DevOps Contractor

𝐃𝐞𝐯𝐬𝐋𝐚𝐧𝐞 is engaging an experienced Contractor to modernize a production API gateway and identity/authentication platform running on AWS. This is a fixed-scope, fixed-price contract engagement — a hands-on, intensive delivery role for someone who has led production cloud migrations of this nature before and is comfortable operating within a controlled, reversible change process.
𝐂𝐨𝐦𝐩𝐚𝐧𝐲 𝐏𝐫𝐨𝐟𝐢𝐥𝐞
DevsLane is a leading Software Consultancy Firm based in India. We offer a wide range of services, from proof-of-concepts to end-to-end product development, partnering with clients worldwide to bring their ideas to life.

𝐄𝐧𝐠𝐚𝐠𝐞𝐦𝐞𝐧𝐭 𝐃𝐞𝐭𝐚𝐢𝐥𝐬
𝐸𝑛𝑔𝑎𝑔𝑒𝑚𝑒𝑛𝑡 𝑇𝑦𝑝𝑒 = Contractor — fixed-scope, fixed-price contract (project-based, single delivery)
𝐶𝑜𝑚𝑚𝑖𝑡𝑚𝑒𝑛𝑡 = Full-time; focused, intensive delivery window
𝐿𝑜𝑐𝑎𝑡𝑖𝑜𝑛 = Remote
𝐷𝑖𝑠𝑐𝑖𝑝𝑙𝑖𝑛𝑒 = Cloud Infrastructure / DevOps / Identity & Access Management
𝐸𝑛𝑣𝑖𝑟𝑜𝑛𝑚𝑒𝑛𝑡 = Production, AWS-hosted, change-controlled
𝐻𝑖𝑟𝑖𝑛𝑔 𝐸𝑛𝑡𝑖𝑡𝑦 = DevsLane (engaged for a confidential client program)
𝐶𝑜𝑚𝑝𝑒𝑛𝑠𝑎𝑡𝑖𝑜𝑛 = Fixed price — budget to be finalized following client discussion
𝑃𝑟𝑖𝑜𝑟𝑖𝑡𝑦= Urgent — immediate availability preferred

𝐄𝐧𝐠𝐚𝐠𝐞𝐦𝐞𝐧𝐭 𝐎𝐯𝐞𝐫𝐯𝐢𝐞𝐰
The work spans three parallel tracks: migrating a self-hosted API gateway to a managed AWS service, upgrading a legacy identity/authentication platform to a current major version, and modernizing the backing database to a highly available configuration. The two non-negotiable requirements are a zero-downtime cutover and no loss of user or credential data.
𝐒𝐜𝐨𝐩𝐞 𝐨𝐟 𝐖𝐨𝐫𝐤
𝑇𝑟𝑎𝑐𝑘 1 — 𝐴𝑃𝐼 𝐺𝑎𝑡𝑒𝑤𝑎𝑦 𝑀𝑖𝑔𝑟𝑎𝑡𝑖𝑜𝑛
• Replace a self-hosted, open-source API gateway with a managed AWS API Gateway.
• Re-implement routing, rate limiting, access control, CORS, and API-key handling using AWS-native equivalents.
• Build OIDC authentication via serverless (Lambda) authorizers, including token caching and latency optimization.
• Deliver the target platform as Infrastructure-as-Code and decommission the legacy gateway.
𝑇𝑟𝑎𝑐𝑘 2 — 𝐼𝑑𝑒𝑛𝑡𝑖𝑡𝑦 𝑃𝑙𝑎𝑡𝑓𝑜𝑟𝑚 𝑈𝑝𝑔𝑟𝑎𝑑𝑒
• Upgrade a legacy self-hosted identity platform (Keycloak) to a current major version — a significant version jump involving a full configuration rebuild.
• Migrate and validate all identity data — users, credentials, groups, roles, and authentication flows — with zero data loss.
• Recompile and validate any custom server extensions against the new runtime.
• Stand up a highly available, multi-node cluster across multiple availability zones.
𝑇𝑟𝑎𝑐𝑘 3 — 𝐷𝑎𝑡𝑎𝑏𝑎𝑠𝑒 𝑀𝑜𝑑𝑒𝑟𝑛𝑖𝑧𝑎𝑡𝑖𝑜𝑛
• Perform a major-version PostgreSQL upgrade on managed AWS RDS.
• Move the database to a Multi-AZ, high-availability configuration.
• Use a reversible deployment strategy for the schema migration, with data-integrity verification at each step.

𝐃𝐞𝐥𝐢𝐯𝐞𝐫𝐲 𝐀𝐩𝐩𝐫𝐨𝐚𝐜𝐡
• Build the new stack in parallel alongside the running production system.
• Shift traffic gradually; validate on a small live slice before full cutover.
• Maintain tested rollback paths at every stage of the migration.
• Preserve continuity of authentication and user data throughout.
• Operate within a change-controlled environment with explicit go / no-go gates.

𝐒𝐤𝐢𝐥𝐥𝐬 & 𝐄𝐱𝐩𝐞𝐫𝐢𝐞𝐧𝐜𝐞
𝑀𝑢𝑠𝑡 𝐻𝑎𝑣𝑒
• Strong hands-on AWS: API Gateway, Lambda, VPC networking, and RDS.
• Infrastructure-as-Code experience (Terraform preferred).
• Deep Keycloak experience: OIDC / OAuth2 / SAML, realm and user migration, custom SPI providers.
• PostgreSQL on RDS: major-version upgrades, Multi-AZ, and schema migrations.
• A track record of delivering zero-downtime production cutovers.
𝑁𝑖𝑐𝑒 𝑡𝑜 𝐻𝑎𝑣𝑒
• Prior experience upgrading Keycloak across multiple major releases.
• Performance and load testing experience (authentication throughput, latency comparison).
• Familiarity with security validation and working under formal compliance and audit requirements.

𝐊𝐞𝐲 𝐃𝐞𝐥𝐢𝐯𝐞𝐫𝐚𝐛𝐥𝐞𝐬
• Current-state assessment and target architecture design.
• Infrastructure-as-Code for the new gateway and identity platform.
• The migrated, validated, highly available identity platform on the current version.
• Migration and rollback runbooks.
• Validation and performance test results.
• Knowledge handover to the operations team.

𝐖𝐨𝐫𝐤𝐢𝐧𝐠 𝐂𝐨𝐧𝐭𝐞𝐱𝐭
• This is a production, regulated environment; all changes are controlled, tested, and reversible.
• The delivery window is focused and intensive — full-time availability is expected for the duration.
• Deep familiarity with production incident response and careful, staged rollout is valued over speed alone.

𝐂𝐨𝐦𝐩𝐞𝐧𝐬𝐚𝐭𝐢𝐨𝐧
This is a fixed-price contract engagement. The final budget will be determined based on scope alignment and confirmed after discussion with the candidate.

𝐇𝐨𝐰 𝐭𝐨 𝐀𝐩𝐩𝐥𝐲
Fill out the form here: https://forms.gle/kTWo6hqVn5XzMbFC6
Shortlisted candidates will be contacted for further details.
Contact Us
Email: [email protected]
Website: https://devslane.com