTU/MSS values across the network to completely eliminate voice drops, packet fragmentation, and ensure absolute connection stability over the 5G CGNAT.

4. Codec Optimization:
Adjust and enforce the optimal audio codecs on the Yeastar PBX to guarantee zero voice delay (latency) across the site-to-site link.

5. WireGuard Routing Efficiency:
Restructure and optimize the WireGuard routing tables to deliver the highest possible bandwidth efficiency, lowest overhead, and smoothest traffic flow between KSA and Egypt.

Skills: Linux, Cisco, VoIP, Network Administration, Docker, Network Security, Network Engineering, Automation, VPN, Network Monitoring

We need a freelancer to perform a trial test for DNS-related email security configurations. The work includes setting up SPF, DKIM, and DMARC records, verifying the changes, and confirming that the setup is working correctly. You should be able to test the configuration, identify any issues, and provide clear documentation of the steps taken and results. This is a short-term project for someone with experience in DNS and email security testing.

I am looking for an experienced developer/reverse engineer who has real knowledge of PS4/PSN networking, Demonware services, game APIs, authentication flows, and network traffic analysis.

The target game is Call of Duty: Black Ops 2 on PS4/PS5.

The goal is to research how the game communicates with PSN/Demonware services and determine how player profile data such as:

* Prestige / Level
* Stats
* Unlocks
* Multiplayer profile data

is read and updated.

I already have legitimate access to the game, my own PSN accounts, and PS4/TestKit hardware for testing.

I am specifically looking for someone who understands areas such as:

PSN authentication flows, Demonware/Call of Duty backend services, API request analysis, packet/network analysis, PS4 networking, endpoint discovery, and reverse engineering of game/server communication.

The first proof I need is simple:

Demonstrate on my own test account that you understand the communication responsible for profile/stat data and can identify a realistic method for modifying Prestige/Level or another profile value in a controlled test environment.

This is not an aimbot project and I am not looking for generic web developers.

Please do not apply unless you have relevant experience with PlayStation networking, Demonware, Call of Duty backend research, console reverse engineering, or similar game-service/API analysis.

All testing must be performed only on accounts and hardware that I own or am authorized to use.

When applying, explain your previous experience in this specific area and what approach you would use first.

PLEASE READ BEFORE APPLYING: I do not need a MERN, AI, website, or general software developer. I need someone with actual PS4/PSN/Demonware or console reverse-engineering experience.

Skills: C Programming, Computer Security, Software Architecture, C++ Programming, Debugging, Game Development, Network Security, Network Engineering, Reverse Engineering, API Development

We are a growing professional services company looking for an experienced Security & GRC consultant to help establish and maintain a practical, right-sized security and compliance program.

Our environment is relatively simple: a remote workforce, company-managed endpoints, Google Workspace / Google Admin, and agents primarily working inside client-provided systems rather than applications we host ourselves.

Our immediate need is to prepare for a customer security review and an independent third-party security assessment against an appropriate recognized framework, along with third-party vulnerability/penetration testing.

We are looking for someone who can help us:

- Assess our current security posture and recommend the most appropriate assessment/framework for our size and customer requirements
- Prepare us for independent third-party validation
- Help implement and document endpoint, identity, MFA, encryption, DLP, patching, logging, monitoring, and access-management controls
- Review and advise on Google Workspace, Google Admin, and managed ChromeOS security controls
- Help select and implement an appropriate EDR/AV solution
- Establish lightweight security policies, procedures, and evidence collection
- Set up annual security training and completion tracking
- Coordinate with independent auditors/assessors and VAPT providers
- Help respond to customer security questionnaires and due-diligence requests

After the initial project, we would ideally retain this person as our fractional security/GRC resource for ongoing support, periodic control reviews, documentation updates, customer security reviews, and keeping us audit-ready as we grow.

We are not looking to build an unnecessarily complex enterprise security program. We want someone experienced enough to understand strong security practices while keeping the approach practical and proportional for a small, growing business.

Ideal Experience
- Security/GRC consulting for startups, SMBs, BPOs, or contact centers
- NIST CSF 2.0
- SOC 2
- ISO 27001
- Google Workspace / Google Admin / ChromeOS
- Endpoint security, EDR, DLP, vulnerability management
- Preparing organizations for independent security assessments
- Fractional security lead / vCISO experience is a plus

We need a reliable freelancer to monitor security cameras and quickly identify potential security issues. You will review footage, assess suspicious activity, and communicate concerns to staff and law enforcement when needed. This role requires strong attention to detail, clear communication, and the ability to stay alert during monitoring shifts. Experience with security systems and reporting incidents is important. Please apply if you are comfortable handling real-time security monitoring and responding to potential threats.

Have a client that needs a site built in Netlify to be moved to a remote server service (to be named) so people can securely enter and retrieve data. Need to have SSO (i.e, with Google account.) This is straight forward but I want this to go smoothly so looking for someone with a lot of experience doing the same thing for other clients (i.e., apps built on various platforms and then moved onto remote server.)

Please include samples or examples of your work.

We are seeking an experienced Network Infrastructure Consultant to perform an onsite LAN and Structured Cabling Infrastructure Assessment at our client's office in Leeds, England,

The objective is to assess communications rooms, structured cabling infrastructure, network cabinets, patching standards, network hardware, power infrastructure, and overall physical network environment. The consultant will identify deficiencies, risks, optimisation opportunities, and provide practical remediation recommendations.

Scope of Work

Review communications rooms, network closets and cabinet environments
Assess cable management and structured cabling standards
Review patch panels, patching standards and port utilisation
Assess network switches, routers, firewalls and wireless access points
Review UPS and power distribution infrastructure
Inspect physical security and environmental conditions
Capture photographic evidence of findings
Produce a detailed assessment report with prioritised recommendations

Deliverables

Executive Summary
Findings Register
Risk Assessment
Photographic Evidence
Prioritised Recommendations (Critical, High, Medium, Low)
Estimated remediation effort for identified issues

Required Experience

Structured cabling assessments
Enterprise LAN infrastructure
Network cabinet audits
Communications room assessments
Technical report writing in English
Preferred Qualifications
BICSI RCDD
CNCI
Cisco Certification
Aruba Certification
Fortinet Certification

Location
Barcelona, Spain (Onsite)

Estimated Effort
Site Assessment: 1 day
Reporting: 1 day

I’m looking for a seasoned security tester to run a true penetration test against the parts of my site that store and expose user data—databases, profile endpoints, related APIs, and any file-storage buckets. The goal is to gauge how hard it would be for an attacker to compromise personal information, document every weakness you can reproduce, and give me clear, actionable fixes.

Scope
• Only user-data storage and its access paths are in scope; payment and login flows have already been handled elsewhere.
• Black-box and grey-box techniques are both acceptable as long as they remain non-destructive.

What I expect as deliverables
1. A concise executive summary that a non-technical stakeholder can absorb in minutes.
2. A technical report detailing each finding, its CVSS (or similar) score, proof-of-concept steps, screenshots or packet captures, and recommended remediation.
3. A short debrief call or written Q&A to walk through critical issues.

You’re free to use the standard toolkit—Burp Suite, OWASP ZAP, Kali Linux scripts, custom exploits—so long as you respect the site’s uptime and the data of real users. All testing must remain within legal and ethical boundaries, and every request/attack should be logged on your end for traceability.

Let me know roughly how many days you’ll need and any access or test accounts required so I can set those up in advance.

Skills: Web Security, Compliance, Penetration Testing, Network Security, Risk Assessment, Data Protection, API Testing, Security Auditing

I’m ready for a full-scale, professional penetration test on my production web application and need a certified ethical hacker to execute it. The objective is crystal clear: show me, with evidence, how an attacker could breach the site, especially around two vital areas—authentication/authorization flows and data security.

Scope
• Black-box or gray-box methodology is acceptable so long as you respect live-traffic limits I will provide.
• Focus your effort on login, role-based access controls, session management, encryption practices, and any data at rest or in transit.
• Social-engineering and network layers are outside this engagement; please stay strictly within the web application boundary.

What I expect as deliverables
1. A brief kickoff plan outlining test phases, tools (Burp Suite, OWASP ZAP, Kali, custom scripts, etc.) and timelines.
2. Daily status notes during active testing so I can track progress without slowing you down.
3. A final report that includes:
– Executive summary in plain English for stakeholders
– Step-by-step reproduction of each finding with PoC screenshots, request/response pairs or videos
– CVSS-based severity ratings and business impact commentary
– Actionable remediation guidance, prioritised
4. A short re-test window once fixes are deployed to confirm vulnerabilities have been closed.

Acceptance criteria
• Every claim must be reproducible on my side with your instructions.
• No service outages; any high-risk test will be cleared with me first.
• Report delivered in PDF and editable format within the agreed timeline.

If you hold an active CEH, OSCP, or similar certification and can start within the next week, let’s lock in the schedule.

Skills: Web Security, Compliance, Penetration Testing, Encryption, Network Security, Certified Ethical Hacking, Risk Assessment, Security Auditing

I need help tracing my landlord's IP address and computer, who hacked my wireless My Cam View security camera system and erased crucial footage.

Requirements:
- Access to administrative control panel
- Track IP and identify device

Ideal Skills:
- Cybersecurity expertise
- Experience with wireless camera systems
- Strong problem-solving abilities

Please provide a secure solution and ensure confidentiality.
The individual who hacked my system is a cyber security expert with former DoD clearance and decades of work in the industry.

Skills: Network Administration, Penetration Testing, Network Security, Network Engineering, Digital Forensics, Wireless Site Survey, Wireless Network Security Analysis, Network Monitoring, Incident Response, Security Auditing

i run a wordpress site and need the following

1- Secure WordPress by restricting /wp-admin and /wp-login.php to approved IP addresses or VPN access while keeping the public website accessible.
2-Renew the expired TLS certificates on 203.143.89.81 and confirm whether the FTP service is required.
3-enable TLS encryption on the mail server at 203.143.89.81.
4-Run the security scan again after the changes and confirm all four issues have been resolved.

Skills: PHP, Web Security, WordPress, HTML, Website Management, Web Hosting, Network Administration, Web Development, Network Security, Website Optimization

I need a clean, well-documented OpenVPN deployment on a Windows server. The box will act as the single entry point for up to ten remote users who must enjoy full, seamless access to our internal network once connected.

Here is what I expect from you:
• Install the current OpenVPN Community or Access Server build (whichever you recommend for Windows) and make sure the service starts automatically.
• Generate the CA, server certificate, and 10 client profiles, each bundled as an .ovpn file.
• Configure routing, firewall rules, and DNS push so that a connected client can reach any internal resource exactly as if they were on-site—file shares, RDP sessions, line-of-business apps, everything.
• Harden the server: TLS cipher settings, proper key sizes, and Windows firewall tweaks to allow only the necessary ports.
• Provide a brief, step-by-step document (or screen-recording, if you prefer) so I can add or revoke users later without needing further assistance.

I will supply RDP access to the Windows host and any static network information you need (subnet, gateways, DNS). Once you confirm that a test client can authenticate, obtain an IP, and reach internal devices, the job is done.

Skills: System Admin, Linux, Windows Server, Network Administration, OpenVPN, Documentation, Network Security, VPN

Part-Time | Long-Term Monthly Retainer | NDA Required

We are looking for a reliable DevOps/Linux engineer to manage, secure, monitor and troubleshoot our production infrastructure.

This is a hands-on role for someone who can investigate problems across the full stack, identify the root cause, apply safe fixes and document important changes.

Our Environment:
Ubuntu VPS
Caddy
Cloudflare
PostgreSQL
Redis
Production APIs and backend services
Multiple applications and environments

Docker is not our default production approach, but may be used when technically appropriate and approved.

Main Responsibilities:
Server Administration & Security
Manage and harden Ubuntu production servers
Configure firewalls and secure SSH access
Apply security updates and patches
Monitor CPU, RAM, disk space, network and services
Investigate suspicious activity and unauthorized access
Minimize unnecessary public exposure
Manage credentials, keys and secrets securely
Caddy & Cloudflare
Configure reverse proxy routing
Manage domains, DNS and SSL/TLS
Maintain Cloudflare proxy and security settings
Protect origin servers from unnecessary direct access
Troubleshoot routing, DNS and certificate issues
Deployments & Production Operations
Deploy and maintain applications
Manage Git/GitHub-based releases
Configure environments and services
Handle rollbacks and service recovery
Manage workers, queues and scheduled jobs
Verify deployments and document production changes
Databases & Redis

Strong PostgreSQL experience is required.

You should also be comfortable with:

PostgreSQL backups, restores, permissions and troubleshooting
MySQL/MariaDB administration
Basic MongoDB troubleshooting
Redis administration and connectivity issues
Queue and worker failures
Database performance and connection problems
Application-Level Troubleshooting

You must be able to troubleshoot beyond the server itself.

Problems may involve:

Application configuration
PHP or Node.js runtime
Database connectivity
Redis or queues
File permissions
Caddy
Firewall
DNS or Cloudflare
Server resources
Deployment configuration

We need someone who finds the root cause—not someone who simply restarts services and hopes the issue disappears.

Backups, Monitoring & Recovery
Maintain automated backups
Verify backups and test restores
Monitor server, application, database, Redis, SSL and queues
Create recovery and rollback procedures
Respond to critical production incidents
Documentation Requirement

You must maintain a clear infrastructure runbook covering:

Servers and services
Ports and dependencies
Caddy and Cloudflare configuration
Deployment and rollback procedures
Database and Redis setup
Backup and restore procedures
Security configuration
Common troubleshooting steps
Disaster recovery

A new engineer should be able to understand and recover the environment without relying on one person’s memory.

Security & Confidentiality

An NDA is required before production access.

You must:

Use individual accounts where possible
Follow least-privilege access
Never share credentials or production data unnecessarily
Never commit secrets to Git
Never create undocumented access
Never expose internal services without approval
Report security incidents immediately

All infrastructure, source code, credentials and business information belong to BikeFixUp and must remain confidential.

Requirements
4+ years of practical DevOps/Linux experience preferred
Strong Ubuntu production experience
Strong PostgreSQL experience
Redis experience
Caddy or Nginx experience
Cloudflare experience
Production deployment and troubleshooting experience
Server security and backup/restore knowledge
Ability to explain real production incidents you have resolved
Comfortable with long-term monthly retainer work
Available for critical production issues when needed
About the Engagement

This is a part-time, long-term retainer with a small startup and a limited monthly budget.

We currently have a small team and around four active projects. In return, you will receive:

Real production infrastructure experience
Ownership and responsibility
Exposure to multiple projects and technologies
Direct communication with the founding team
Opportunity to grow with the company
Potential for a long-term professional relationship

We are looking for a trusted technical partner—not someone interested only in a one-time setup.

To Apply

Please include:

Years of DevOps/Linux experience
Experience with Ubuntu, PostgreSQL, Redis, Caddy/Nginx and Cloudflare
A real production incident you diagnosed and resolved
Your backup and disaster-recovery experience
Your availability and typical critical-incident response time
Your monthly expected fee
Confirmation that you are comfortable signing an NDA

Start your proposal with:

“TRUSTED DEVOPS”

We are not simply hiring someone to manage a server. We are looking for someone we can trust with our production infrastructure.

Critical Uptime, Security & Attack Response

The DevOps engineer must be proactively available to maintain maximum possible server uptime (target: 100%) and respond immediately to critical production incidents.

This includes:

Continuous monitoring of server health and critical services
Strong firewall configuration and port protection
SSH hardening and unauthorized-access prevention
Monitoring and responding to suspicious activity, brute-force attempts, DDoS/DoS attacks and other security threats
Protecting servers and databases from unauthorized public exposure.

Cloudflare security configuration and origin-server protection
Prompt investigation of malware, intrusion attempts or abnormal server activity
Immediate response to critical security incidents and service failures

Regular security updates, patching and server hardening
Proactive identification and prevention of vulnerabilities that could cause downtime

The goal is maximum uptime, strong cybersecurity and rapid incident response. The engineer should not wait for a service to go down before taking action proactive monitoring and prevention are expected.

Long-term: $40/month fixed.

Program Manager – Cyber Security & Network Infrastructure

Employment Type: Full-Time
Experience Required: 18+ Years
Working Time Zone: IST
Role: Senior Program Management – Network Infrastructure & Cyber Security

About the Role

We are looking for a highly experienced Program Manager – Cyber Security & Network Infrastructure to lead and manage complex enterprise Network Infrastructure and Cyber Security programs.

The successful candidate will be responsible for managing multiple concurrent projects and technical workstreams, coordinating technical teams and vendors, managing senior stakeholders, and ensuring successful delivery against agreed scope, timelines, budgets and quality requirements.

This is a full-time permanent position and requires strong experience in both Network Infrastructure and Cyber Security program delivery.

Key Experience Required
18+ years of overall IT industry experience, with at least 7–8 years in Project/Program Management roles.
Minimum 5+ years of experience managing Network Infrastructure and/or Cyber Security programs within large enterprise environments.
Proven experience managing multiple concurrent projects and complex technical workstreams.
Experience managing large technology programs, preferably with program values of AUD $2M–$5M+.
Strong experience delivering programs involving:
LAN/WAN
Data Centre Networks
Firewalls & Network Security
SD-WAN
Wireless Infrastructure
Cloud & Hybrid Cloud Connectivity
Cyber Security
Demonstrated experience managing firewall refresh/migration programs.
Experience with network transformation and modernisation initiatives.
Experience managing data centre migration programs.
Experience with EOL/EOS remediation and technology lifecycle programs.
Experience delivering security uplift and infrastructure modernisation initiatives.
Strong experience managing customers, senior stakeholders, architects, engineers, vendors and delivery partners.
Excellent program governance, risk management, financial management, resource management and executive reporting capabilities.
Exceptional English communication skills, with strong verbal, written, presentation and senior stakeholder engagement capabilities.
Key Required Certifications

Candidates must hold at least one recognised Project/Program Management certification:

PMP – Project Management Professional
PRINCE2 Practitioner
MSP – Managing Successful Programmes
Highly Desirable Certifications
ITIL 4 Foundation or higher
SAFe Agilist / Agile Project Management
CISSP – Certified Information Systems Security Professional
CISM – Certified Information Security Manager
Working Hours

The position will operate primarily in the IST time zone. Candidates should be comfortable working an early-start schedule, preferably from approximately 7:00 AM IST or earlier when required, to support customer and project requirements.

My home network needs a thorough security overhaul focused on cybersecurity and data protection. I’m looking to tighten every layer—router configuration, firewall rules, Wi-Fi encryption, secure remote access, and reliable backup strategies—so that every device in the house stays protected without slowing anything down.

Here’s what I expect from your work:
• Assess the current home-grade modem/router and recommend or apply best-practice hardening.
• Set up WPA3 (or strongest available) Wi-Fi security, strong passwords, and guest isolation.
• Implement endpoint protection on laptops, phones, tablets, and any IoT gear.
• Configure automatic, encrypted backups to local NAS or trusted cloud storage.
• Provide a concise hand-off document so I can maintain these settings confidently.

You’re free to choose the security tools you trust—as long as they’re mainstream and well-supported—and you can walk me through any license purchases if needed. Clear communication, minimal downtime, and evidence of previous home-network hardening projects will put your proposal on top.

Skills: Web Security, Computer Security, Network Administration, Internet Security, Encryption, Network Security, Firewall, Data Protection

We are seeking an experienced Level 2 Helpdesk Technician to serve as an escalation point for our Tier 1 team and to independently resolve complex technical issues across a diverse, multi-client environment. The ideal candidate has prior MSP experience, thrives on variety, communicates clearly with non-technical users, and documents everything.

Key Responsibilities
Serve as the escalation point for Tier 1 technicians, resolving issues beyond first-level scope
Diagnose and resolve advanced desktop, server, network, and application issues across multiple client environments
Administer and troubleshoot Microsoft 365 tenants (Exchange Online, SharePoint, Teams, Entra ID/Azure AD, Intune)
Support Windows Server environments: Active Directory, Group Policy, DNS, DHCP, file/print services
Troubleshoot network infrastructure: firewalls, switches, wireless access points, VPNs, and VLANs
Manage endpoints and patching through RMM tooling; respond to monitoring alerts
Support business VoIP systems and assist with moves, adds, and changes
Assist with backup verification, disaster recovery testing, and data recovery efforts
Perform on-site visits for issues that cannot be resolved remotely, including hardware replacement and structured cabling support
Document all work thoroughly in the ticketing/PSA system and contribute to client knowledge base articles
Mentor Tier 1 technicians and identify recurring issues for root-cause resolution
Participate in an on-call rotation for after-hours emergency support
Required Qualifications
3+ years of IT support experience, with at least 1 year at a Tier 2 level (MSP experience strongly preferred)
Strong working knowledge of Windows 10/11, Windows Server 2016–2022, and Microsoft 365 administration
Solid understanding of networking fundamentals: TCP/IP, DNS, DHCP, VLANs, VPN, firewall rules
Experience with Active Directory and Group Policy administration
Familiarity with RMM and PSA/ticketing platforms
Excellent troubleshooting methodology and the ability to work independently
Clear, professional written and verbal communication with both technical and non-technical audiences
Valid driver's license and reliable transportation for client site visits
Ability to lift up to 50 lbs (equipment installs, cabling work)
Preferred Qualifications
Industry certifications: CompTIA A+/Network+/Security+, Microsoft (MS-102, AZ-104, or similar), or Cisco CCNA
Experience with pfSense or other business-class firewalls
Exposure to VoIP administration (SIP, PBX platforms)
Experience with backup/BDR platforms and data recovery
Basic scripting ability (PowerShell)
Prior military service (we are proudly veteran-owned)