WordPress Infrastructure & Security Consultant

Title: WordPress Security & Infrastructure Consultant — consolidate ~80 client sites onto managed hosting (Kinsta), remove personal data, harden against future breaches We're a digital agency looking for an experienced WordPress infrastructure and security consultant to lead a portfolio-wide clean-up and migration following a recent security incident. We maintain ~80 client websites under a "SiteCare" retainer — roughly 71 WordPress, plus a handful of Next.js, Astro and Shopify sites. They're currently scattered across Laravel Forge, Cloudways, Kinsta, Vercel and a few other/unknown hosts, with inconsistent update, backup and PHP-version status. We need this consolidated, secured and put on a repeatable maintenance footing. What we need you to do: Audit every site's current setup (hosting, WP/PHP versions, plugins, backups, DNS, access) working alongside our internal team, and fill the gaps in our tracker. Design and stand up a consolidated hosting infrastructure — most likely on Kinsta (already in use for some sites) — where all sites can live, with a clear standard for staging, backups, updates and security. Migrate the sites onto that infrastructure with minimal downtime. Remove all personal data stored insecurely on the sites (e.g. form submissions retained in the WordPress backend / Gravity Forms), and advise on GDPR-compliant handling going forward. Harden every site and the platform against reintrusion (updates, WAF, access control, monitoring). Build a repeatable ongoing maintenance process our internal team can run, and help us communicate the changes to clients. You'll work closely with our internal developers and ops team — we want knowledge transferred in, not locked to you. Please share relevant experience with agency-scale WordPress fleets, managed hosting migrations (Kinsta a plus), and post-incident remediation. Tell us how you'd approach the first two weeks.