Full-Stack Developer for MSSP SaaS Portal

# Full-Stack Developer / Team Needed — Multi-Tenant MSSP SaaS Portal & Wazuh Agent Installer **Project Type:** Web Application + Backend Integration + Windows/Linux Installer **Engagement:** Fixed-price, milestone-based project **Experience Level:** Expert ### Project Overview We are a European cybersecurity software vendor developing a cloud-based Managed Security Service Provider (MSSP) platform built around our existing SIEM solution, Energy Logserver. We are looking for an experienced developer or small development team to build a modern, multi-tenant MSSP web portal and a branded installer for the existing open-source Wazuh Agent. The goal is to create a self-service platform where customers can register, connect their infrastructure, download an agent installer, and assign an MSSP partner to manage their security. MSSP partners will have their own accounts and dashboards to manage multiple customers. **Important:** We are NOT looking to develop a new SIEM or a new endpoint monitoring agent. Both Energy Logserver SIEM and Wazuh Agent already exist. The project focuses on the web portal, backend services, provisioning, integration and agent installation automation. ### 1. Customer Portal Develop a modern web application where customers can: - Register and create an organization. - Create a unique public organization ID. - Manage users and permissions. - Connect to an MSSP partner using an invitation or partner ID. - Change or disconnect their MSSP partner. - Download a branded Energy Agent installer. - View connected agents and their status. - View basic security alerts, reports and service usage. ### 2. MSSP Partner Portal Partners should be able to: - Register and create a partner organization. - Create a unique public partner ID and invitation link. - Invite customers to connect. - View and manage customers who have approved the connection. - View customer agents and their status. - Access authorized customer security information. - Manage customer connections and permissions. A customer must explicitly approve the relationship with a partner. Customers retain ownership of their data. ### 3. Multi-Tenant Backend and Provisioning Develop a backend that: - Manages customers, partners, organizations and users. - Automatically generates internal tenant IDs. - Manages customer–partner relationships and permissions. - Integrates with Energy Logserver through APIs. - Provisions tenant-specific resources, access permissions and configurations. - Maintains secure mappings between tenants and Wazuh agents. - Provides audit logs and administrative functions. All customers will share one Energy Logserver SIEM infrastructure, with strict logical separation of customer data. The developer will work with our engineering team to define the exact Energy Logserver API integration. ### 4. Energy Agent Installer — Wazuh Wrapper Develop a branded Windows installer called **Energy Agent Setup**, which installs and configures the standard Wazuh Agent. Requirements: - Use the existing Wazuh Agent without modifying its core functionality. - Provide a simple, branded installation experience. - Download or bundle the approved Wazuh Agent package. - Support secure enrollment using a short-lived, customer-specific activation token. - Communicate with the MSSP Enrollment API. - Automatically configure the appropriate Wazuh Manager connection. - Register the agent and associate it with the correct tenant in the backend. - Install and start the Wazuh Agent service. - Provide installation status and error handling. - Support silent installation for enterprise deployment. The installer must not contain shared private keys or permanent customer credentials. A Linux installation package or script is also required. ### 5. Secure Enrollment Service Develop an enrollment backend responsible for: - Generating and validating activation tokens. - Associating each token with the correct tenant. - Selecting the appropriate Wazuh Manager. - Registering agents using supported Wazuh mechanisms. - Maintaining agent-to-tenant mappings. - Preventing unauthorized or duplicate registration. - Supporting token expiration and revocation. - Reporting installation and agent connection status. The Wazuh Agent itself does not need to understand the tenant ID. Tenant mapping will be managed by the backend. ### 6. Technology Preferences We prefer the following technologies, but are open to well-justified alternatives: - Frontend: React, TypeScript, Tailwind CSS - Backend: Python / FastAPI - Database: PostgreSQL - Authentication: OIDC / Keycloak - Windows installer: C# / .NET - Linux installer: Bash, DEB/RPM - Deployment: Docker / Docker Compose Experience with Wazuh API, multi-tenant SaaS platforms, RBAC, secure enrollment and cybersecurity applications is highly desirable. ### 7. Expected Deliverables - Complete source code and repository - Responsive customer and partner portals - Backend API and database schema - Secure authentication and authorization - Customer/partner relationship management - Energy Logserver integration - Wazuh enrollment integration - Branded Windows installer - Linux installation package - Docker-based deployment - API documentation - Installation and administration documentation - Automated tests and handover to our engineering team All custom-developed source code and deliverables must be transferred to our company under the agreed contract, subject to applicable third-party open-source licenses. ### 8. Project Execution We want to divide the project into clearly defined milestones, starting with architecture and UI design, followed by backend development, agent enrollment, integration and testing. Each milestone will have defined deliverables and acceptance criteria. ### 9. When Applying Please provide: 1. Examples of SaaS portals or multi-tenant applications you have developed. 2. Your experience with Wazuh, SIEM platforms or security monitoring. 3. Your experience building Windows installers and backend enrollment services. 4. Your proposed technical architecture and development approach. 5. Your estimated timeline, team size and budget. 6. Whether you can deliver both the portal and installer or only part of the project. **Please start your proposal with the words "MSSP PLATFORM" so we know you have read the requirements.** We are looking for a reliable developer or team interested in building a long-term cybersecurity SaaS product, not just a website.