IanCSS
Work

Software, servers and security, from one engineer.

I work freelance with teams that need something built, kept running or made safer. Often all three, which is easier when one person can see the whole picture.

What I do

Software development

Web applications, APIs, integrations and databases, mainly in PHP/Laravel and TypeScript. New builds, or taking over and improving what you already have.

More about this

Server management & cloud

Linux servers and AWS environments: setup, patching, monitoring, automated deployments and keeping the cloud bill under control.

More about this

Cyber security

Secure code reviews, application and API security, server hardening and encryption. You get clear findings, priorities and help with the fixes.

More about this

AI & apps, where they help

Automation and reporting added to existing software, and mobile apps. Only when it is the right tool for the job.

Selected work

Software

  • API integration platform

    More than 50 different APIs managed in one place, with error handling, rate limiting and monitoring.

  • OData interface system

    Standardised data access across multiple enterprise systems, with generated interfaces.

  • Central product dashboard

    One web dashboard for managing multiple product environments, with role-based access.

  • Standardised database platform

    Data from many sources in one format, with automated imports and validation.

Servers & cloud

  • Automated monitoring

    Real-time alerting for deployed products, with dashboards and notification rules.

  • AWS cost management

    Tracking and predicting cloud spending, with budget alerts and savings recommendations.

  • Docker deployment automation

    Continuous delivery of containers, with automated testing and rollback.

  • AWS API integration platform

    An extensible platform for managed services, with secure authentication and rate limiting.

Security

  • Secure server management

    More than 25 Linux production servers kept safe with automated patching, hardening and intrusion detection.

  • User-level data encryption

    Protecting sensitive data across application layers, including key management.

  • Security code reviews

    Finding vulnerabilities and delivering reports with concrete remediation steps.

  • Central Elasticsearch environment

    Tracking and analysing data across applications, with automated ingestion and dashboards.

How a project goes
  1. Talk

    We work out what is actually slow, risky or broken, and what would be worth fixing first.

  2. Assess

    I look at the code and servers, and you get written findings with clear priorities.

  3. Build

    New work or fixes, with tests, monitoring and a way to roll back.

  4. Hand over

    Documentation and a walk-through, so your team can own it without me.

Have something in mind?

Send a short description of what you need. I usually reply within 1 to 2 business days.

Get in touch