Freelance DevOps Engineer / Linux Systems Administrator (LEMP, GridPane, Vultr, WordPress)

Objective Diagnose, optimize, and stabilize a production cluster running WordPress on a LEMP stack, with GridPane as the control layer and Vultr as the infrastructure. Improve CPU efficiency, swap usage, and reliability of uptime monitors by implementing robust tuning, caching, bot mitigation, monitoring, and proactive scaling plans. Deliver a clear plan for ongoing prevention and measurable performance improvements.

Key Responsibilities

Perform deep, end-to-end diagnosis of resource bottlenecks on multiple servers, including CPU saturation, RAM pressure, swap usage, I/O wait, and network timeouts.
Tune and optimize the LEMP stack for high-traffic WordPress environments:
Nginx worker processes, connections, timeouts, and caching rules.
PHP-FPM pool tuning (pm.max_children, pm.start_servers, pm.min/max_spare_servers, request_terminate_timeout).
MariaDB/MySQL configuration (innodb_buffer_pool_size, query_cache, buffers, and cache hygiene).
Redis object caching and GridPane caching integrations.
Offload traffic and reduce origin load:
Validate and optimize Cloudflare rules, caching behavior, bot mitigation, and WAF settings.
Ensure GridPane’s caching layers and Redis are effectively serving requests and minimizing PHP-FPM churn.
Log analysis and bottleneck isolation:
Review Nginx access/error logs, PHP slow logs, system logs, and uptime monitor timeouts to identify root causes (bots, rogue cron jobs, inefficient queries, or plugin behavior).
Implement proactive stability measures:
Establish automated health checks, alert thresholds, and self-healing or preventative scripts.
Create a pro-active scaling plan with clear triggers for vertical/horizontal scaling on Vultr (instance resizing, CPU/memory adjustments) and recommended baselines.
Security and access control:
Enforce least-privilege access for contractors and ensure secure onboarding/offboarding processes.
Document access controls for GridPane, Cloudflare, and WordPress, including temporary admin accounts and revocation procedures.
Documentation and handover:
Provide clear, testable runbooks for ongoing maintenance and future i ---------- response.
Deliver a Future-Proofing & Scaling Plan (see Deliverables).
Communication:
Provide concise, direct updates with evidence (logs, graphs, metrics) and actionable recommendations.
Required Skills and Experience

Deep expertise with LEMP stack optimization in high-traffic WordPress environments.
Proven experience tuning PHP-FPM, Nginx, and MariaDB (or MySQL) on Ubuntu or similar Linux distributions.
Strong familiarity with GridPane administration, including user/role management, site-level configuration, and caching options.
Experience with Cloudflare for bot mitigation, caching, and WAF rules; ability to tune rules to reduce origin load.
Hands-on comfort with Redis caching, PHP optimization, and database hygiene (transients, revisions, indexing, query optimization).
Ability to read and interpret logs, slow queries, and performance metrics; capable of delivering concrete, testable fixes.
Excellent communication: capable of delivering clear findings, proposed changes, and impact in business terms with minimal jargon.
Documentation and reporting: able to produce actionable runbooks, post-i ---------- reports, and a Future-Proofing & Scaling Plan.
Nice-to-Have

Experience with Netdata, New Relic, or other APM tools, and setting up alerting and dashboards.
Experience with automation scripting (Shell, Python) for routine maintenance and hygiene tasks.
Prior work with agency/brands hosting multiple sites (WordPress multisite or clustered environments).
Familiarity with backup strategies and offsite backups (e.g., GridPane remote backups, S3/Wasabi/Backblaze options) and disaster recovery planning.
Deliverables

Immediate Diagnostic Report (within 3–5 business days):
Summary of root causes for CPU and swap pressure.
Specific Recommendation List with quantified impact estimates.
Config changes for Nginx, PHP-FPM, MariaDB, GridPane, and Redis.
Bot mitigation and caching adjustments with expected load impact.
Implementation Pack (as a set of secure, testable changes):
Configuration changes applied in a safe, incremental manner with rollback steps.
Updated runbooks for ongoing maintenance and i ---------- response.
A 2–4 week monitoring plan with baseline metrics and alerts.
Proactive Scaling & Mitigation Document (Future-Proofing Plan):
Cloudflare rules and bot mitigation strategy with rationale and configuration snippets.
Baseline performance metrics and thresholds for auto-scaling or escalation.
Recommendations for APM integration (Netdata/New Relic/alternatives) and alerting policies.
Automated database hygiene scripts and GridPane cron tasks.
Hard scaling triggers with precise thresholds and recommended Vultr plan changes.
Security Onboarding/Offboarding Protocol:
Clear steps for adding/removing access for GridPane, Cloudflare, WordPress, and SSH, with revocation procedures.
Project Timeline

Proposal review and technical interview: 1 week
Diagnostic phase: 3–7 days
Implementation and testing phase: 1–2 weeks (with staged changes and rollback plans)
Deliverables handover and knowledge transfer: 3–5 days
Ongoing support (optional): monthly retainer or as-needed basis
Budget and Payment

Hourly or fixed-price engagement options accepted.
Clear milestones with payment upon completion of each deliverable.
Use secure freelance platforms for contract management and escrow (Upwork, Toptal, etc.), if applicable.
Candidate Evaluation Criteria

Demonstrated success optimizing high-traffic WordPress environments on LEMP.
Specific, concrete plan for reducing CPU and swap pressure and preventing reoccurrence.
Evidence of prior work with GridPane, Vultr, and Cloudflare at scale.
Ability to produce a practical Future-Proofing Plan with measurable KPIs.
Strong communication and thorough documentation track record.
Security-conscious onboarding/offboarding process and access control discipline.
How to Apply

Please submit:
A brief description of your approach to diagnosing high swap and high CPU in GridPane-based WordPress deployments.
Examples of similar environments you have optimized (without sharing confidential details).
A sample Future-Proofing & Scaling Plan outline (even a condensed version is okay) showing how you would structure the document.
Your proposed engagement model (hourly vs. fixed-price per milestone) and a rough estimate of hours or cost.
Important Notes

Emphasize security and least-privilege access in your response.
Be prepared to provide a scoped SSH key-based access plan and Cloudflare role-based access steps for the assignment.
If you offer ongoing monitoring, include your recommended tools and alerting approach.