I am looking to establish a private VPN connection into a US based server I control at a place like Digital Ocean. THe purpose is to be able to get US TV apps like YouTubeTV and HBOMax from an offshore location that are not available outside the US and are blocked from commercial VPN's like Nord. Once we do this we also have to figure out how to the TV connection in the offshore location. Would we be able to set up a router in the offshore location that the smart TV or other devises could connect into and appear tha they are in the US. I use Roku now.

We have a few aruba APs to be onboard to clearpass and may need some policy configuration etc... need a Aruba / clearpass expert and knows how to do wireless with eap tls and maybe mdm integration with intune jamf etc..

We're looking for a dependable freelance IT specialist to provide occasional on-site technical support. The primary focus will be maintaining and troubleshooting a personal server, along with setup, maintenance, and support for printers, Blink cameras, scanners, camcorders, and vintage VHS equipment. This is a flexible, part-time, project-based role for someone who can work independently and provide reliable technical support as needed.

Looking for a juniper MIST wireless expert who has considerable experience with WIFI environments and design.

Core Expertise Strong experience in DNS technologies, including both: Internal DNS architecture External/public DNS management Proven track record in design and implementation, not just administration Networking Foundation Solid background in network engineering principles?(routing, switching, enterprise network operations) Additional Technologies (Strongly Preferred) Infoblox?(enterprise DNS/IPAM) Cloudflare?(edge DNS, security, CDN) Experience with one or more of the following: Zscaler F5?(load balancing, application delivery) Monitoring/observability tools such as: SolarWinds Dynatrace Tripwire Soft Skills & Expectations Highly accountable and execution-driven Ability to manage multiple priorities?without becoming a bottleneck Strong ownership mindset?with the ability to deliver independently Collaborative team player with strong communication skill

## 1) Tier 2/3 MSP Engineer – As Needed **Title:** Tier 2/3 MSP Engineer – As Needed | Microsoft 365, Windows, Networking, SMB Support We’re a growing MSP building a bench of reliable contractors we can use for **as-needed project work, escalations, overflow support, and client onboarding tasks**. Most of our clients are **small to mid-sized businesses**, with a strong focus on **professional services firms** such as CPA/accounting, architecture, engineering, and similar organizations. We are looking for a **Tier 2/3 MSP Engineer** who is comfortable jumping into a client environment, troubleshooting issues, handling escalations, and supporting projects when needed. This is **not a full-time role**. We are looking to build a relationship with someone we can use on a recurring **contract / as-needed basis** as work comes up. ### Typical work may include: * Tier 2/3 escalation support for SMB clients * Microsoft 365 administration and troubleshooting * Exchange Online, Entra ID / Azure AD, MFA, shared mailbox, permissions, and user issues * Windows workstation and Windows Server troubleshooting * Basic to intermediate networking support including VPN, firewall, switch, and wireless troubleshooting * SharePoint / OneDrive support and occasional migration assistance * Client onboarding tasks, documentation cleanup, and project support * Working alongside onsite technicians or other contractors when needed ### Ideal experience: * Prior experience working for or alongside an **MSP** * Strong experience supporting **SMB environments** rather than only large enterprise * Comfortable working across multiple client environments * Hands-on experience with **Microsoft 365**, **Windows Server**, **Entra ID**, **Exchange Online**, **SharePoint**, and general endpoint / user support * Solid troubleshooting ability across Microsoft, networking, and general infrastructure issues * Able to communicate clearly and document work professionally ### Nice to have: * Experience with RMM / PSA platforms * Familiarity with environments in the **10–100 user range** * Experience with client onboarding, migrations, or remediation projects * Ability to assist after-hours for planned cutovers or urgent issues when needed ### Engagement structure: We are specifically looking for someone open to: * **As-needed / project-based work** * Escalations that may come up periodically rather than every week * Short projects ranging from a few hours to several days * Occasional after-hours support for cutovers or urgent issues ### When applying, please include: 1. A brief overview of your MSP and SMB support experience 2. The Microsoft / server / networking areas you are strongest in 3. Whether you are comfortable supporting multiple client environments 4. What your availability typically looks like for project-based or urgent work 5. Whether you’re open to coordinating via **Slack or Microsoft Teams** if we’re a fit

Join Corestead Consulting Group to support a community health center (FQHC) to reduce single- point-of-failure and key-person risk. This role will also work to get the health center's environment properly documented and build proper governance for their IT environment as a whole. We’re looking for a senior infrastructure engineer who can make an environment better mapped, more resilient, and less dependent on any one individual.

I'm looking for someone with daytime availability to assist me with my IT client's needs. An ideal candidate might be someone who works full time in IT currently but has extreme flexibility in scheduling which would allow them to help with my clients during the day, or someone who just started their own MSP and is looking to fill in some gaps. If you decide to apply, I may choose to reach out to you via Upwork chat. If you don't respond fairly quickly then I likely will move on. Your quick response through Upwork chat shows me a glimpse of your ability to communicate timely. You'll do tasks from password resets to firewall config to virtual management to Windows server management to desktop support to Office 365 migrations and support and various other tasks. GPO, Acronis backups, Watchguard firewalls, Unifi wifi and switches, Active Directory, DNS/DHCP, Azure AD to name a few. We support many clients across our state and need some help handling the needs. Hours will vary each week and are not guaranteed but the right person can start today and will have daytime availability THROUGHOUT THE DAY, EACH DAY. Dependability, Customer service and communication are top priorities. It's essential to this job. You'll be responsible for seeing an issue through all the way to the end with minimal interaction from me. If you fit this criterion please apply and we'll chat. Hours can be up to 10 per week and average about 5 per week, sometimes less. You will have to work some evenings, on your schedule, to perform updates, installs, troubleshoot, etc. We will communicate every day of the workweek. You must have availability during the daytime every day. If you work a full-time job and you're just looking for work in the evenings then this isn't the position for you. You must have the desire and ability to reach out directly to clients as needed and work through issues with them. Sometimes I'll give you minimal information and you'll need to be resourceful and figure it out. You will have the tools you need like a phone app, remote connection tools, passwords etc. You will be required to keep in communication with me and with the client. You will be required to sign a non-compete and a contractor agreement. You will need to keep up with your time entries in our RMM tool as you're working on tickets- this means time entries each day. Adding your time entries at the end of each billing cycle isn't acceptable. Documentation is very important. If this is something you struggle with and don't think you can keep up with it then please don't apply. I have a single, level one employee who handles most of the desktop support and the on-site support. You will need to be there to assist him with more complex Windows, networking and server-related tasks or to help in times when his workload gets too high. Ideally, you'd be located East Coast or Central time zone. Skills needed: - Communication skills above all else - Dependability - Customer service/ friendliness - Windows Server management including AD, DHCP, DNS and others - Firewall management including Watchguard and Sonicwall - Network management - Other tech skills as needed - Virtual machine management including VMware and Hyper-V - Veeam - Ability to discover information on your own without much guidance - Ability to take and keep notes on your own - Ability to contact clients on your own, follow through with issues until they are completed - Daytime availability to answer calls and resolve support tickets - Work some evenings to install updates and other projects that can't happen during the work day - You're OK with communicating with me via text, phone and email every work day so I can give you task details and get updates from you. PAY: I can only pay about $35 per hour. So if your posted rate on Upwork is higher than that please send me a proposal around that number. Otherwise I likely won't consider you as I don't want to waste your time. I can only afford that number. Contract to hire opportunity: Our company is on path to grow enough that I'll need another full time resource soon. While contract to hire isn't a requirement, it could be an option to discuss if it makes sense for both parties.

Crestmont is a private investment firm focused on principal investing, special situations, and private market opportunities across healthcare, energy, technology, and real assets. We are a growing organization with multiple affiliated entities and investment vehicles, and a distributed team that utilizes modern cloud-based systems. We are seeking a highly organized, responsive, and technically capable IT professional to serve as our outsourced IT administrator and technology coordinator. Scope of Work The selected contractor will act as our go-to resource for managing and maintaining our business technology infrastructure, including: Domain & DNS Management - Manage and maintain company domains - Configure and update DNS records - Coordinate domain registrations, renewals, and transfers - Troubleshoot website, email, and DNS-related issues - Update website as needed Email Administration - Administer Google Workspace - Create, modify, and deactivate user accounts - Manage aliases, forwarding rules, groups, and shared inboxes - Implement email security best practices - Assist with deliverability and email authentication (SPF, DKIM, DMARC) Cloud & Collaboration Systems - Support Google Drive and shared file permissions - Maintain user access and security settings - Assist with Slack administration - Coordinate user onboarding and offboarding Software & Vendor Management - Maintain inventory of software subscriptions and licenses - Coordinate with vendors and support teams Manage user access across platforms such as: - Google Workspace - Slack - Cloze CRM - Constant Contact - Juniper Square - DocuSign - Dropbox and/or Google Drive - Other business applications as needed Security & Compliance - Implement and maintain MFA policies - Conduct periodic access reviews - Maintain password and access management procedures - Assist with cybersecurity best practices and recommendations - Address cybersecurity threats and concerns Special Projects - Configure integrations and automations (Zapier preferred) - Assist with system migrations - Support new technology implementations - Recommend improvements to streamline operations and reduce costs Ideal Candidate - 5+ years administering Google Workspace and cloud-based business systems - Strong DNS and domain management experience - Familiarity with investment firms, professional services firms, family offices, or private equity environments preferred - Experience with Zapier or workflow automation tools - Strong communication skills - Available during U.S. business hours for urgent issues - Comfortable working independently and proactively Engagement Structure - Fractional / ongoing contractor relationship - Estimated 5–15 hours per month initially, with additional project-based work - Long-term relationship preferred - Hourly or monthly retainer proposals welcome To Apply Please provide: A brief summary of your relevant experience Examples of similar organizations you have supported Your hourly rate or preferred monthly retainer Availability during U.S. Eastern Time business hours Any certifications or specialized expertise Experience with Google Workspace, DNS management, Zapier, and cybersecurity

We need help designing and setting up a secure remote access model for multiple authorized engineers working across client-controlled environments. Right now, access is too dependent on individual laptops and ad hoc VPN/SSH workflows. We need a cleaner, more reliable setup that supports secure engineer access, credential handling, MFA, and onboarding/offboarding. The first priority is one client environment where access currently works roughly like this: Engineers connect through a commercial VPN service SSH is used for access Shared SSH keys are currently involved MFA is required through an enterprise MFA tool If a laptop disconnects from VPN, access may be lost for the day Credentials are stored in an enterprise password manager This setup is not reliable enough and does not scale well to multiple engineers. We are looking for someone who can review the current access flow and recommend/implement a better approach. We are open to the right architecture. Possible options may include VPN changes, bastion host, jump host, cloud workstation, VDI, Zero Trust access, SSH access broker, privileged access tool, or another secure pattern. The goal is not to bypass MFA or client security controls. We need a compliant setup that works within normal enterprise security expectations. What we need help with: Review current VPN, SSH, MFA, and credential flow Identify the weak points in the current setup Recommend a better access architecture Set up a reliable access pattern for multiple engineers Improve SSH key management Improve credential delegation and revocation Reduce dependency on one physical laptop Ensure MFA is handled properly Add auditability where possible Document the final setup Deliverables: Current-state review Recommended architecture Collaboration/Implementation of the approved approach SSH/key management recommendation Credential management recommendation MFA handling recommendation Onboarding/offboarding steps Admin runbook Engineer runbook