Rakib K.
Linux Server & DevOps Engineer | Migrations, Hosting, Docker, AWS
Hacked WordPress site? Broken SSL? A server move that can't go wrong? I'm a Linux server administrator and DevOps engineer who fixes, moves and runs servers and WordPress hosting for small businesses, agencies and startups, with tested backups and a written recovery plan. Top Rated, 100% Job Success, 57 Upwork contracts, 500+ WordPress sites managed, around 100 hacked sites cleaned, and 4 years keeping a 20+ node production platform online. WHAT I FIX AND RUN • Hacked WordPress sites (around 100 cleaned): I back up and contain first, find the entry point, remove malware and backdoors, clean the database, reset every password and key, replace vulnerable plugins and harden the site. I check every site on the same account, because one infected site reinfects the rest. Then I request the Google review and monitor for reinfection. You get a written report. On shared hosting without root, I tell you upfront what that limits. • Server and site migrations: WordPress sites, web apps and databases to a new host, VPS, cPanel/WHM server, DigitalOcean, Linode or AWS. I build and test the new environment first, plan the DNS and SSL cutover to keep downtime short, and keep a rollback ready until you confirm everything works. • PHP and OS upgrades: PHP 7.x to a supported 8.x version (I have moved 50+ WordPress sites to 8.3 from 5.6, 7.3, 7.4 and other versions, and 8.3 has security support through December 2027), tested before it touches production. End-of-life OS moves like CentOS 7 to Ubuntu LTS or AlmaLinux, and I explain the trade-offs (support window, cPanel/WHM and RHEL compatibility) so you choose the right one. • Server hardening that stays consistent: I work out what each server needs, then write the scripts and pipeline that apply it, so every server gets the same SSH and firewall lockdown, users and permissions, patching, and Cloudflare WAF and rate limiting. • Disaster recovery: a written recovery plan, automated backups and restore tests, so you know how fast you can recover before you need to. I built a backup system for a WHM server with 250+ accounts: per-account archives, upload to S3, failure alerts and a daily report. • Ongoing server care: updates, monitoring and alerts, backup checks, SSL renewals and DNS changes, with scope and response times written down. One person who already knows your setup. • SSL, DNS and business email: Let's Encrypt with auto-renew, Cloudflare, SPF, DKIM and DMARC. Certificate lifetimes are shrinking toward 47 days by 2029, so renewals must be automatic and monitored. • Docker deployments and AWS: containerized apps behind NGINX, GitHub Actions runners, and EC2, Lightsail or S3 when you outgrow shared hosting. PROOF • "He is 100% trustworthy and has securely managed our deployments." - a client of 4 years and 2,200+ hours, running a 20+ node mail platform behind HAProxy with 5-second failover. • Ongoing Linux server support since July 2025 for a hosting company: 50+ WordPress sites currently run from Docker images, and 50+ sites moved to PHP 8.3 from versions as old as 5.6. • Cleaned 9+ hacked WordPress sites for an agency on shared hosting, with a written report for each site. • "Great job Rakib! Super fast and efficient" - WordPress site owner, Let's Encrypt install. • Self-hosted GitHub Actions runners and custom Docker images for a client who hired me 7 times, and a custom-domain SSL system for a SaaS platform that generates Let's Encrypt certificates and NGINX vhosts automatically. WORKING WITH ME • You own every account. For the audit I use a limited, read-only login that you can revoke at any time, and I change nothing until you approve the plan. • Before any contract, you get a short Loom walkthrough of how I'd solve your specific problem. • Fixed price with clear milestones, or a monthly care plan with the scope written down. Backups and a rollback plan before any production change. • Based in Dhaka (UTC+6). I overlap with US, EU and Australian business hours by agreement and put response times in writing. I work in writing by default, with calls when you prefer. Documentation at the end so nothing depends on me. Stack: Linux (Ubuntu, AlmaLinux, Rocky) · Docker · NGINX · HAProxy · Cloudflare · cPanel/WHM · WordPress and WP-CLI · AWS (EC2, Lightsail, S3, Elastic Beanstalk) · Ansible · Bash · GitHub Actions · Grafana · Prometheus · Graylog Hosts I've worked on: Hostinger, Namecheap, DigitalOcean, Linode, AWS Lightsail, WP Engine, RunCloud Send me your site or server and what's going wrong. I'll reply with a scoped plan and a fixed quote.