
Closed
Posted
I’m ready to replace every paid SaaS we use with a fully self-hosted, open-source stack and I need an experienced engineer to guide and execute the transition from start to finish. The core of the project will run on Linux, though I’m happy to follow your advice if another OS layer adds stability or performance. The mandatory components include: Samba in AD mode providing file sharing, print and authentication services; a hardened Hypervisor for our VDI estate (I’m still weighing KVM, Xen or VirtualBox and welcome your input); FleetDM for device visibility across our Windows and macOS endpoints; and KeePassXC rolled out per user with tailored permissions. Beyond installation I’ll need: • Migration out of Dropbox to the new Samba file server, setting precise share and ACL rules so every team member lands with just the access they need. • Shell/Bash scripts that disable password saving in all major browsers company-wide. • Group Policy–style management (or equivalent for macOS) to standardise settings, automate onboarding and keep the domains clean. • Network-level hardening: firewall rules, fail2ban/-equivalent, DDoS safeguards, plus any additional open-source tooling you recommend. • Clear documentation and short hand-over sessions so my internal IT can maintain everything once you’re done. Everything used must be genuinely open source—no freemium tiers or locked features. If you have deep experience knitting these tools together securely and can work collaboratively while documenting as you go, let’s talk details and milestones.
Project ID: 40516823
47 proposals
Remote project
Active 4 days ago
Set your budget and timeframe
Get paid for your work
Outline your proposal
It's free to sign up and bid on jobs
47 freelancers are bidding on average $36 USD/hour for this job

Hi. My Name is Taavi. I am from Estonia. I am migrate expert, solution architect and IT expert. I have done many migrations. I understand every aspect of IT. I troubleshoot easily. With me work gets done. You will get free support for work done, for two weeks and i can provide past project support too. I understand cloud providers, self hosting. Over 20 years of experience in IT
$35 USD in 40 days
7.7
7.7

Hello! We have extensive experience building self-hosted open-source IT environments on Linux, including identity and access management, secure file sharing, virtualization and endpoint management solutions. Our team regularly replaces SaaS platforms with robust on-prem architectures focused on security, scalability and long-term maintainability. We are highly experienced with Samba AD, Linux hardening, KVM virtualization, FleetDM, credential management systems, as well as network security hardening, firewall configuration, intrusion prevention and automation using Bash and Python for system-wide policies and onboarding workflows. We have delivered centralized authentication and file-sharing systems with strict ACLs, migrated large-scale data from cloud to secure on-prem environments and implemented cross-platform security policies across Windows and macOS, selecting and integrating the most suitable open-source components for each architecture. We would be happy to take full ownership of the transition ensuring your internal IT team can confidently operate and maintain the environment after delivery. Please, review our profile https://www.freelancer.com/u/tangramua where you can find detailed information about our company, our portfolio, and the client's recent reviews. Please contact us via Freelancer Chat to discuss your project in details. Best regards, Kateryna Sales department Tangram Canada Inc.
$30 USD in 5 days
7.4
7.4

Hi there, I will replace your SaaS stack with a fully open-source Ubuntu-based environment, deploying Samba in AD mode, a hardened KVM hypervisor for VDI, FleetDM for endpoint visibility, and company-wide KeePassXC with tailored access controls. - Samba (AD mode) on Ubuntu with precise share and ACL mappings and a scripted Dropbox-to-Samba migration preserving permissions. - Hardened KVM hypervisor deployment, VDI image builds, FleetDM server install, and centralized KeePassXC rollout with per-user keys. - Bash scripts to disable browser password saving, macOS configuration profiles for policy parity, and network hardening (firewall rules, fail2ban, DDoS mitigations). - Risk/quality-control: staged deployment with backup checkpoint and post-deploy validation. Skills: ✅ Ubuntu ✅ Samba (AD mode) ✅ FleetDM ✅ Bash scripting ✅ KVM / Hypervisor ✅ Firewall / fail2ban Certificates: ✅ Microsoft® Certified: MCSA | MCSE | MCT ✅ cPanel® & WHM Certified CWSA-2 Available to start immediately , Do you prefer an immediate in-place Dropbox→Samba migration preserving ACLs, or a staged department-by-department cutover? $40/hr · 20 hrs/week
$40 USD in 20 days
6.9
6.9

With over a decade's worth of expertise in system and IT administration, I'm well-prepared to not only execute the transition from paid SaaS to an open-source stack but also document it thoroughly for easier future management by your team. Throughout my career, I've accumulated vast experience in Linux-based operations matching the core nature of your project. Some relevant areas I excel at include network administration, network security, shell script management, as well as documentation. These skills will prove to be valuable in ensuring a smooth migration from Dropbox to the new Samba file server, enforcing appropriate access permissions and ACL rules for every user. Given our end goal of self-hosting with open-source tools, I can bring to the table extensive proficiency in numerous software and platforms such as AWS, Azure, Docker, Kubernetes and many more. This ensures that any potential challenges faced with your shortlisted tools—Sama in AD mode, FleetDM or KeePassXC—can be assessed effectively and resolved promptly with alternative open-source solutions if needed. Let's get collaborating on this project and revolutionize your infrastructure!
$50 USD in 40 days
7.2
7.2

Hi I can help replace your paid SaaS tools with a secure, fully self-hosted open-source infrastructure stack on Linux. The main technical challenge is integrating Samba AD, file sharing, endpoint visibility, VDI, password-management policy, browser hardening, and network security without creating access-control or maintenance issues. My solution would be to design a hardened architecture using Samba AD DC, precise ACL/share rules, KVM or Xen-based virtualization, FleetDM, KeePassXC deployment, Bash automation, firewall rules, fail2ban, and documented admin procedures. I can also migrate Dropbox files into Samba with clean folder mapping, permission groups, audit checks, and validation so each user only gets the access they need. For endpoint management, I can create scripts and policy-style controls for Windows and macOS to standardize onboarding, disable browser password saving, and maintain domain hygiene. I would also review hypervisor options and recommend the best fit based on security, VDI performance, backup strategy, and long-term maintenance. Security would be handled through least-privilege access, service hardening, logging, backups, firewall policy, intrusion protection, and clear internal IT handover documentation. My experience with Linux administration, Samba AD, virtualization, endpoint management, Bash scripting, open-source security tooling, and infrastructure migration fits this project well. Thanks, Hercules
$50 USD in 40 days
6.4
6.4

Certified AWS Solutions Architect – Professional Certified AWS Solutions Architect – Associate CISA Certified Security Expert 16+ Years of Industry Experience in DevOps, Cloud & Security Hi, I'm excited about the opportunity to help you transition from paid SaaS solutions to a fully self-hosted, open-source infrastructure. With 16+ years of experience designing secure Linux environments, virtualization platforms, identity management systems, and enterprise infrastructure, I can lead the deployment, migration, hardening, and documentation of your entire stack. How I Can Help: • Deploy and configure Samba AD with authentication, file sharing, and print services • Design and implement a secure VDI environment using KVM/Xen based on your requirements • Deploy FleetDM for centralized endpoint visibility and management • Roll out KeePassXC with role-based access controls • Migrate data from Dropbox with granular ACL and share permissions • Implement Group Policy-style management for Windows and macOS devices • Harden infrastructure with firewall policies, Fail2Ban, endpoint security, and monitoring • Deliver complete documentation and knowledge-transfer sessions Regarding budget, I would prefer to discuss it after reviewing the complete scope, infrastructure size, user count, and migration requirements. Availability: 8 hours/day and available to start immediately. Best Regards, SHD
$25 USD in 40 days
5.3
5.3

Greetings! I'll design and deploy your full open-source stack covering Samba in AD mode, a hardened KVM hypervisor for your VDI estate, FleetDM across Windows and macOS endpoints, and KeePassXC with per-user permissions, then migrate your Dropbox data with precise ACL rules, write Bash scripts to lock down browser password saving company-wide, apply firewall and fail2ban hardening, and deliver clear documentation plus handover sessions so your internal IT can take over confidently. Any specific timeline milestones you'd like me to plan around?
$40 USD in 30 days
5.3
5.3

Let's do this. Samba4, Debian or Alma. Fail2ban, OPENVPN, proxmox. I have similar projects. I'll wait your contact.
$40 USD in 40 days
5.2
5.2

As an experienced cybersecurity consultant specializing in network administration and security, I have successfully navigated complex infrastructure deployments just like the one you're seeking for. Throughout my more than 7 years in the field, I've worked with top-tier financial institutions and businesses with a zero tolerance for breaches, ensuring their sensitive data remains secure against constantly evolving threat landscapes. My expertise aligns perfectly with your project's needs. I'm well-versed in Linux OS and can make informed recommendations regarding potential alternatives to ensure both stability and performance. I'm familiar with all major hypervisors, including KVM, Xen, and VirtualBox, and can guide you towards deploying a hardened one to support your VDI estate optimally.
$45 USD in 40 days
4.8
4.8

Your goal of transitioning to a self-hosted, open-source stack resonates with my experience deploying and managing similar infrastructure, including Samba as an AD domain controller and KVM-based VDI environments for enterprise clients. I understand the intricacies of achieving robust, secure, and performant open-source solutions. My approach will focus on a phased deployment, beginning with Samba configuration and hardening, followed by the selection and setup of the hypervisor. I recommend KVM for its performance, scalability, and strong community support, integrating it with appropriate storage solutions and network configurations. FleetDM will then be deployed and configured for comprehensive endpoint visibility, with a strong emphasis on security best practices throughout. Given your consideration of hypervisor options, what are your primary concerns regarding VDI performance or management that will inform your final decision? I’m eager to discuss how my technical expertise can directly address these challenges and ensure a seamless transition. Let’s schedule a brief call to dive deeper.
$40 USD in 7 days
4.5
4.5

Hello this is very much in my wheelhouse. I’ve built and maintained Linux based infrastructure involving Samba, virtualization, network hardening, access control, automation, and large-scale system administration. For a project like this, I’d focus first on designing a stable architecture, then handle the migration from Dropbox, implement Samba AD with proper ACLs, deploy a hardened KVM based virtualization layer, standardize endpoint management, and document everything so your internal team can operate it independently. I prefer open-source-first environments and can recommend proven solutions rather than assembling a stack of disconnected tools. Happy to discuss architecture choices and migration strategy before we define milestones.
$38 USD in 40 days
4.0
4.0

I am proficient in Linux operation and maintenance technology. I can provide you with open source software deployment services and complete security reinforcement in Linux. If you have any further needs, please communicate with me. You should show me the code and homepage of your open source software, especially the technical documents required for operation and maintenance. I will specify professional technical solutions for you. I have home lab virtualization servers running in my home, so I can do all sorts of up-front experiments. Looking forward to your contact.
$38 USD in 40 days
4.1
4.1

Hello there, I can design and implement a fully self-hosted open-source stack with Samba AD, secure file sharing/ACLs, hypervisor guidance, FleetDM rollout, KeePassXC deployment, browser hardening scripts, and network security controls. I’ll handle the Dropbox migration, Windows/macOS policy management, firewall/fail2ban hardening, documentation, and handover sessions so your internal IT team can maintain the environment confidently.
$25 USD in 40 days
3.9
3.9

Hi, Your vision to ditch paid SaaS for a rock-solid open-source Linux infrastructure is brilliant and right in my wheelhouse. I've extensively deployed Samba in AD mode for file serving with precise ACLs, crafted Bash scripts for policy automation, and implemented network hardening that includes firewall and fail2ban setups. I can guide the hypervisor choice by weighing KVM, Xen, and VirtualBox based on your needs, ensuring a tailored, stable solution. Comprehensive documentation and hands-on handover sessions are integral to my workflow, making your IT team confident and self-sufficient. Let's map out the migration phases and start building your powerhouse! If your hypervisor could talk, would it tell tales of KVM's charm, Xen's power, or VirtualBox's quirks? Thanks,
$25 USD in 26 days
3.3
3.3

With my extensive background in developing and maintaining high-performance, intelligent platforms, I'm well-equipped to tackle your Open Source Infrastructure Deployment project. My experience with Linux as a foundation for comprehensive systems will ensure stability and performance. I'm also no stranger to FleetDM, Samba in AD mode, hypervisor technologies like KVM, Xen, VirtualBox or even mindful of other potential solutions aside from the ones we've discussed that would enhance your requirements. Beyond installation, I understand the importance of seamless transitions. I will migrate your company from Dropbox to the new Samba file server while expertly configuring precise share and ACL rules to grant only necessary access. Additionally, my mastery of Shell/Bash scripting will allow me to disable password saving on all major browsers for increased security. Group Policy-style management is another competency of mine across multiple OS types. Following your need for network-level hardening, I'll bring my familiarity with additional open-source tools like fail2ban equivalent and ddos safeguard for reinforcing your existing security system. Moreover, as someone keen on implementing robust documentation strategies throughout projects and embodying knowledge transfer practices, hand-off sessions will comprehensively cover everything allowing your internal IT team to navigate seamlessly within this new infrastructure post-deployment
$38 USD in 40 days
3.4
3.4

Hi there! I can start immediately. This project is a good fit for my Linux system administration and open source infrastructure experience. Migrating from SaaS to a fully self-hosted stack is a process I’ve guided teams through before, and I’m confident I can help you build a robust, secure environment using Samba in AD mode, a hardened KVM or Xen hypervisor, FleetDM, and KeePassXC. I’ll handle the end-to-end deployment, from configuring each component to migrating your file shares with accurate permissions, scripting browser configs, and setting up group policy–style management across Windows and macOS. You’ll get production-ready infrastructure with clear documentation and concise handover sessions, so your team can manage everything easily moving forward. I’ve worked with Ubuntu, Samba AD, KVM, FleetDM, network security hardening, and Bash scripting in similar migration and automation projects. My approach ensures the solutions are scalable, reliable, and easy to maintain, with a focus on open-source compliance throughout. Looking forward to discussing your transition to a fully open-source stack. Best regards, Oleksandr
$25 USD in 14 days
0.0
0.0

Howdy! This project is exactly the kind of end to end infrastructure work I enjoy most, and your instinct to consolidate around a fully open source, self hosted stack is the right long term call. My recommendation for the hypervisor layer would be KVM with Proxmox VE on top, giving you a mature, actively maintained VDI platform with a clean web UI, live migration, and no licensing ceilings. Samba in Active Directory mode will anchor your authentication, file sharing, and print services, and I would layer in OpenLDAP backed group policy enforcement through RSAT compatible tooling and Zentyal or similar for macOS MDM style policy via an open source profile manager. FleetDM integrates cleanly into this model for cross platform device visibility, and KeePassXC with KeeShare for per user vaults and scoped permissions rounds out the credential management side without touching any freemium tier. Thank you. Marcos.
$39 USD in 40 days
0.0
0.0

Hi, I will lead the transition to a fully self-hosted, open-source stack that meets your requirements seamlessly. With extensive experience in Linux environments and the necessary tools, I’ll ensure a robust setup with Samba for file sharing and authentication, a secure hypervisor for your VDI, FleetDM for device visibility, and KeePassXC deployed effectively. I’ve successfully migrated teams from SaaS solutions to self-hosted infrastructures, implementing precise share and ACL rules for Samba to ensure controlled access. I’ll create shell scripts to enforce password policies and establish a management system akin to Group Policy for standardizing settings across your endpoints. My approach includes comprehensive network hardening using tools like fail2ban, along with additional security measures tailored to your needs. I’m committed to clear documentation and training sessions to empower your internal IT team for ongoing maintenance. I’m ready to discuss your preferences for hypervisor selection and any additional recommendations you might need. Thank you.
$39 USD in 40 days
0.0
0.0

Wow! This is ideal fit for me Hello, I went through your project description and it seems like our team is a great fit for this job. I'm familiar with this kind of task and have many years of experience on Linux, Shell Script, Ubuntu, Network Administration, Documentation, Open Source, Network Security, Bash Lets connect in chat so that We discuss further. Thank You
$42 USD in 40 days
0.0
0.0

Hi, I reviewed your project and I can help you build and deploy a full open-source infrastructure system. I have experience with Linux servers, Samba Active Directory setup, file sharing systems, virtualization (KVM), endpoint management tools, and network security hardening. I can set up Samba AD for file sharing, authentication, and access control, and configure proper user permissions so each team only sees what they need. I can also help migrate your Dropbox data safely to the new system. For device monitoring, I can deploy FleetDM for Windows and macOS management. I can also set up KeePassXC rollout and user-based access policies. For security, I will implement firewall rules, fail2ban, SSH hardening, and system-wide policies using scripts and Linux group policies or equivalent tools for macOS. I will also provide clear documentation and a simple handover guide so your team can manage everything easily after delivery.
$35 USD in 40 days
0.0
0.0

Los Angeles, United States
Payment method verified
Member since Sep 12, 2016
min $50 USD / hour
$10-30 USD
$10-100 USD
$750-1500 USD
₹600-1500 INR
$15-25 USD / hour
$10-30 USD
$250-750 USD
₹1500-12500 INR
₹750-1250 INR / hour
₹1500-12500 INR
€12-18 EUR / hour
$30-250 USD
£750-1500 GBP
₹1500-12500 INR
$30-250 USD
$25-50 AUD / hour
₹12500-37500 INR
$250-750 USD
$1500-3000 USD
min $50 USD / hour
$250-750 USD