WireGuard VPN / Linux Network Engineer Needed for Secure Cloud VPN Server Setup

I am looking for an experienced Linux network/DevOps engineer with strong WireGuard experience to configure and secure the first VPN server for a new commercial VPN service. This initial project is a single-server proof of concept. The infrastructure will eventually expand to multiple geographic locations, so the configuration should be clean, secure, documented, and designed with future automation/scaling in mind. Initial scope of work: • Deploy and configure WireGuard on an Ubuntu/Linux cloud or dedicated server • Configure IPv4/IPv6 networking where appropriate • Configure IP forwarding and NAT • Implement secure firewall rules • Harden SSH and general server security • Configure DNS and help prevent DNS leaks • Configure secure WireGuard key management • Ensure WireGuard automatically starts/recover after server reboot • Create test client configurations for iOS, Android, Windows or macOS • Verify that client internet traffic is properly routed through the VPN • Test for IP/DNS leaks and basic connectivity/performance • Implement basic server/VPN monitoring recommendations • Provide complete documentation of the configuration and changes made Important: I am not looking for someone to simply run a WireGuard installation script. I want someone who understands Linux networking, routing, firewalls, VPN security and production infrastructure. The server will likely be hosted with OVHcloud, although I am open to recommendations based on technical requirements. This is Phase 1 of a larger project. Successful completion could lead to additional work involving: • Multiple VPN locations • Automated server deployment • Automated WireGuard peer/customer provisioning • API/control-plane integration • Server health monitoring • Load balancing/capacity management • Infrastructure-as-code using Terraform/Ansible • Security hardening and ongoing infrastructure support When applying, please answer the following: 1. How many WireGuard servers have you deployed on Linux? 2. Have you deployed WireGuard on OVHcloud, Vultr, DigitalOcean, AWS or similar providers? 3. Have you worked on a consumer/commercial VPN service, rather than only site-to-site corporate VPNs? 4. How would you secure a public-facing WireGuard server? 5. How would you design this first server so that additional VPN locations can be added and automated later? 6. What monitoring would you recommend? 7. What is your fixed price for configuring, securing, testing and documenting the first server? 8. How quickly can you complete it? Please include examples of relevant WireGuard/Linux VPN projects if available. Budget: $150–$300 fixed price for Phase 1. I am willing to consider a higher proposal from someone with significant commercial VPN infrastructure experience if you clearly explain what additional value or work is included.