On-Premise DevOps Specialists for High-Availability Chatwoot, RustDesk and OpenVPMS Deployment

We are looking for experienced DevOps engineers, system administrators or specialist implementation teams to install, configure, secure, extend and operate three applications within our on-premise environment: 1. Chatwoot 2. RustDesk 3. OpenVPMS These must not be basic single-server installations. Each platform must be designed as a secure, production-ready and highly available service with appropriate redundancy, monitoring, backup, recovery and operational support. We expect to hire up to three specialists, with one specialist assigned to each platform. However, we are also open to engaging experienced agencies or teams that can demonstrate strong implementation and operational experience across all three platforms. Applicants may apply for one, two or all three workstreams. Your proposal must clearly identify the platforms you are qualified to deliver and support. # Workstream 1: Chatwoot The selected specialist will be responsible for designing and implementing a production-ready, on-premise Chatwoot environment. Responsibilities include: * Review our on-premise infrastructure and recommend the target architecture * Install and configure Chatwoot * Design the service for high availability and horizontal scaling * Configure the application, background workers, database, cache and related dependencies * Configure PostgreSQL and Redis for production use * Configure reverse proxies, load balancing, DNS and TLS certificates * Configure email delivery and inbound email processing * Configure object or file storage * Configure supported customer communication channels * Configure user roles, access controls and administrative permissions * Integrate authentication or SSO where required * Configure integrations, APIs and webhooks * Support application extensions and custom integrations * Configure centralised logging, metrics, alerting and health checks * Implement automated backups and tested restoration procedures * Develop application upgrade, rollback and patching procedures * Conduct security hardening and production-readiness testing * Document the complete environment and provide knowledge transfer * Provide ongoing maintenance, monitoring and operational support # Workstream 2: RustDesk The selected specialist will be responsible for designing and implementing a secure, highly available, self-hosted RustDesk environment. Responsibilities include: * Assess whether RustDesk Server OSS or RustDesk Server Pro best meets our requirements * Install and configure the selected RustDesk server components * Configure the RustDesk ID and relay services * Design the ID and relay infrastructure for high availability * Configure redundant relay capacity where appropriate * Configure DNS, firewall rules, reverse proxying and TLS * Configure the administrative console and API where applicable * Configure authentication, SSO, LDAP or OIDC where supported and required * Configure role-based access and device-management policies * Configure client settings and deployment packages * Develop a controlled client rollout approach * Support Windows, macOS and Linux client deployment * Configure audit logging, monitoring and alerting * Implement server backup and restoration procedures * Document key management and secure configuration procedures * Develop upgrade, rollback and disaster-recovery procedures * Perform security hardening and production-readiness testing * Provide ongoing maintenance, monitoring and operational support # Workstream 3: OpenVPMS The selected specialist will be responsible for installing, configuring, extending and supporting an on-premise OpenVPMS environment. Responsibilities include: * Review our business and technical requirements * Confirm the appropriate supported OpenVPMS version and technical dependencies * Design a secure and highly available on-premise architecture * Install and configure the application and its dependencies * Configure the web application, application server and database * Configure reporting, document generation and templates * Configure user roles, permissions and administrative controls * Configure organisations, locations, services and operational workflows * Configure backup, restoration and disaster-recovery procedures * Support data import or migration where required * Develop required integrations with internal and third-party services * Extend or customise the application where standard functionality does not meet our requirements * Develop and document APIs, integration services or middleware where required * Configure monitoring, logging, alerting and service health checks * Develop upgrade, patching and rollback procedures * Perform performance, security and production-readiness testing * Document the complete environment and provide knowledge transfer * Provide ongoing maintenance, monitoring and operational support # Shared Infrastructure and High-Availability Requirements All three platforms must be implemented as production services rather than standalone development installations. The selected specialists will be expected to address: * High-availability architecture * Elimination or documented mitigation of single points of failure * Load balancing and service failover * Database replication and recovery * Application and infrastructure monitoring * Centralised logging * Automated service health checks * Alerting and incident notification * Capacity planning and performance monitoring * Secure storage and rotation of secrets * TLS certificate management * Network segmentation and firewall configuration * Role-based access control * Operating system and dependency hardening * Vulnerability and patch management * Automated backups * Off-host or secondary-location backup storage * Regular restoration testing * Disaster-recovery procedures * Defined recovery time and recovery point objectives * Upgrade and rollback automation * Infrastructure-as-code or reproducible deployment scripts * CI/CD processes for configuration and application changes * Production, test and staging environment recommendations * Operational runbooks and escalation procedures # Ongoing Maintenance and Operations This engagement includes both implementation and ongoing operations. The selected specialist or team will be responsible for: * Monitoring service health and availability * Responding to infrastructure and application alerts * Troubleshooting production incidents * Applying application and security updates * Managing application upgrades * Reviewing logs and performance trends * Managing backups and conducting restoration tests * Performing capacity and availability reviews * Supporting configuration changes and integrations * Maintaining technical and operational documentation * Providing monthly service reports * Participating in scheduled maintenance windows * Providing an agreed incident response and escalation service # Required Deliverables Each workstream must produce the following deliverables: 1. Current-state infrastructure and requirements assessment 2. Recommended production architecture 3. Infrastructure sizing and prerequisite document 4. Network, firewall, port, DNS and certificate requirements 5. High-availability and failover design 6. Security architecture and hardening plan 7. Installed and configured test environment 8. Installed and configured production environment 9. Monitoring, logging and alerting configuration 10. Automated backup configuration 11. Successfully tested restoration procedure 12. Disaster-recovery procedure 13. Upgrade and rollback procedure 14. Administrator and operational documentation 15. Architecture and configuration diagrams 16. Infrastructure or deployment automation scripts 17. Security and production-readiness report 18. Knowledge-transfer sessions 19. Post-implementation support 20. Ongoing maintenance and operations plan # Required Experience Applicants must demonstrate relevant experience in several of the following areas: * Production on-premise application deployment * Chatwoot self-hosted deployment and administration * RustDesk Server OSS or Server Pro deployment * OpenVPMS implementation or development * Linux system administration * Docker and Docker Compose * Kubernetes or another container orchestration platform * Nginx, HAProxy or equivalent reverse proxies and load balancers * PostgreSQL administration * Redis administration * MySQL or MariaDB administration * Java application deployment * Apache Tomcat or equivalent Java application servers * High-availability architecture * Database replication and failover * Network and firewall configuration * TLS and certificate management * Identity and access management * SSO, LDAP, OIDC or SAML integration * Monitoring and alerting platforms * Centralised logging * Backup and disaster recovery * Infrastructure as code * CI/CD * Security hardening * Incident management and production operations