DevsLane is engaging an experienced Contractor to modernize a production API gateway and identity/authentication platform running on AWS. This is a fixed-scope, fixed-price contract engagement — a hands-on, intensive delivery role for someone who has led production cloud migrations of this nature before and is comfortable operating within a controlled, reversible change process.

Company Profile

DevsLane is a leading Software Consultancy Firm based in India. We offer a wide range of services, from proof-of-concepts to end-to-end product development, partnering with clients worldwide to bring their ideas to life.

Engagement Details

Engagement Type

Contractor — fixed-scope, fixed-price contract (project-based, single delivery)

Commitment

Full-time; focused, intensive delivery window

Location

Remote

Discipline

Cloud Infrastructure / DevOps / Identity & Access Management

Environment

Production, AWS-hosted, change-controlled

Hiring Entity

DevsLane (engaged for a confidential client program)

Compensation

Fixed price — budget to be finalized following client discussion

Priority

Urgent — immediate availability preferred

Engagement Overview

The work spans three parallel tracks: migrating a self-hosted API gateway to a managed AWS service, upgrading a legacy identity/authentication platform to a current major version, and modernizing the backing database to a highly available configuration. The two non-negotiable requirements are a zero-downtime cutover and no loss of user or credential data.

Scope of Work

Track 1 — API Gateway Migration

- Replace a self-hosted, open-source API gateway with a managed AWS API Gateway.
- Re-implement routing, rate limiting, access control, CORS, and API-key handling using AWS-native equivalents.




- Build OIDC authentication via serverless (Lambda) authorizers, including token caching and latency optimization.
- Deliver the target platform as Infrastructure-as-Code and decommission the legacy gateway.

Track 2 — Identity Platform Upgrade

- Upgrade a legacy self-hosted identity platform (Keycloak) to a current major version — a significant version jump involving a full configuration rebuild.
- Migrate and validate all identity data — users, credentials, groups, roles, and authentication flows — with zero data loss.
- Recompile and validate any custom server extensions against the current runtime.
- Stand up a highly available, multi-node cluster across multiple availability zones.

Track 3 — Database Modernization

- Perform a major-version PostgreSQL upgrade on managed AWS RDS.
- Move the database to a Multi-AZ, high-availability configuration.
- Use a reversible deployment strategy for the schema migration, with data-integrity verification at each step.

Delivery Approach

- Build the current stack in parallel alongside the running production system.
- Shift traffic gradually; validate on a small live slice before full cutover.
- Maintain tested rollback paths at every stage of the migration.
- Preserve continuity of authentication and user data throughout.
- Operate within a change-controlled environment with explicit go / no-go gates.





Skills & Experience

Must Have

- Strong hands-on AWS: API Gateway, Lambda, VPC networking, and RDS.
- Infrastructure-as-Code experience (Terraform preferred).
- Deep Keycloak experience: OIDC / OAuth2 / SAML, realm and user migration, custom SPI providers.
- PostgreSQL on RDS: major-version upgrades, Multi-AZ, and schema migrations.
- A track record of delivering zero-downtime production cutovers.

Nice to Have

- Prior experience upgrading Keycloak across multiple major releases.
- Performance and load testing experience (authentication throughput, latency comparison).
- Familiarity with security validation and working under formal compliance and audit requirements.

Key Deliverables

- Current-state assessment and target architecture design.
- Infrastructure-as-Code for the new gateway and identity platform.
- The migrated, validated, highly available identity platform on the current version.
- Migration and rollback runbooks.
- Validation and performance test results.
- Knowledge handover to the operations team.

Working Context

- This is a production, regulated environment; all changes are controlled, tested, and reversible.
- The delivery window is focused and intensive — full-time availability is expected for the duration.
- Deep familiarity with production incident response and careful, staged rollout is valued over speed alone.

Compensation

This is a fixed-price contract engagement. The final budget will be determined based on scope alignment and confirmed after discussion with the candidate.

How to Apply

Fill out the form here: .

Shortlisted candidates will be contacted for further details.

Work Location: Remote

📌 DevOps Contractor (India)
🏢 DevsLane
📍 India