Freelance AWS Solutions Engineer (Delhi-NCR — Ghaziabad preferred)

Brainybuzz Solution; Ghaziabad District; Hybrid; INR 1,200,000 - 1,800,000; Full time

Benefits offered by this job

Competitive compensation

Flexible work arrangements

Project-based engagement

Job summary

A tech-focused company is seeking an experienced AWS Solutions Engineer to develop a secure, production-ready AWS environment for a SaaS application. The ideal candidate will have 4-7 years of AWS experience, strong Linux skills, and expertise in security hardening and CI/CD integration. This position is primarily remote but requires occasional on-site meetings in Ghaziabad. Competitive compensation based on experience is offered.

Qualifications

• 4–7+ years of experience on AWS technologies.
• Strong Linux administration skills.
• Knowledge of security hardening practices.
• Experience with CI/CD tools like GitHub Actions.
• Familiarity with database operations and performance tuning.

Responsibilities

• Design and provision a secure VPC tailored for SaaS applications.
• Create and manage security protocols for AWS environments.
• Set up CI/CD pipelines for efficient development and deployment.
• Ensure compliance with AWS security standards during setup.
• Deliver all documentation, architecture diagrams, and knowledge transfer to the team.

Skills

AWS (EC2, VPC, ALB/CloudFront, RDS, IAM, WAF, CloudWatch, CloudTrail, GuardDuty)

Linux administration (Ubuntu/Amazon Linux)

Security hardening (CIS, OWASP ASVS)

Infrastructure as Code (IaC) with Terraform or CloudFormation

Database operations (MySQL/PostgreSQL)

CI/CD

Terraform

CloudFormation

CodeDeploy

Security hardening

CloudWatch

Tools

Terraform

CloudFormation

GitHub Actions

CodeDeploy

Docker

ECS

Job description

Overview

Freelance AWS Solutions Engineer (Delhi-NCR — Ghaziabad preferred). We’re looking for an experienced AWS Solutions Engineer to stand up a production-grade EC2 environment for a SaaS application, configure all required services, and implement rigorous security hardening with complete documentation and handover.

Responsibilities

• Design and provision a secure VPC (public/private subnets, NAT Gateway, route tables, NACLs).
• Create security groups with least-privilege ingress/egress; enable VPC Flow Logs.
• Set up ALB/ELB and (optionally) CloudFront for TLS offload, WAF integration, and caching.
• Launch hardened EC2 (Ubuntu 22.04 LTS or Amazon Linux 2023) with EBS encryption.
• Configure Nginx/Apache + PHP-FPM (or app runtime) for a typical SaaS stack; tune for performance.
• Optional containerization: Docker runtime & compose (or ECS) if recommended.
• Advise and provision either Amazon RDS (MySQL/PostgreSQL) or secure self-managed DB on private subnets.
• Set up automated backups (RDS snapshots / EBS snapshots) with retention and tested restores.
• IAM design (roles, policies, MFA, SCPs if Organizations), SSM Session Manager, key-based access only.
• OS hardening (CIS-aligned): unattended upgrades/patching, fail2ban, firewall rules, auditd/AIDE, log rotation.
• AWS WAF managed rules, Shield (Standard), GuardDuty, CloudTrail to S3 with integrity controls.
• Secrets management with AWS Secrets Manager/Parameter Store.
• TLS/SSL: ACM (via ALB/CloudFront) or Let’s Encrypt (if direct to EC2). HSTS and modern ciphers.
• CloudWatch metrics/logs/alarms, CloudWatch Agent, structured app logs.
• Uptime checks, error-rate and latency alarms; basic SLOs with alerting (email/SNS).
• CI/CD integration (GitHub Actions/CodeDeploy) for zero/minimal-downtime deploys.
• Backup & DR runbooks (RPO/RTO), AMI/snapshot strategy, restore drills.
• Coordinate DNS (e.g., Cloudflare or Route 53).
• SMTP/transactional email integration (SES or existing provider), SPF/DKIM/DMARC where applicable.
• Architecture diagram, IaC (Terraform/CloudFormation) or bash/Ansible scripts.
• Security hardening checklist, access matrix, Runbooks (deploy, rollback, backup/restore).
• Knowledge transfer session for our team.

Deliverables

• Production-ready AWS environment for our SaaS on EC2 with WAF, monitoring, backups.
• Security-hardened OS & network; IAM with least privilege.
• CI/CD pipeline for repeatable deployments.
• Docs & diagrams + handover; all infra credentials stored in Secrets Manager/Parameter Store.
• One round of post-go-live support (timing to be agreed).

Must-Have Experience

• 4–7+ years on AWS (EC2, VPC, ALB/CloudFront, RDS, IAM, WAF, CloudWatch, CloudTrail, GuardDuty).
• Strong Linux admin (Ubuntu/Amazon Linux), Nginx/Apache, PHP-FPM or modern runtimes.
• Security hardening (CIS, OWASP ASVS practices) and production incident hygiene.
• IaC (Terraform or CloudFormation) and CI/CD (GitHub Actions/CodeDeploy).
• Database ops (MySQL/PostgreSQL), performance tuning, and backup/restore strategies.

Nice to Have

• Experience with Moodle/Laravel/PHP optimizations (Opcache, Redis, PHP-FPM tuning).
• Docker/ECS, ECR; blue-green or rolling deploys.
• Familiarity with India’s DPDP Act basics for data protection.

Engagement Details

• Start: Immediate
• Mode: Hybrid—primarily remote; on-site meetings in Ghaziabad as required.
• Duration: Project-based (finalized after scoping).
• Compensation: Competitive; based on experience and scope.

How to Apply

Email [e-mail] with:

• Subject: AWS Solutions Freelancer – Delhi NCR (Your Name)
• Your CV/LinkedIn + GitHub (or portfolio).
• A short note on a similar SaaS on AWS you’ve delivered (stack, architecture diagram if possible).
• Your approach to hardening Ubuntu 22.04 on EC2 (bullet points).
• Availability and estimated effort & quote.
• City & ability to attend on-site in Ghaziabad when needed.
• Two references (preferred).

Note: Shortlisting task (optional) asks for a high-level architecture outline for a small multi-AZ SaaS on EC2 + RDS with WAF and CloudFront, including TLS enforcement, logging, and backups.