DevOps Contractor

is engaging an experienced Contractor to modernize a production API gateway and identity/authentication platform running on AWS. This is a fixed-scope, fixed-price contract engagement — a hands-on, intensive delivery role for someone who has led production cloud migrations of this nature before and is comfortable operating within a controlled, reversible change process.

DevsLane is a leading Software Consultancy Firm based in India. We offer a wide range of services, from proof-of-concepts to end-to-end product development, partnering with clients worldwide to bring their ideas to life.

= Contractor — fixed-scope, fixed-price contract (project-based, single delivery)

= Full-time; focused, intensive delivery window

= Remote

= Cloud Infrastructure / DevOps / Identity & Access Management

= Production, AWS-hosted, change-controlled

= DevsLane (engaged for a confidential client program)

= Fixed price — budget to be finalized following client discussion

= Urgent — immediate availability preferred

The work spans three parallel tracks: migrating a self-hosted API gateway to a managed AWS service, upgrading a legacy identity/authentication platform to a current major version, and modernizing the backing database to a highly available configuration. The two non-negotiable requirements are a zero-downtime cutover and no loss of user or credential data.

1 —

• Replace a self-hosted, open-source API gateway with a managed AWS API Gateway.

• Re-implement routing, rate limiting, access control, CORS, and API-key handling using AWS-native equivalents.

• Build OIDC authentication via serverless (Lambda) authorizers, including token caching and latency optimization.

• Deliver the target platform as Infrastructure-as-Code and decommission the legacy gateway.

2 —

• Upgrade a legacy self-hosted identity platform (Keycloak) to a current major version — a significant version jump involving a full configuration rebuild.

• Migrate and validate all identity data — users, credentials, groups, roles, and authentication flows — with zero data loss.

• Recompile and validate any custom server extensions against the new runtime.

• Stand up a highly available, multi-node cluster across multiple availability zones.

3 —

• Perform a major-version PostgreSQL upgrade on managed AWS RDS.

• Move the database to a Multi-AZ, high-availability configuration.

• Use a reversible deployment strategy for the schema migration, with data-integrity verification at each step.

• Build the new stack in parallel alongside the running production system.

• Shift traffic gradually; validate on a small live slice before full cutover.

• Maintain tested rollback paths at every stage of the migration.

• Preserve continuity of authentication and user data throughout.

• Operate within a change-controlled environment with explicit go / no-go gates.

&

• Strong hands-on AWS: API Gateway, Lambda, VPC networking, and RDS.

• Infrastructure-as-Code experience (Terraform preferred).

• Deep Keycloak experience: OIDC / OAuth2 / SAML, realm and user migration, custom SPI providers.

• PostgreSQL on RDS: major-version upgrades, Multi-AZ, and schema migrations.

• A track record of delivering zero-downtime production cutovers.

• Prior experience upgrading Keycloak across multiple major releases.

• Performance and load testing experience (authentication throughput, latency comparison).

• Familiarity with security validation and working under formal compliance and audit requirements.

• Current-state assessment and target architecture design.

• Infrastructure-as-Code for the new gateway and identity platform.

• The migrated, validated, highly available identity platform on the current version.

• Migration and rollback runbooks.

• Validation and performance test results.

• Knowledge handover to the operations team.

• This is a production, regulated environment; all changes are controlled, tested, and reversible.

• The delivery window is focused and intensive — full-time availability is expected for the duration.

• Deep familiarity with production incident response and careful, staged rollout is valued over speed alone.

This is a fixed-price contract engagement. The final budget will be determined based on scope alignment and confirmed after discussion with the candidate.

Fill out the form here: https://forms.gle/kTWo6hqVn5XzMbFC6

Shortlisted candidates will be contacted for further details.

Contact Us

Email: [Confidential Information]

Website: https://devslane.com