Linux System Administrator / Security Specialist – WordPress Server Hardening & Security Audit

Job Description: We are seeking an experienced Linux system administrator and security professional to conduct a comprehensive security audit and harden our web server hosting a live WordPress website. Key Deliverables: OS & SSH Hardening: Audit listening ports, enforce SSH key authentication, disable direct root login, configure UFW firewall, and set up Fail2ban for brute-force protection. Web Server Configuration: Lock down Nginx/Apache configs, restrict access to wp-config.php, disable PHP execution in /wp-content/uploads/, and block XML-RPC abuse. Permissions & Access Control: Correct file and directory permissions (644/755) and review user privileges/sudo rules. Malware & Persistence Scan: Inspect existing crontabs, background processes, and web directories for unverified scripts, backdoors, or cryptominers. Final Report: Provide a brief checklist/summary of all actions taken and maintenance recommendations. Requirements: Proven track record in Linux server administration (Ubuntu/Debian or RHEL/CentOS). Deep understanding of web server security (Nginx/Apache/PHP-FPM) and WordPress security best practices. Ability to implement changes safely without breaking site functionality or causing downtime.