Senior PHP/MySQL Full-Stack Engineer and Technical Consultant for Integrated Web Applications

M/s Anya Enterprise, Doimukh, Arunachal Pradesh, is seeking an experienced Senior PHP/MySQL Full-Stack Engineer and Technical Consultant for the assessment, upgradation, integration, secure deployment and maintenance of an existing web portal and related administrative applications.

This is not a new website built from scratch. The selected professional must study the existing PHP/MySQL applications, databases, workflows, reports, user roles and integrations before implementing any changes. Existing functionality and records must be preserved.

The engagement will initially cover system assessment and implementation planning. Subject to project finalisation and satisfactory performance, the selected professional may continue through development, migration, deployment, training and maintenance.

## Project Scope

The project broadly covers:

* Public web portal and configurable CMS;
* Pages, notices, tenders, orders, galleries and documents;
* Rural-posting and personnel-management workflows;
* HR and employee-record applications;
* Budget, finance and expenditure-management functions;
* Salary, payroll and treasury-related reports;
* Role-based user and administrative dashboards;
* Document and media uploads;
* CSV-based employee master-data exchange;
* Migration of existing applications and databases;
* Deployment in a State Data Centre or comparable secured environment;
* Security testing and vulnerability remediation;
* User acceptance testing, training and documentation; and
* Post-deployment maintenance and technical handover.

Sensitive application information will be shared only with shortlisted candidates after completion of confidentiality requirements.

## Key Responsibilities

The selected professional may be required to:

1. Review existing applications, PHP source code and databases;
2. Understand workflows, permissions, reports and integrations;
3. Prepare an application, database and dependency inventory;
4. Identify functional, technical, security and performance gaps;
5. Upgrade or refactor existing PHP/MySQL applications;
6. Develop or improve the public portal and custom CMS;
7. Strengthen authentication, sessions and role-based access;
8. Improve data validation, reporting and approval workflows;
9. Implement secure document and media-upload facilities;
10. Develop APIs or controlled integration mechanisms;
11. Prepare data-mapping, migration and reconciliation procedures;
12. Conduct trial and final database migration;
13. Validate record counts, control totals, attachments and relationships;
14. Configure PHP, MySQL/MariaDB, Apache or Nginx on Linux;
15. Support SSL/TLS, logging, monitoring, backups and restoration;
16. Prepare deployment, cutover and rollback procedures;
17. Coordinate deployment in a State Data Centre;
18. Conduct functional, integration, regression and migration testing;
19. Support user acceptance testing and production go-live;
20. Address application-security vulnerabilities;
21. Support security-audit preparation and remediation;
22. Prepare user, administrator, deployment and maintenance manuals;
23. Conduct user and administrator training; and
24. Provide post-deployment maintenance and handover support.

## Controlled CSV Data Exchange

The project may require a controlled employee master-data CSV exchange containing:

* Source employee identifier;
* Common employee identifier;
* Employee name;
* Designation/category;
* Office or facility code;
* Service start and end dates; and
* Active/inactive status.

The professional should be able to implement a fixed CSV schema, UTF-8 encoding, mandatory-field validation, code mapping, duplicate detection, import preview, exception reporting, audit logging and reconciliation.

## Security Requirements

The applicant should understand:

* Secure password storage and authentication;
* Role-based access and least privilege;
* SQL injection, XSS and CSRF prevention;
* Secure session and cookie configuration;
* Secure file-upload validation and storage;
* Protection of credentials and configuration files;
* Server and database-access restrictions;
* Security logging and incident handling;
* Vulnerability assessment and remediation;
* Backup, restoration and rollback; and
* Preparation for an independent security audit.

Where a formal independent security audit is required, it will be undertaken through an appropriately eligible or empanelled security-audit organisation. The engineer may support preparation, remediation and retesting.

## Required Technical Skills

Applicants should have strong experience in most of the following:

* PHP 8.x;
* MySQL or MariaDB;
* HTML5, CSS3 and JavaScript;
* Bootstrap or a similar framework;
* Custom CMS development;
* Authentication and role-based access;
* REST APIs and system integration;
* CSV import/export and validation;
* Legacy database migration;
* Git and release management;
* Linux server administration;
* Apache or Nginx;
* SSL/TLS configuration;
* Backup and restoration;
* Application logging and monitoring;
* Web-application security;
* Testing and technical documentation.

Experience with Laravel, Symfony or another PHP framework is useful, but the applicant must also be comfortable maintaining custom or legacy PHP applications.

## Preferred Experience

Preference will be given to applicants with verifiable experience in:

* Government or public-sector applications;
* State Data Centre, NIC or Government cloud deployment;
* HR or employee-management systems;
* Payroll and salary applications;
* Budget, finance or accounting systems;
* Treasury-related reporting;
* Administrative approval workflows;
* Legacy application modernisation;
* Database migration and reconciliation;
* Security-audit remediation; and
* Long-term maintenance and technical handover.

## Preferred Profile

* Five or more years of relevant development experience;
* At least three years of substantial PHP/MySQL experience;
* Experience delivering or leading comparable applications;
* Good technical-documentation skills;
* Ability to work with existing applications and databases;
* Ability to communicate with non-technical stakeholders;
* Availability during Indian working hours; and
* Willingness to provide onsite support in Doimukh/Naharlagun if required.

Applicants with strong, verifiable experience may apply even if they do not meet every academic qualification.

## Initial Deliverables

The initial assignment may include:

* Existing-system assessment;
* Application and database inventory;
* Technical gap analysis;
* Recommended architecture and implementation approach;
* Milestone-wise work plan;
* Data-migration and reconciliation plan;
* CSV integration approach;
* Server/SDC deployment plan;
* Security-hardening approach;
* Testing and UAT plan;
* Training and documentation plan;
* Maintenance and handover plan; and
* Estimated effort, timeline and professional fee.

## Documents Required

Applicants should submit:

1. Updated CV;
2. Brief cover letter;
3. Relevant qualifications;
4. PHP/MySQL project experience;
5. Details of comparable Government, HR, payroll, finance or workflow projects;
6. Description of actual role in each project;
7. Portfolio links, where disclosure is permitted;
8. Work orders, completion certificates or references, where available;
9. Current location and availability;
10. Willingness to travel, if required; and
11. Separate fee expectations for the initial and extended engagement.

Applicants must not disclose confidential source code, credentials, databases or documents belonging to previous clients.

A shortlisted professional may be asked to sign a confidentiality undertaking, CV/credential-use consent, declaration of experience, conflict-of-interest declaration and project-availability undertaking.

## Commercial Proposal

Please quote separately for:

* Initial system assessment and implementation planning;
* Application development and upgradation;
* Migration and production deployment;
* Monthly maintenance and support; and
* Travel or onsite support, if applicable.

The quotation should state the scope, delivery period, estimated effort, payment milestones, taxes, exclusions and dependencies.

## Screening Questions

Please answer the following:

1. How many years of PHP and MySQL experience do you have?
2. Have you developed or maintained a custom CMS?
3. Have you worked on HR, payroll, finance or employee-management applications?
4. Have you upgraded a legacy PHP/MySQL application?
5. Have you migrated a production database? How did you reconcile the data?
6. How would you validate a controlled employee master-data CSV import?
7. Have you deployed an application in a Government or restricted data centre?
8. What security controls would you implement for document uploads?
9. Have you supported a security audit and remediation exercise?
10. Can you provide evidence of at least two comparable projects?
11. Are you available during Indian working hours and for occasional onsite support?
12. What are your expected charges for the initial and extended engagement?

Submit /drop your CV, cover letter, screening-question responses, relevant project list, references, availability and fee proposal.

M/s Anya Enterprise