Senior PHP/MySQL Full-Stack Engineer and Technical Consultant for Integrated Web Applications

M/s Anya Enterprise, Doimukh, Arunachal Pradesh, is seeking an experienced Senior PHP/MySQL Full-Stack Engineer and Technical Consultant for the assessment, upgradation, integration, secure deployment and maintenance of an existing web portal and related administrative applications. This is not a new website built from scratch. The selected professional must study the existing PHP/MySQL applications, databases, workflows, reports, user roles and integrations before implementing any changes. Existing functionality and records must be preserved. The engagement will initially cover system assessment and implementation planning. Subject to project finalisation and satisfactory performance, the selected professional may continue through development, migration, deployment, training and maintenance. ## Project Scope The project broadly covers: * Public web portal and configurable CMS; * Pages, notices, tenders, orders, galleries and documents; * Rural-posting and personnel-management workflows; * HR and employee-record applications; * Budget, finance and expenditure-management functions; * Salary, payroll and treasury-related reports; * Role-based user and administrative dashboards; * Document and media uploads; * CSV-based employee master-data exchange; * Migration of existing applications and databases; * Deployment in a State Data Centre or comparable secured environment; * Security testing and vulnerability remediation; * User acceptance testing, training and documentation; and * Post-deployment maintenance and technical handover. Sensitive application information will be shared only with shortlisted candidates after completion of confidentiality requirements. ## Key Responsibilities The selected professional may be required to: 1. Review existing applications, PHP source code and databases; 2. Understand workflows, permissions, reports and integrations; 3. Prepare an application, database and dependency inventory; 4. Identify functional, technical, security and performance gaps; 5. Upgrade or refactor existing PHP/MySQL applications; 6. Develop or improve the public portal and custom CMS; 7. Strengthen authentication, sessions and role-based access; 8. Improve data validation, reporting and approval workflows; 9. Implement secure document and media-upload facilities; 10. Develop APIs or controlled integration mechanisms; 11. Prepare data-mapping, migration and reconciliation procedures; 12. Conduct trial and final database migration; 13. Validate record counts, control totals, attachments and relationships; 14. Configure PHP, MySQL/MariaDB, Apache or Nginx on Linux; 15. Support SSL/TLS, logging, monitoring, backups and restoration; 16. Prepare deployment, cutover and rollback procedures; 17. Coordinate deployment in a State Data Centre; 18. Conduct functional, integration, regression and migration testing; 19. Support user acceptance testing and production go-live; 20. Address application-security vulnerabilities; 21. Support security-audit preparation and remediation; 22. Prepare user, administrator, deployment and maintenance manuals; 23. Conduct user and administrator training; and 24. Provide post-deployment maintenance and handover support. ## Controlled CSV Data Exchange The project may require a controlled employee master-data CSV exchange containing: * Source employee identifier; * Common employee identifier; * Employee name; * Designation/category; * Office or facility code; * Service start and end dates; and * Active/inactive status. The professional should be able to implement a fixed CSV schema, UTF-8 encoding, mandatory-field validation, code mapping, duplicate detection, import preview, exception reporting, audit logging and reconciliation. ## Security Requirements The applicant should understand: * Secure password storage and authentication; * Role-based access and least privilege; * SQL injection, XSS and CSRF prevention; * Secure session and cookie configuration; * Secure file-upload validation and storage; * Protection of credentials and configuration files; * Server and database-access restrictions; * Security logging and incident handling; * Vulnerability assessment and remediation; * Backup, restoration and rollback; and * Preparation for an independent security audit. Where a formal independent security audit is required, it will be undertaken through an appropriately eligible or empanelled security-audit organisation. The engineer may support preparation, remediation and retesting. ## Required Technical Skills Applicants should have strong experience in most of the following: * PHP 8.x; * MySQL or MariaDB; * HTML5, CSS3 and JavaScript; * Bootstrap or a similar framework; * Custom CMS development; * Authentication and role-based access; * REST APIs and system integration; * CSV import/export and validation; * Legacy database migration; * Git and release management; * Linux server administration; * Apache or Nginx; * SSL/TLS configuration; * Backup and restoration; * Application logging and monitoring; * Web-application security; * Testing and technical documentation. Experience with Laravel, Symfony or another PHP framework is useful, but the applicant must also be comfortable maintaining custom or legacy PHP applications. ## Preferred Experience Preference will be given to applicants with verifiable experience in: * Government or public-sector applications; * State Data Centre, NIC or Government cloud deployment; * HR or employee-management systems; * Payroll and salary applications; * Budget, finance or accounting systems; * Treasury-related reporting; * Administrative approval workflows; * Legacy application modernisation; * Database migration and reconciliation; * Security-audit remediation; and * Long-term maintenance and technical handover. ## Preferred Profile * Five or more years of relevant development experience; * At least three years of substantial PHP/MySQL experience; * Experience delivering or leading comparable applications; * Good technical-documentat