Senior WordPress Engineer - Enterprise Intranet and Microsoft Integrations

Lifted, an Upwork Company™; Kuwait City; On-site; KWD 9,000 - 15,000; Full time

Job summary

Lifted, an Upwork Company™, seeks a Senior WordPress Engineer for an enterprise intranet project. You will build secure, scalable WordPress intranet with custom Gutenberg blocks and seamless Microsoft integrations.

You will implement SSO with Microsoft Entra ID, develop multilingual RTL support, and create a robust notification and search system. Join a hands-on team delivering a high‑security, high‑availability solution.

Qualifications

• Extensive PHP development experience in enterprise WordPress plugins/themes.
• Deep knowledge of WordPress core APIs, custom post types, REST APIs, and WP-CLI.
• Strong React experience building Gutenberg blocks and patterns.
• Experience with OAuth 2.0 / OpenID Connect SSO, preferably with Microsoft Entra ID.
• Familiarity with Microsoft Graph, SharePoint, and Power BI integrations.
• Security-minded development and OWASP-aligned protections.

Responsibilities

• Implement OpenID Connect SSO with Microsoft Entra ID, including MFA and provisioning.
• Build a library of custom React-based Gutenberg blocks for homepages and portals.
• Develop responsive components: news cards, event grids, and portals with RTL support.
• Ensure multilingual content and RTL Arabic layouts across frontend components.
• Create a notifications plugin with DB, REST endpoints, and email alerts.
• Develop an intranet search using ElasticPress/Elasticsearch/SearchWP.
• Implement protected downloads with authorization checks and logging.
• Sync employee data to a read-only table and cache profiles with Azure storage.
• Integrate read-only feeds for new joiners and internal vacancies; ensure fallback flows.
• Deliver technical handover: documentation, runbooks, and endpoint mappings.

Skills

WordPress

OpenID Connect

SSO

React

Gutenberg blocks

PHP

Microsoft Graph

SharePoint

Azure

Elasticsearch

Tools

Azure Key Vault

Power BI

ElasticPress

WP-CLI

Redis

Job description

Senior WordPress Engineer - Enterprise Intranet and Microsoft Integrations

• Contract

An enterprise client is seeking a Senior WordPress Engineer to build a secure, scalable employee intranet with custom Gutenberg components, enterprise search, multilingual and RTL support, and integrations across Microsoft Entra ID, Microsoft Graph, SharePoint, Power BI, HR systems, and a corporate Service Desk.

This is a hands‑on engineering engagement focused on custom development, systems integration, performance, security, testing, and technical handover. The selected freelancer will work from approved designs and defined enterprise requirements rather than assembling the solution from off‑the‑shelf themes or plugins.

For this project, the selected candidate will:

• Implement OpenID Connect single sign‑on with Microsoft Entra ID as the first major deliverable, including MFA support, automatic user provisioning, and security‑group‑to‑WordPress‑role mapping
• Build a reusable library of custom React‑based Gutenberg blocks for the homepage and department portals
• Develop responsive, design‑accurate components including news cards, event grids, quick‑action tiles, document accordions, portal carousels, and regional filters
• Ensure all frontend components support multilingual content and RTL Arabic layouts
• Develop a custom notifications plugin with a dedicated database table, REST endpoints, unread indicators, and corporate SMTP email notifications -Build a configurable spin‑the‑wheel module with server‑side draw logic, prize settings, per‑user cooldowns, audit logs, and HR fulfilment notifications
• Create event registration forms that pre‑fill employee information from the authenticated user’s synchronised profile
• Develop a cloud‑embedded video gallery without storing video files in WordPress
• Implement fast, relevant search across intranet content using ElasticPress, Elasticsearch, or SearchWP
• Add AJAX filtering and server‑side pagination to content listings such as News, Events, Directory, Gallery, Success Stories, and Policies
• Implement protected downloads with authorisation checks and download logging
• Build a scheduled employee‑directory synchronisation process using Microsoft Graph users, photos, and delta queries
• Store synchronised employee data in a custom read‑only table and cache profile images through Azure Blob Storage or a CDN
• Develop a read‑only SharePoint connector for policy and procedure metadata while keeping SharePoint as the system of record
• Integrate read‑only feeds for new joiners, birthdays, and internal vacancies, including graceful manual‑publishing fallbacks
• Connect administrative and IT request forms to the corporate Service Desk through create‑only API calls
• Optionally develop a read‑only "My Open Tickets" widget
• Embed Power BI dashboards with role‑based access controls
• Store secrets securely using Azure Key Vault or an equivalent credential‑management platform -Apply least‑privilege API scopes, retry and backoff logic, structured failure logging, and operational alerting
• Build custom database tables where WordPress post meta would not scale
• Implement Redis object caching, query optimisation, and other performance improvements
• Develop all custom plugins, blocks, endpoints, and integrations according to WordPress coding standards
• Apply sanitisation, escaping, nonces, capability checks, secure file handling, and other OWASP‑aligned protections
• Support QA and UAT, resolve defects, simulate integration failures, and verify fallback behaviour
• Maintain a disciplined Git, code review, staging, and production deployment workflow
• Deliver code documentation, an integration runbook, endpoint and field‑mapping documentation, an administrator guide, and a complete technical handover

Ideal candidates will have:

• Extensive professional PHP development experience, including several years building custom WordPress plugins and themes for enterprise environments
• Expert knowledge of WordPress core APIs, including custom post types, taxonomies, hooks, cron, transients, roles, capabilities, REST APIs, and WP-CLI
• Strong experience developing custom Gutenberg blocks using React, dynamic rendering, block patterns, and theme.json
• Demonstrated experience implementing OAuth 2.0 or OpenID Connect SSO, preferably with Microsoft Entra ID
• Hands‑on experience with Microsoft Graph, employee‑directory data, SharePoint files, delta queries, pagination, and scheduled synchronisation jobs
• Experience designing and consuming secure REST APIs with robust authentication and failure handling
• Advanced knowledge of custom database tables, MySQL optimisation, and high‑volume WordPress data
• Experience with Azure Key Vault or comparable secrets‑management tools
• Practical knowledge of WordPress security, including XSS, CSRF, injection, authorisation, and file-handling risks
• Experience with ElasticPress, Elasticsearch, SearchWP, Redis, Composer, and preferably Bedrock -Strong documentation, communication, troubleshooting, and code review discipline
• Previous experience delivering intranets, employee portals, Power BI integrations, or enterprise platforms in GCC environments is highly desirable

By clicking the link above or any third‑party link within this posting, you are leaving this site and going to a third‑party website where the third‑party website's terms and privacy policy apply