DevsLane is engaging an experienced Contractor to modernize a production API gateway and identity/authentication platform running on AWS. This is a fixed-scope, fixed-price contract engagement — a hands-on, intensive delivery role for someone who has led production cloud migrations of this nature before and is comfortable operating within a controlled, reversible change process.
Company Profile
DevsLane is a leading Software Consultancy Firm based in India. We offer a wide range of services, from proof-of-concepts to end-to-end product development, partnering with clients worldwide to bring their ideas to life.
Engagement Details
Engagement Type
Contractor — fixed-scope, fixed-price contract (project-based, single delivery)
Commitment
Full-time; focused, intensive delivery window
Location
Remote
Discipline
Cloud Infrastructure / DevOps / Identity & Access Management
Environment
Production, AWS-hosted, change-controlled
Hiring Entity
DevsLane (engaged for a confidential client program)
Compensation
Fixed price — budget to be finalized following client discussion
Priority
Urgent — immediate availability preferred
Engagement Overview
The work spans three parallel tracks: migrating a self-hosted API gateway to a managed AWS service, upgrading a legacy identity/authentication platform to a current major version, and modernizing the backing database to a highly available configuration. The two non-negotiable requirements are a zero-downtime cutover and no loss of user or credential data.
Scope of Work
Track 1 — API Gateway Migration
- Replace a self-hosted, open-source API gateway with a managed AWS API Gateway.
- Re-implement routing, rate limiting, access control, CORS, and API-key handling using AWS-native equivalents.
- Build OIDC authentication via serverless (Lambda) authorizers, including token caching and latency optimization.
- Deliver the target platform as Infrastructure-as-Code and decommission the legacy gateway.
Track 2 — Identity Platform Upgrade
- Upgrade a legacy self-hosted identity platform (Keycloak) to a current major version — a significant version jump involving a full configuration rebuild.
- Migrate and validate all identity data — users, credentials, groups, roles, and authentication flows — with zero data loss.
- Recompile and validate any custom server extensions against the new runtime.
- Stand up a highly available, multi-node cluster across multiple availability zones.
Track 3 — Database Modernization
- Perform a major-version PostgreSQL upgrade on managed AWS RDS.
- Move the database to a Multi-AZ, high-availability configuration.
- Use a reversible deployment strategy for the schema migration, with data-integrity verification at each step.
Delivery Approach
- Build the new stack in parallel alongside the running production system.
- Shift traffic gradually; validate on a small live slice before full cutover.
- Maintain tested rollback paths at every stage of the migration.
- Preserve continuity of authentication and user data throughout.
- Operate within a change-controlled environment with explicit go / no-go gates.
Skills & Experience
Must Have
- Strong hands-on AWS: API Gateway, Lambda, VPC networking, and RDS.
- Infrastructure-as-Code experience (Terraform preferred).
- Deep Keycloak experience: OIDC / OAuth2 / SAML, realm and user migration, custom SPI providers.
- PostgreSQL on RDS: major-version upgrades, Multi-AZ, and schema migrations.
- A track record of delivering zero-downtime production cutovers.
Nice to Have
- Prior experience upgrading Keycloak across multiple major releases.
- Performance and load testing experience (authentication throughput, latency comparison).
- Familiarity with security validation and working under formal compliance and audit requirements.
Key Deliverables
- Current-state assessment and target architecture design.
- Infrastructure-as-Code for the new gateway and identity platform.
- The migrated, validated, highly available identity platform on the current version.
- Migration and rollback runbooks.
- Validation and performance test results.
- Knowledge handover to the operations team.
Working Context
- This is a production, regulated environment; all changes are controlled, tested, and reversible.
- The delivery window is focused and intensive — full-time availability is expected for the duration.
- Deep familiarity with production incident response and careful, staged rollout is valued over speed alone.
Compensation
This is a fixed-price contract engagement. The final budget will be determined based on scope alignment and confirmed after discussion with the candidate.
How to Apply
Fill out the form here: .
Shortlisted candidates will be contacted for further details.
Work Location: Remote
