SQL Server DBA -- Upgrade, Consolidation, and Hardening (US Citizen Required)

ABOUT US We are a CMMC 2.0 Level 2 and ISO 27001:2022 certified federal systems integration company supporting Department of Defense and federal customers in classified and CMMC-regulated environments. OVERVIEW Looking for an experienced SQL Server DBA to upgrade Windows Server and SQL Server, consolidate two production databases onto a single instance, harden the OS and SQL for CMMC compliance, and document all work for audit purposes. We are looking for a consultant who enjoys documenting their work. High-quality documentation is just as important as technical execution. SCOPE OF WORK OS Upgrade Upgrade host OS from Windows Server 2019 to Windows Server 2025. SQL Server Upgrade Upgrade SQL Server 2019 Standard Edition (4-core, per-core licensing) to SQL Server 2025 Standard Edition. Server currently hosts our ERP database (Solutions360 Q360 v24). Database Consolidation Migrate the Genetec Security Center database from its current dedicated SQL server onto the existing Q360 ERP SQL Server instance. This includes creating the Genetec database on the shared instance, reconfiguring the Genetec Security Center server connection string to point to the new location, and configuring appropriate resource allocation between workloads (memory allocation, TempDB configuration, and workload management as appropriate). This is not a high-transaction SQL environment. The ERP and physical security databases support approximately 30 internal users. Downtime is acceptable as all production work will be performed after hours or on weekends. Please describe your proposed migration approach and expected outage window in your proposal. Server and SQL Server Hardening Harden both the Windows Server 2025 operating system and the SQL Server instance consistent with CMMC 2.0 Level 2 and ISO 27001:2022 requirements. We expect the consultant to recommend appropriate hardening frameworks (such as DISA STIG and/or CIS Benchmarks), implement applicable controls, and document any justified deviations. Screenshots of all configuration changes are required as evidence artifacts for ISO 27001 and CMMC audit purposes. Backup and Rollback Prior to any production changes, verify a tested backup exists and provide a documented rollback plan for each phase of the work. DELIVERABLES Migration and upgrade plan Upgrade and configuration documentation Hardening checklist, configuration baseline, and documented exceptions Screenshot evidence artifacts for ISO and CMMC compliance Successful validation of ERP (Solutions360) and Genetec database functionality following migration Rollback documentation Knowledge transfer session with our MSP ENVIRONMENT AND ACCESS Remote or on-site at our Sterling, VA office (Loudoun County) Remote access provided via ConnectWise tunnel through our managed service provider (MSP) MSP provides just-in-time administrative access to the SQL server ERP vendor (Solutions360) available to provide technical guidance on their application's database requirements Both the MSP and ERP vendor contacts will be introduced at kickoff We expect the consultant to work directly with our MSP during implementation. The MSP will retain administrative control of the environment. This engagement assumes an in-place upgrade of the existing virtual machine unless the consultant recommends a substantially lower-risk alternative All production work must occur after hours or on weekends SQL Server 2019 Standard Edition, 4-core per-core licensing already owned Windows Server 2025 licensing already owned Backups are performed using Veeam Backup and Replication Environment details including SQL patch level and current Windows Server build will be provided during kickoff Current environment: single Windows Server 2019 VM, 4 vCPUs, approximately 3 TB total disk, supporting a 30-person organization with relatively small databases REQUIREMENTS US citizenship required (no exceptions; federal compliance environment) Extensive SQL Server upgrade and migration experience Experience hardening SQL Server for CMMC or ISO 27001 compliance environments Familiarity with running multiple application databases on a shared SQL instance Comfortable working through remote access tools with MSP-managed infrastructure Must be able to provide documentation of changes for compliance audit trail NICE TO HAVE Experience migrating or supporting Genetec Security Center SQL databases Experience with Solutions360 Q360 ERP CMMC or FedRAMP environment experience SQL Server clustering or Always On experience Relevant certifications (Microsoft Data Platform, CISSP, etc.) BUDGET AND TIMELINE Hourly engagement; submit your estimated hours and hourly rate based on the scope above Flexible on scheduling; work can be performed after hours or on weekends (Eastern time) Potential for ongoing relationship including annual compliance reviews, future upgrades, and ad hoc DBA support TO APPLY Please provide: One example of a similar SQL Server migration you have completed One example of SQL Server hardening work in a compliance environment Relevant certifications Your estimated hours and hourly rate for the defined scope Earliest available start date