We are looking for a senior engineer/consultant with experience building Next.js and Node.js applications hosted with AWS. The ideal candidate has worked on high-traffic sites with very large route/page counts and understands production performance, reliability, memory usage, caching, load testing, and cloud infrastructure. Experience required: Next.js / React Node.js AWS production hosting Docker/containerized deployments MongoDB OpenSearch or Elasticsearch Large-scale public sites with millions of pages We need help reviewing the application and infrastructure, identifying performance and reliability risks, diagnosing production issues, and recommending or implementing fixes. Please only apply if you have direct experience with this technology stack and websites at this scale.

Principal Full-Stack Engineer (React Native • Node.js • AWS • AI Infrastructure) Mission Own the entire engineering stack and take FitCheck from its current state to a stable, production-ready application. You will architect, build, integrate, deploy, and lead all technical execution across mobile, backend, infrastructure, and AI services. Required Skills * React Native (Expo) * TypeScript * Node.js (NestJS) * PostgreSQL / Aurora * Kafka * Redis * REST APIs * WebSockets * AWS * EKS * ECS * EC2 * S3 * CloudFront * IAM * CloudWatch * Kubernetes * Docker * GitHub Actions CI/CD * Cloudflare * Firebase * GPU deployment on AWS * PyTorch model deployment * AI inference APIs * Authentication * Performance optimization * Security * Monitoring * Production deployments Responsibilities * Own the entire codebase. * Lead architecture decisions. * Build frontend and backend features. * Design and implement APIs. * Deploy and maintain AWS infrastructure. * Build and maintain CI/CD pipelines. * Deploy and manage GPU inference servers. * Optimize performance and scalability. * Review all code. * Fix production issues. * Ship new releases. * Coordinate any additional contractors if needed. * Take full ownership of technical delivery. Requirements * 10+ years software engineering. * Led production applications from development through launch. * Expert in React Native and Node.js. * Expert in AWS. * Experience deploying AI workloads on GPUs. * Experience scaling applications to hundreds of thousands of users. * Strong architectural and DevOps experience. * Excellent communication and ownership. Success Criteria Within the first 90 days: * Complete integration of frontend and backend. * Production-ready CI/CD. * Stable AWS infrastructure. * Reliable AI inference pipeline. * End-to-end testing. * Production deployment. * Documentation. * Clear engineering roadmap.

Technical Skills: Languages: PHP, Python, JavaScript, SQL Databases & Tools: MySQL, PostgreSQL, MongoDB DevOps & Infrastructure: AWS, Docker, Kubernetes, Terraform, CloudFormation Version Control & CI/CD: Git, GitHub Job Summary: We are seeking an experienced Senior Software Developer to join our team. In this role, you will design and develop robust integrations with CRM platforms, architect and optimize database solutions, and contribute to our cloud infrastructure as code initiatives. You will work with modern technologies including PHP, Python, SQL, and AWS while managing containerized applications, implementing CI/CD pipelines, and interfacing with third party development teams. This is a full-stack role bridging backend development with DevOps practices. Key Responsibilities: - Design, develop, and maintain CRM integrations with leading platforms such as Salesforce, HubSpot, and Actionstep - Architect and optimize database solutions, including schema design, indexing strategies, performance tuning, and backup strategies - Design and implement Infrastructure as Code (IaC) with AWS - Develop, deploy, and manage Docker containerized applications using Docker Compose and container orchestration tools - Write clean, maintainable code in Javascript, PHP and Python - Develop and execute complex SQL queries for data extraction, transformation, reporting, and ETL pipeline development - Configure and optimize AWS services including EC2, RDS, S3, VPC, security groups, and IAM policies - Implement and maintain CI/CD pipelines for automated testing, building, and deployment - Establish monitoring, logging, and alerting systems for production environments - Conduct code reviews and provide constructive feedback to team members - Troubleshoot and resolve production issues with minimal downtime, implementing reliability improvements Required Qualifications: - 7+ years of professional software development experience - Advanced proficiency in PHP, Javascript, & Python - Expert-level SQL knowledge with experience in relational database design, optimization, and data warehouse architecture - Proven experience developing CRM integrations with REST APIs. - Experience with version control systems (Git) and CI/CD pipelines - Hands-on experience with AWS services including EC2, RDS, S3, VPC, security groups, and IAM - Proficiency with Docker and container orchestration (Docker Compose, Kubernetes experience preferred) - Experience with Infrastructure as Code tools such as Terraform or CloudFormation - Knowledge of monitoring, logging, and alerting solutions (e.g., CloudWatch, ELK, Prometheus) - Preferred Qualifications - Experience with Actionstep - Experience designing and maintaining data warehouse solutions - Kubernetes experience for container orchestration at scale - Experience with serverless architectures (AWS Lambda) - Contribution to open-source projects - Bachelor's degree in Computer Science, Software Engineering, or related field

I have an existing healthcare caregiver application built in Lovable. The frontend is complete and the codebase is stored in a private GitHub repository. I need an experienced developer to migrate the backend from Lovable Cloud to a HIPAA-compliant infrastructure. Requirements: • Experience with HIPAA-compliant healthcare applications • Experience with AWS, Supabase, PostgreSQL, authentication, and secure file storage • Ability to implement Business Associate Agreement (BAA)-eligible infrastructure • Experience with row-level security (RLS), audit logging, encryption, and secure document storage • Ability to work from an existing GitHub repository rather than building from scratch Please provide examples of previous healthcare projects and an estimated cost for migration.

We're looking for a Performance Marketing Engineer to support our paid acquisition, analytics, and attribution work alongside the technical infrastructure that powers it. This is a hybrid role — performance marketing operator with the engineering chops to own the tracking, automation, and data pipelines behind it. Project-based engagement supporting our internal product and marketing systems across two brands (legal finance / legal tech). WHAT YOU'LL WORK ON Performance marketing support: campaign instrumentation, conversion tracking, optimization, retargeting setup Attribution and tracking workflows across paid, organic, and lifecycle channels Analytics organization and clean-up: GA4, Google Tag Manager, Search Console API integration and database support for marketing systems Automation of marketing workflows and connecting systems end-to-end Debugging production-related issues across analytics and tracking pipelines Backend / product feature development for internal marketing tools as needed REQUIRED SKILLS Performance marketing experience: paid acquisition, conversion optimization, attribution, retargeting Hands-on with Google Analytics (GA4), Google Tag Manager, Google Search Console Comfortable with backend / engineering work: APIs, databases (SQL), scripting (Python, Node.js, or comparable) Tracking implementation: UTMs, pixels, server-side conversion events Self-directed: can pick up context fast and ship without heavy hand-holding NICE TO HAVE Customer.io, HubSpot, or similar marketing automation platforms Paid platform experience (Google Ads, Meta Ads, LinkedIn) A/B testing tools and experimentation frameworks Internal tools / admin dashboard development Cloud infrastructure exposure (AWS or GCP) HOW WE WORK Async-friendly: most communication is via Upwork messaging Occasional video sync for kickoff and project check-ins Fast feedback loop — you bring questions in batches, we unblock quickly We value people who ship, document, and improve as they go LOGISTICS Hours: approximately 25 per week Duration: temporary / project-based, approximately 2-3 months

Senior, United States based Security and Compliance Lead to own the security architecture and compliance posture of an enterprise ArcGIS digital twin platform for a critical infrastructure client (a major United States public port authority, named under NDA). Built natively on ArcGIS Enterprise; government grade security required. You will own: ISO 27001 and 27002 ISMS documentation; NIST digital identity controls (assurance levels IAL2, AAL2, FAL2); Zero Trust architecture; Azure AD (Entra) single sign on, MFA, role based access, and identity provisioning; strong encryption at rest and in transit; incident response runbooks and a controls compliance matrix; monthly access audits; CONUS only data residency. Required: Active CISSP; ISO 27001 Lead Implementer; NIST digital identity practitioner experience; commercial cloud security (Azure preferred); enterprise or government security leadership; United States based (mandatory, no offshore); To apply: List your CISSP, ISO 27001 Lead Implementer, and NIST digital identity credentials with dates; describe one ISMS or identity controls implementation you led, including cloud platform and client scale; confirm you are United States based

We're looking for a senior backend engineer to own the server side and cloud infrastructure for a secure healthcare mobile app. This is the person who stands up our AWS environment correctly on day one, moves us off a single VPS, and closes our HIPAA gap. The app serves healthcare field representatives who need secure workflows for managing documents, profile information, status visibility, and access-related functionality. You'll own the API, the cloud migration, and the security foundation the rest of the product depends on. What you'll own: - Backend/API: Python + async FastAPI, PostgreSQL + SQLAlchemy, Redis + background jobs, keeping business logic in the API (thin-client pattern) - AWS/DevOps: migrating off a single VPS to AWS (ECS Fargate, RDS, ElastiCache, S3), infrastructure-as-code (Terraform or CDK), CI/CD, secrets management, observability - A well-architected AWS landing zone with separate non-prod and prod environments (no real customer/PII data in non-prod) - Amazon Bedrock migration so document parsing is HIPAA-covered - Security: secure document handling, auth/session workflows, least-privilege IAM, encryption, audit logging - Building with SOC 2 in mind from day one Must have: - Python with async web frameworks (FastAPI strongly preferred) - PostgreSQL and an ORM with real migration experience (SQLAlchemy a plus) - Hands-on AWS: ECS/Fargate or equivalent, RDS, S3, IAM, Secrets Manager - Infrastructure-as-code (Terraform or CDK) and CI/CD (GitHub Actions) - Security fundamentals: token auth, secrets handling, least-privilege IAM Strongly preferred: - Redis / background job queues - HIPAA or other regulated-data experience (PHI, encryption at rest/in flight, audit logging) - Amazon Bedrock or other LLM-API integration experience - Docker / containerization

Eligibility: This role is open to U.S. citizens only due to client security and compliance requirements. Please apply through this posting only — do not contact Data-Sleek directly regarding this position. Applications received outside this channel will not be considered and reported to Upwork. Data-Sleek is looking for a Senior AI Solutions Engineer to lead our on-premise and government-cloud AI deployments. You will design, build, and deploy AI-powered data pipelines for clients who cannot use commercial cloud due to ITAR, CMMC, or other data residency constraints, beginning with a client in the aerospace and defense sector. Beyond this first engagement, you will become Data-Sleek's go-to engineer for AI deployments across defense and aerospace clients, building the practice rather than just executing a single project. About Data-Sleek Founded in 2020, Data‑Sleek® is a U.S.-based AI and data consulting firm that helps mid-market companies build the data foundation that AI actually runs on. We own the full path — data strategy, architecture, integration, warehousing, and AI implementation — so organizations can adopt AI with confidence, stay compliant, and scale, without first hiring an internal data team. Our distributed U.S. team (San Francisco, Los Angeles, Irvine, Dallas, Chicago, and New York) partners with clients across healthcare, finance, insurance, logistics, and technology, modernizing data platforms with best-in-class tools like Snowflake, dbt, Fivetran, Tableau, and AWS. Trusted by Fortune 500 institutions and growing companies alike, Data‑Sleek turns complex data into measurable outcomes — faster insight, lower cost, and AI projects that deliver. About the Role You will own the technical delivery of AI-powered data pipelines in restricted environments where commercial cloud is not an option. The immediate engagement centers on a Product Lifecycle Management (PLM) data migration: building a pipeline that connects to a client's SharePoint on a restricted Microsoft 365 government tenant, reads engineering documents, classifies and summarizes them, detects duplicates, and rates naming-convention compliance to produce a migration-readiness report. You will start on-premise, then help the client evaluate and move to government cloud for production. Key Responsibilities AI Pipeline Development Build AI pipelines that connect to a client's SharePoint on a government cloud tenant, read engineering documents, classify them by type, generate summaries, detect duplicates, and rate naming-convention compliance in support of PLM data migration. Catalog large document repositories and produce migration-readiness reports and Excel catalogs that give clients a clear, measurable picture of their data. Engineer document-parsing workflows across DOCX, PDF, and XLSX formats, including embedding generation and database operations. On-Premise & Government Cloud Deployment Deploy on-premise first — a Mac Mini running Gemma via Ollama — standing up, serving, and tuning local inference infrastructure. Evaluate and migrate to production on Azure OpenAI (Azure Government) or AWS Bedrock (GovCloud) when the client is ready to scale. Keep deployments compliant within ITAR-sensitive, restricted-network boundaries throughout. Architecture & Cost Advisory Produce cost models and architecture recommendations that help client IT teams make informed platform decisions based on measured data, not vendor pitches. Compare deployment options — local, Azure Government, and AWS GovCloud — on cost, performance, and compliance, and explain the trade-offs clearly. Practice Building & Delivery Serve as Data-Sleek's go-to engineer for AI deployments across defense and aerospace clients. Build a reusable capability — a repeatable AI-solutions practice — rather than executing a single one-off project. What You Bring Required U.S. Citizen: U.S. citizenship is required and non-negotiable due to ITAR and client security and compliance requirements. Production LLM deployment: You have stood up inference infrastructure — not just called an API. You've handled model loading, memory constraints, failure modes, and throughput tuning in a real deployment. Local inference: Ollama, vLLM, llama.cpp, LM Studio, or TGI. You've served open-source models (Gemma, Llama, Mistral) on local hardware. Cloud AI platforms: Azure OpenAI or AWS Bedrock — at least one. Service configuration, model access, authentication, and token-based pricing. Python: Pipeline engineering — document parsing (DOCX, PDF, XLSX), API integrations, embedding generation, and database operations (SQLite, Postgres). Experience: 5+ years post-degree in software engineering, data engineering, or ML engineering. Strong Preferences Microsoft ecosystem: Entra ID, Microsoft Graph API, and SharePoint REST API at the API level. GCC High experience is a bonus. MCP (Model Context Protocol): Experience building or consuming MCP servers — a significant plus for a fast-evolving protocol. Workflow orchestration: n8n, Temporal, Airflow, or similar. The pipeline is orchestrated, not scripted. Government cloud awareness: Understanding of what FedRAMP High, IL4/IL5, and ITAR mean for cloud architecture decisions. Embeddings & vector similarity: sentence-transformers, pgvector, Qdrant, or FAISS for duplicate detection. 
Bonus (valued if present) Aerospace or defense experience: Familiarity with ECOs, BOMs, and AS9100 saves ramp time. Apple Silicon optimization: MLX, Metal acceleration, and Ollama tuning on M-series chips. Agentic frameworks: Bedrock AgentCore or Azure AI Foundry — the future direction involves agentic AI workflows on government cloud. What This Role Is Not Model training or fine-tuning. This is deployment engineering, not research. Data science or statistical modeling. The AI here is document understanding and classification, not predictive analytics. Frontend development. The deliverable is an Excel catalog and a report, not a web app. Sales or client acquisition. Data-Sleek's leadership manages the client relationship; you focus on delivery. Engagement & Compensation Remote, US-based. Occasional on-site travel to client facilities for hardware deployment and workshops may be needed. An average of 2–3 trips for the first engagement may be possible. Compensation. $40-$55/hour Why Join Data-Sleek? At Data-Sleek, you'll lead AI deployments in environments most engineers never touch — government cloud and on-premise systems where commercial tools simply aren't an option. Your work will directly shape how defense and aerospace clients adopt AI, and you'll build a reusable capability the company grows around. We focus on doing the right thing architecturally rather than selling the most expensive option, and we give our engineers the autonomy to deliver real solutions for real constraints. How to Apply If you've shipped real LLM deployments with real constraints, we'd like to hear from you. Please submit: Your resume A brief note describing one LLM deployment you've shipped — what model, what infrastructure, what data source, and what went wrong. Data-Sleek® is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment for all contractors.

Location: Massachusetts (Hybrid/Remote with Onsite Support as Needed) Employment Type: Full-Time Clearance/Background Requirements: Ability to pass state and federal background investigations About the Opportunity We are seeking a highly skilled and experienced Senior Splunk Engineer to support large-scale security operations, observability, and data analytics initiatives for government and enterprise environments, including critical support for the Commonwealth of Massachusetts Executive Office of Technology Services and Security (EOTSS). This role requires a hands-on technical expert capable of architecting, deploying, optimizing, troubleshooting, and maintaining complex Splunk environments supporting cybersecurity operations, compliance initiatives, incident response activities, and enterprise IT monitoring. The ideal candidate combines deep Splunk expertise with strong infrastructure, cloud, security, and automation skills and can operate effectively within highly regulated environments. Key Responsibilities Splunk Architecture & Administration • Design, deploy, configure, and maintain enterprise Splunk environments. • Manage Splunk Enterprise and Splunk Cloud deployments. • Administer Indexers, Search Heads, Deployment Servers, Heavy Forwarders, Universal Forwarders, and Cluster Managers. • Design and optimize data ingestion pipelines across diverse data sources. • Implement and maintain Splunk clustering and high-availability architectures. • Perform capacity planning and infrastructure optimization. Security Operations Support • Support Security Operations Center (SOC) initiatives. • Develop and maintain SIEM use cases, correlation searches, alerts, and dashboards. • Create and tune Splunk Enterprise Security (ES) content. • Assist with threat hunting and incident investigations. • Support MITRE ATT&CK mapping and threat detection engineering. • Analyze security events and provide actionable recommendations. EOTSS & Government Support • Assist with onboarding state agencies and municipalities into centralized Splunk platforms. • Support compliance initiatives including CJIS, IRS Publication 1075, HIPAA, NIST, and other regulatory frameworks. • Participate in major incident response activities. • Collaborate with agency stakeholders, security teams, and executive leadership. • Develop operational runbooks and technical documentation. Data Engineering & Integration • Integrate logs and telemetry from: o Microsoft 365 o Azure o AWS o Google Cloud o Windows Server o Linux o Network Infrastructure o Firewalls o Endpoint Security Platforms o Identity Providers o SaaS Applications • Develop custom parsers, field extractions, transforms, and CIM mappings. • Support Splunk Data Models and accelerated searches. Automation & Optimization • Develop automation using: o Python o PowerShell o REST APIs o SOAR platforms • Improve operational efficiency through workflow automation. • Optimize search performance and reduce infrastructure costs. • Implement monitoring and health-check frameworks. Required Qualifications Technical Experience • 5+ years of hands-on Splunk engineering experience. • 3+ years supporting enterprise-scale Splunk deployments exceeding 500GB/day ingestion. • Strong experience with: o Splunk Enterprise o Splunk Enterprise Security (ES) o Splunk Cloud o Splunk ITSI (preferred) o Splunk SOAR (preferred) Infrastructure Knowledge • Windows Server Administration • Linux Administration • Active Directory • Microsoft Azure • AWS • Virtualization Platforms • Networking fundamentals • DNS, DHCP, PKI, VPN technologies Security Knowledge • SIEM Operations • Threat Detection Engineering • Incident Response • Vulnerability Management • Security Frameworks: o NIST o CIS o CJIS o HIPAA o IRS 1075 o CMMC (preferred) Scripting & Development • Python • PowerShell • Regex • JSON • XML • REST APIs • Git Preferred Certifications Splunk Certifications • Splunk Certified Architect • Splunk Certified Admin • Splunk Enterprise Security Certified Admin Security Certifications • CISSP • GIAC Certifications • GCIH • GCIA • Security+ • CySA+ Cloud Certifications • Microsoft Azure Administrator • Azure Security Engineer • AWS Solutions Architect Desired Experience Candidates with experience supporting any of the following will receive special consideration: • State Government • EOTSS • Massachusetts Municipalities • Public Safety Agencies • Law Enforcement • Emergency Management • Healthcare • Critical Infrastructure • Managed Security Service Providers (MSSP) • Security Operations Centers (SOC) Personal Characteristics • Strong troubleshooting skills • Excellent communication abilities • Ability to interact with executive leadership • Strong documentation practices • Self-starter capable of working independently • Team-oriented mindset • Ability to remain calm during high-pressure incidents • Passion for cybersecurity and operational excellence What Success Looks Like Within the first 12 months, this individual will: • Improve Splunk search performance and platform stability. • Assist in onboarding additional agencies and data sources. • Enhance threat detection coverage. • Reduce alert fatigue through optimization. • Strengthen compliance reporting capabilities. • Become a trusted technical advisor for EOTSS stakeholders and leadership. Bonus Qualifications • Previous EOTSS experience. • Existing Commonwealth of Massachusetts relationships. • Experience supporting large Splunk deployments exceeding 1TB/day ingest. • Experience with cybersecurity consulting or MSSP environments. For EOTSS specifically, I would strongly recommend targeting candidates with Splunk Architect, Splunk ES, Microsoft Sentinel, and Massachusetts state government experience, because the technical challenges tend to be as much about stakeholder management, compliance, and onboarding agencies as they are about Splunk administration itself. A former EOTSS contractor or someone from Optiv, Deloitte, Accenture, TekStream, or a large MSSP would likely hit the ground running.

The Information Security Analyst partners with business units, IT, DevOps, and third-party vendors to maintain and continuously strengthen the organization's security posture and regulatory compliance. This role demands deep technical expertise across cloud environments, operational security, risk management, and data privacy — paired with the maturity to lead initiatives, influence stakeholders, and drive measurable improvements to the Information Security Management System (ISMS). Key Responsibilities Security Operations & Monitoring - Monitor and analyze security alerts from SIEM and other detection tools; tune rules and enhance detection capabilities to reduce false positives and improve threat visibility. - Lead vulnerability assessments across network, infrastructure, OS, and applications; track findings through to validated remediation. - Ensure timely patching and system hardening across all infrastructure layers, including endpoints, servers, and cloud workloads. - Participate in and continuously improve incident response, business continuity, and disaster recovery exercises. - Stay current on emerging threats, vulnerabilities, and attack techniques; translate intelligence into actionable defensive recommendations. Application & Cloud Security - Advise DevOps and Engineering teams on secure architecture, secure-by-design principles, and common application vulnerabilities (OWASP Top 10, etc.). - Conduct application security assessments, code reviews, and penetration test coordination; drive remediation with development teams. - Collaborate with IT to ensure secure design and deployment of systems, networks, and cloud environments. - Support system administrators with security policy deployment and configuration aligned to company standards and industry benchmarks (e.g., CIS). Compliance & Risk Management - Lead and support technical compliance activities for applicable frameworks (GDPR, HIPAA, PII, SOC 2, CIS); identify control gaps, implement remediation, and gather audit evidence. - Perform internal access control reviews and spot audits to verify policy adherence and data protection standards. - Assess third-party and external vendors for alignment with the ISMS; maintain vendor risk documentation and escalate material findings. - Assist in designing, maintaining, and continuously improving the ISMS to reflect the evolving risk landscape. - Prepare executive-ready reports documenting security metrics, threat activity, and audit outcomes for leadership and senior IT staff. Security Awareness & Training - Develop and deliver effective security awareness training and educational materials covering general cybersecurity hygiene, PHI handling, and HIPAA compliance. - Champion a security-first culture by engaging employees at all levels with relevant, practical guidance. Required Qualifications & Skills - Bachelor's degree in Computer Science, Information Security, or a closely related field. - 5+ years of progressive experience in an information security role, including hands-on implementation of security controls. - Strong technical foundation in IT systems, network security, cloud security (AWS, Azure, or GCP), and infrastructure hardening. - Hands-on experience with endpoint protection platforms, SIEM solutions, and log analysis. - Solid understanding of identity and access management (IAM), encryption, and authentication frameworks. - Familiarity with secure coding practices and common application-layer vulnerabilities. - Experience conducting vendor risk assessments and managing third-party security relationships. - Proficiency with compliance frameworks: GDPR, US data privacy laws, HIPAA, SOC 2, and CIS Controls. - Relevant certifications such as CISSP, CISM, CEH, SANS GIAC, or equivalent. - Excellent analytical, problem-solving, and written/verbal communication skills. - Proven ability to work independently across remote or distributed teams. - Sound judgment, high integrity, and a self-motivated approach to continuous learning.