Six shapes of work that come up often. Sign in to use one as a template.
EX-01 · Networking · £20k – £50k
Intrusion prevention with an automated response loop
We have detection (IDS sensors and host logs into a SIEM) but no response loop: an analyst reads an alert, then hand-types a firewall rule. Needed: an event pipeline that correlates the alerts we already have, a policy-as-data firewall layer with a test gate, and automated responses — block, isolate, page — with a written rollback for each. A proposal should address false-positive containment, how rules are tested before they are applied, and what the analyst sees when the loop fires.
EX-02 · Identity · £20k – £50k
Identity and authentication automation for internal applications
Eleven internal web applications each keep their own user table and password handling; a leaver is removed from most of them, eventually. Needed: sign-in delegated to one identity tier with MFA, a single place to revoke a session and read the audit trail, and joiner/mover/leaver automation from the HR feed. Proposals should name the first three applications to migrate, how service accounts are inventoried and expired, and what happens to an application that cannot be changed.
EX-03 · Networking · £5k – £20k
Network automation: DNS, DHCP and IPAM as a service
Address management is a spreadsheet, DNS is edited by hand on two servers that disagree, and DHCP scopes are documented in a wiki that is wrong. Needed: split internal and external DNS with replication, DHCP with a ledger of what has which address, and an IPAM the network team can trust — with our existing data migrated in. Proposals should cover the migration of the current records, how a change is reviewed, and what a node does when it cannot reach its peers.
EX-04 · Networking · Over £50k
Global network traffic analysis across three regions
We do not know who talks to whom. Three regions, roughly four thousand systems, a mix of on-premises and cloud. Needed: connection metadata captured at the load balancers and on the hosts — peer, port, process — landed in our SIEM with dashboards by owner, application and site, at a retention that does not sink the database. The output has to be good enough to draw segmentation policy from. Proposals should address capture cost per host, data volume, and how the map stays current.
EX-05 · Virtualisation · £20k – £50k
VMware exit: assessment and pilot on a replacement platform
Around 300 guests on vSphere, renewal in nine months. Needed first: an honest inventory of what moves easily, with effort, or should stay, and a small replacement platform stood up with one representative workload migrated. Candidates are KVM/libvirt, Proxmox and Hyper-V. Proposals should state which surprises the pilot is designed to find, the storage and network design that would be kept, and the exit criteria for each phase.
EX-06 · Automation · £5k – £20k
Deployment automation enclave for unattended Windows and Linux builds
New machines are built by hand from a USB stick. Needed: unattended deployment from an enclave — DHCP, DNS, iPXE and TFTP inside it and never exposed — with images customised per deployment and delivered over HTTPS, UEFI Secure Boot and TPM handled, and the same chain working for remote sites. Proposals should cover image customisation, driver injection, and how a build is verified before the machine is handed over.