Jaroslaw O.Private profile: Upwork shows its earnings only to signed-in members, so we check it every few weeks, not daily. MRR here is a rough estimate (Upwork's six-month earnings ÷ months active). Last read Nov 5, 2026.

Secure, Scalable Cloud Infrastructure with Infrastructure as Code Are you looking to dramatically reduce your security risk while building a bulletproof Azure infrastructure? I specialize in creating enterprise-grade, secure cloud architectures using modern DevOps practices and Infrastructure as Code. 🎯 What I Deliver: Core Infrastructure Security: ⠗ 𝗔𝘇𝘂𝗿𝗲 𝗔𝗣𝗜 𝗠𝗮𝗻𝗮𝗴𝗲𝗺𝗲𝗻𝘁 (𝗔𝗣𝗜𝗠) with VNet integration and authentication enforcement ⠗ 𝗔𝘇𝘂𝗿𝗲 𝗔𝗽𝗽 𝗦𝗲𝗿𝘃𝗶𝗰𝗲𝘀 for microservices with private endpoints ⠗ 𝗔𝘇𝘂𝗿𝗲 𝗦𝗤𝗟 𝗗𝗮𝘁𝗮𝗯𝗮𝘀𝗲 with Private Link (no public access) ⠗ 𝗔𝘇𝘂𝗿𝗲 𝗞𝗲𝘆 𝗩𝗮𝘂𝗹𝘁 with Managed Identity integration ⠗ 𝗔𝘇𝘂𝗿𝗲 𝗩𝗶𝗿𝘁𝘂𝗮𝗹 𝗡𝗲𝘁𝘄𝗼𝗿𝗸 with NSGs and Azure Firewall ⠗ 𝗔𝘇𝘂𝗿𝗲 𝗪𝗲𝗯 𝗔𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗙𝗶𝗿𝗲𝘄𝗮𝗹𝗹 (𝗪𝗔𝗙) for application protection ⠗ 𝗔𝘇𝘂𝗿𝗲 𝗕𝗮𝘀𝘁𝗶𝗼𝗻 for secure developer access ⠗ 𝗖𝗲𝗻𝘁𝗿𝗮𝗹𝗶𝘇𝗲𝗱 𝗹𝗼𝗴𝗴𝗶𝗻𝗴 𝗮𝗻𝗱 𝗺𝗼𝗻𝗶𝘁𝗼𝗿𝗶𝗻𝗴 with Azure Monitor Infrastructure as Code & Automation: ⠗ 𝗧𝗲𝗿𝗿𝗮𝗳𝗼𝗿𝗺 scripts for complete infrastructure deployment ⠗ 𝗔𝘇𝘂𝗿𝗲 𝗗𝗲𝘃𝗢𝗽𝘀 𝗖𝗜/𝗖𝗗 pipelines for automated deployments ⠗ 𝗠𝘂𝗹𝘁𝗶-𝗲𝗻𝘃𝗶𝗿𝗼𝗻𝗺𝗲𝗻𝘁 𝘀𝗲𝘁𝘂𝗽 (Development/Production) with proper logical segregation ⠗ 𝗗𝗶𝘀𝗮𝘀𝘁𝗲𝗿 𝗥𝗲𝗰𝗼𝘃𝗲𝗿𝘆 planning with defined RTO/RPO objectives Security Hardening: ⠗ 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗗𝗲𝗳𝗲𝗻𝗱𝗲𝗿 𝗳𝗼𝗿 𝗖𝗹𝗼𝘂𝗱 integration and remediation ⠗ 𝗭𝗲𝗿𝗼-𝘁𝗿𝘂𝘀𝘁 architecture implementation ⠗ 𝗥𝗕𝗔𝗖 and access controls enforcement ⠗ 𝗦𝗲𝗰𝗿𝗲𝘁𝘀 management best practices ⠗ 𝗡𝗲𝘁𝘄𝗼𝗿𝗸 𝘀𝗲𝗴𝗺𝗲𝗻𝘁𝗮𝘁𝗶𝗼𝗻 and private connectivity 📊 Suggested Infrastructure Diagram Elements: Your diagram should illustrate: Top Layer (User Access): ⠗ Azure DevOps with Git integration ⠗ Developer access through Azure Bastion ⠗ Multi-factor authentication flows Security Layer: ⠗ Azure Firewall and WAF protection ⠗ API Gateway (APIM) with authentication ⠗ Private Link connections ⠗ Network Security Groups (NSGs) Application Layer: ⠗ Containerized microservices in App Services ⠗ Shared services and common libraries ⠗ Environment-specific configurations Data Layer: ⠗ Azure SQL with Private Endpoint ⠗ Azure Key Vault for secrets ⠗ Backup and disaster recovery components Monitoring & Compliance: ⠗ Azure Monitor and Application Insights ⠗ Microsoft Defender for Cloud ⠗ Centralized logging pipeline 🚀 Technologies I Master: 𝗖𝗹𝗼𝘂𝗱 𝗣𝗹𝗮𝘁𝗳𝗼𝗿𝗺𝘀: Microsoft Azure, Azure Resource Manager (ARM) 𝗜𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 𝗮𝘀 𝗖𝗼𝗱𝗲: Terraform 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗧𝗼𝗼𝗹𝘀: Azure Key Vault, Microsoft Defender for Cloud, Azure Firewall, WAF 𝗗𝗲𝘃𝗢𝗽𝘀: Azure DevOps, CI/CD Pipelines 𝗠𝗼𝗻𝗶𝘁𝗼𝗿𝗶𝗻𝗴: Azure Monitor, Application Insights, Microsoft Sentinel 𝗡𝗲𝘁𝘄𝗼𝗿𝗸𝗶𝗻𝗴: Azure Virtual Networks, Private Link, NSGs, Azure Bastion 𝗜𝗱𝗲𝗻𝘁𝗶𝘁𝘆: Microsoft Identity Platform, Azure EntraID, RBAC 𝗗𝗮𝘁𝗮𝗯𝗮𝘀𝗲𝘀: Azure SQL Database, Private Endpoints, High Availability setup 📈 Project Outcomes You Can Expect: ✅ Security Risk Reduction: Increased Azure defender score - guaranteed. ✅ Zero Public Database Access: All databases protected behind private endpoints ✅ API Security: All endpoints require authentication and firewall protection ✅ Automated Deployments: Complete Infrastructure as Code with Terraform ✅ Environment Segregation: Proper Dev/Prod isolation with RBAC controls ✅ Disaster Recovery: Tested DR plan with documented procedures ✅ Compliance Ready: All Azure Defender recommendations resolved ✅ Documentation: Complete handover documentation and runbooks 🏆 Why Choose Me: 𝐀𝐳𝐮𝐫𝐞 𝐂𝐞𝐫𝐭𝐢𝐟𝐢𝐞𝐝 𝐄𝐱𝐩𝐞𝐫𝐭 with deep expertise in security architecture 𝗜𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 𝗮𝘀 𝗖𝗼𝗱𝗲 𝘀𝗽𝗲𝗰𝗶𝗮𝗹𝗶𝘀𝘁 with Terraform and Azure ARM 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆-𝗳𝗶𝗿𝘀𝘁 𝗮𝗽𝗽𝗿𝗼𝗮𝗰𝗵 following Azure Well-Architected Framework principles 𝗗𝗲𝘃𝗢𝗽𝘀 𝗮𝘂𝘁𝗼𝗺𝗮𝘁𝗶𝗼𝗻 expert with proven CI/CD implementations 𝗘𝗻𝘁𝗲𝗿𝗽𝗿𝗶𝘀𝗲 𝗲𝘅𝗽𝗲𝗿𝗶𝗲𝗻𝗰𝗲 with multi-environment, high-availability setups 𝗖𝗼𝗺𝗽𝗹𝗲𝘁𝗲 𝗽𝗿𝗼𝗷𝗲𝗰𝘁 𝗱𝗲𝗹𝗶𝘃𝗲𝗿𝘆 including documentation and knowledge transfer 📋 Project Phases: 𝗣𝗵𝗮𝘀𝗲 𝟭: Foundational Infrastructure (VNets, NSGs, Key Vault) 𝗣𝗵𝗮𝘀𝗲 𝟮: API Gateway and Services (APIM, Authentication) 𝗣𝗵𝗮𝘀𝗲 𝟯: High Availability Configuration 𝗣𝗵𝗮𝘀𝗲 𝟰: Security Hardening (WAF, Private Link, Monitoring) 𝗣𝗵𝗮𝘀𝗲 𝟱: Documentation and Handover Each phase includes 𝘃𝗲𝗿𝗶𝗳𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝘁𝗲𝘀𝘁𝗶𝗻𝗴 and 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝘃𝗮𝗹𝗶𝗱𝗮𝘁𝗶𝗼𝗻. 𝗥𝗲𝗮𝗱𝘆 𝘁𝗼 𝘀𝗲𝗰𝘂𝗿𝗲 𝘆𝗼𝘂𝗿 𝗶𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲 𝗮𝗻𝗱 𝗮𝘂𝘁𝗼𝗺𝗮𝘁𝗲 𝘆𝗼𝘂𝗿 𝗱𝗲𝗽𝗹𝗼𝘆𝗺𝗲𝗻𝘁𝘀? Let's discuss how I can help you achieve your security goals while building a robust, scalable Azure infrastructure that follows industry best practices. 💬𝗠𝗲𝘀𝘀𝗮𝗴𝗲 𝗺𝗲 to discuss your specific requirements and timeline!