Senior PHP Developer Needed to Stabilize & Secure Custom CMS (HIPAA Compliance + NDA Required) - Contract to Hire
I need an experienced PHP developer to help stabilize, secure, and complete an existing custom CMS for nuoutlook.org.
The platform is already built in PHP and includes several completed or partially completed sections:
•Intake system
• Role-based user access / permissions
• Resource repository / resource directory
• Management/admin section
• Client-side portal with Training area
The original developer is currently unavailable, and I need someone who can step in quickly, review the existing codebase, and get the platform functioning reliably.
Highest Priority: Security, HIPAA Compliance & Confidentiality
This platform contains sensitive client information, including SSA-related client data. Security, confidentiality, and HIPAA-aware development practices are required.
The selected developer will be required to:
• Sign a confidentiality / non-disclosure agreement (NDA)
• Follow secure handling practices for sensitive data
• Maintain strict confidentiality regarding all client and organizational information
Experience with the following is preferred:
• Secure PHP development
• Role-based access control
• Secure authentication/session handling
• Database security
• Identifying and remediating vulnerabilities
• Working with existing/legacy PHP systems
Phase 1 Scope (Stabilization Only)
This project is NOT a full rebuild.
The goal of Phase 1 is to:
• Review the existing custom PHP system
• Identify critical functionality and security issues
• Fix the highest-priority problems
• Stabilize login, role permissions, and intake workflows
• Get the management/admin section functioning reliably
• Provide brief documentation and recommended next steps
This is a nonprofit organization currently being personally funded, so I am looking for someone practical, efficient, and experienced with stabilizing existing PHP systems rather than rebuilding everything from scratch.
Please Include
• Examples of PHP projects you have worked on
• Any experience with healthcare/security-sensitive systems
• Experience working on unfinished or inherited codebases
• Your availability for an initial review
The platform is already built in PHP and includes several completed or partially completed sections:
•Intake system
• Role-based user access / permissions
• Resource repository / resource directory
• Management/admin section
• Client-side portal with Training area
The original developer is currently unavailable, and I need someone who can step in quickly, review the existing codebase, and get the platform functioning reliably.
Highest Priority: Security, HIPAA Compliance & Confidentiality
This platform contains sensitive client information, including SSA-related client data. Security, confidentiality, and HIPAA-aware development practices are required.
The selected developer will be required to:
• Sign a confidentiality / non-disclosure agreement (NDA)
• Follow secure handling practices for sensitive data
• Maintain strict confidentiality regarding all client and organizational information
Experience with the following is preferred:
• Secure PHP development
• Role-based access control
• Secure authentication/session handling
• Database security
• Identifying and remediating vulnerabilities
• Working with existing/legacy PHP systems
Phase 1 Scope (Stabilization Only)
This project is NOT a full rebuild.
The goal of Phase 1 is to:
• Review the existing custom PHP system
• Identify critical functionality and security issues
• Fix the highest-priority problems
• Stabilize login, role permissions, and intake workflows
• Get the management/admin section functioning reliably
• Provide brief documentation and recommended next steps
This is a nonprofit organization currently being personally funded, so I am looking for someone practical, efficient, and experienced with stabilizing existing PHP systems rather than rebuilding everything from scratch.
Please Include
• Examples of PHP projects you have worked on
• Any experience with healthcare/security-sensitive systems
• Experience working on unfinished or inherited codebases
• Your availability for an initial review