Three skills at $33 to $35 an hour, and a 65% jump that dissolved on inspection
Upwork's weekly posting count shows a 65% jump for the week of September 28 to October 4, 2026, but the move is a change in coverage rather than demand, and this issue picks the three infrastructure and security skills that a live Upwork index prices above the $30 line — each with an honest 90-day path, three-tier pricing, client-screening red flags and adaptable gig copy.
The skill market this week
Upwork's job count now arrives weekly through the platform's own API. The week of September 28 to October 4 closed at 23,983 postings, up 65.5% on the week before. 1
Three details point to a wider scan of the same job boards. The publisher marks the week provisional, so it is still being recomputed. Every one of the twelve categories rose by roughly the same factor in the same week — Writing by 110%, Customer Service by 82%, IT & Networking by 48% — and a genuine demand shift lands harder on some categories than others. 2 A second counter watching the same platform, which tracks every posting that states a rate, moved its 30-day total from 7,578 posts to 7,782, a rise of 2.7%. 3 A market that really added two-thirds of its volume in one week would show up in the other counter too. Read the 65% as a change in coverage until the archive settles.
The rate picture is steadier, and tighter than the volume. Across the 30 days ending October 5, the second counter found 4,353 Upwork posts that named an hourly rate, at a median of $23 with the middle half between $12 and $35. 3 That median belongs to the AI and automation categories it measures. A wider index, also built from live Upwork posts and recalculated daily, prices 63 skills across the platform's twelve categories. Its numbers put the money in a place this newsletter has written little about: the infrastructure and security skills, where medians sit at $33 to $35 an hour. 4
Two gaps stay open this week. No platform publishes a skill-level demand-growth figure over a 30-day window, so the growth half of this channel's screen goes unmeasured; the demand column below carries the 30-day posting count instead. And Fiverr publishes no skill-level hourly median at all, because its catalogue quotes project packages — Pro sellers under DevOps work start between $109 and $211 per project. 5 The rate column is therefore Upwork-side, and the three picks clear the $30 line for the first time in this newsletter.
The three, side by side
Sorted by median advertised hourly rate, with ties broken by the 30-day posting count, because the rate is the number every other figure in the row is priced against.
| Skill | 30-day demand | Median hourly (P10–P90) | Best first buyer |
|---|---|---|---|
| Network & System Administration | 566 jobs 6 | $35 ($12–$55) 6 | A small firm whose servers nobody documented |
| Information Security & Compliance | 467 jobs 7 | $35 ($12–$60) 7 | A company that has to answer a security questionnaire |
| DevOps & Solution Architecture | 568 jobs 8 | $33 ($13–$60) 8 | A team that still ships by hand |
1. Network and system administration
Demand: 566 Upwork jobs in the 30 days ending October 5, 2026, and 82% of the clients behind them are payment-verified. 6 Over a 90-day study of the category, the lead tags were System Administration (762 postings), Network Administration (726), Linux System Administration (650) and Network Security (704). 9
Rate reality: Median $35 an hour, with the middle spread from $12 to $55 and a fixed-price median of $100. 6 The advertised median rose 12.9% across the prior 30 days. Every figure is a client-stated budget on a live posting; nobody has been paid it yet.
Learning path: In three days, stand up one Linux server from an empty image: key-based SSH, a firewall with two ports open, a scheduled backup, and a short note on what you changed. In four weeks, run a real small server for someone else — separate logins for two people, a monitor that emails when a disk nears full, and a patch routine. In 12 weeks, move a small company off an ageing file box and a mail account nobody owns, then keep both alive for a month.
Pricing template: Starter gig, $250 to $600 for one server or one small network, set up and documented. Mid-tier package, $1,200 to $3,000 for several machines with backup, monitoring and a handover note. Monthly retainer, $400 to $1,200 for patching, monitoring and a response window.
Top 3 client-screening red flags: A post offering under $200 a month to "keep the lights on" pays for availability rather than skill, and it is a caretaker seat dressed as a project. A client who holds back root or console access, or any record of how the system was built, is asking you to price archaeology; bill that reading as its own discovery step. A remote fix with no backup and no out-of-band access can destroy the client's data on one wrong command, and the loss lands on you. 10
Sample Fiverr gig description:
I will set up and look after the servers and network your business runs on, and leave you with a written record of how it all fits together. You send me what you have today — the machines, who needs access to what, and what happens if one goes down — and I build the setup, secure it, put a backup in place, and hand over a short runbook so the next person can pick it up. The starter package covers one server or one small network: access keys, a firewall, a backup, and documentation. The standard package covers several machines with monitoring, alerting, a patch schedule and a migration off anything that is about to fail. The retainer keeps it running month to month: patches, monitoring, small changes, and a stated response window. I work on Linux and Windows, on your own hardware or in AWS, Azure or Google Cloud. I will tell you in the first call if what you have is fine as it is, because a client paying me to babysit a healthy network is money wasted. One thing I need from you: root or console access, and a named person who owns the decision to change it. Best fit: a small business running two to ten machines with nothing documented. Poor fit: a full cloud migration, which I scope as its own project. Send your current setup before ordering.
Adjacent specialization for the next step up: Implementation and deployment, which pays a $48.75 median across 58 postings in the category study — the hands-on senior tier that takes a system someone designed and puts it live without breaking production. 9 That is about $14 an hour above this skill's median, and it comes from owning the rollout rather than the upkeep.
2. Information security and compliance
Demand: 467 Upwork jobs in the 30 days ending October 5, 2026, with 73% of clients payment-verified. 7 The category's deepest tags run to Information Security (544 postings), Network Security (704) and Penetration Testing (410). 9
Rate reality: Median $35 an hour, with the middle spread from $12 to $60 and a fixed-price median of $150. 7 The advertised median held flat across the prior 30 days. Most of the buyer-side money sits in paperwork: audit and compliance clients average the highest lifetime spend of any family in the category study, at roughly $74,000. 9
Learning path: In three days, run a vulnerability scan against a machine you own, read one hardening benchmark, and write a single remediation note. In four weeks, map a small company against one framework — a policy set, an evidence list, and a gap register a non-specialist can follow. In 12 weeks, carry one audit-preparation engagement end to end: evidence collection, an access review, remediation tracking, and a final report the client can hand to their buyer.
Pricing template: Starter gig, $400 to $900 for one gap assessment and a written findings list. Mid-tier package, $1,500 to $5,000 for readiness against one framework, including the policy set and the evidence pack. Monthly retainer, $600 to $2,000 for monitoring, questionnaire support and keeping the evidence current.
Top 3 client-screening red flags: A post that asks you to sign off on a client's compliance hands you liability without the authority to fix anything; scope the signing responsibility in writing, or decline it. A "quick penetration test" with no scope, no rules of engagement and no written authorization puts you on the wrong side of the law, whatever the client says. A client who sends production credentials and customer records in the first message, before any data-handling agreement, has shown you how they treat everything else they hold. 10
Sample Fiverr gig description:
I will get your small business ready for the security review that a client, a partner or an insurer is about to run on you. You send me the review or questionnaire you have to answer, and what you already have in place — the tools, the policies, who has access to what — and I turn it into a short list of what is missing, what it costs to fix, and in what order. The starter package is one gap assessment: a written findings list scored against the framework you are being asked to meet. The standard package gets you ready: the policy set, the access review, the evidence pack, and a rehearsal of the questionnaire so there are no surprises. The retainer keeps the evidence current, answers the questionnaires that keep arriving, and watches the changes that quietly break your answers. I work with SOC 2, ISO 27001 and the security clauses inside enterprise contracts, and I write for the person who has to answer the auditor. Signing a statement about your security on your behalf stays outside the work; that decision is yours, and I will tell you plainly when a control is missing. Best fit: a company of 10 to 100 people facing its first serious review. Poor fit: an active breach response, which needs a firm with insurance. Send your questionnaire before ordering.
Adjacent specialization for the next step up: Solution and enterprise architecture, at a $50 median for architecture consulting across 70 postings and 1.47 times the category baseline 9 — the move from checking a client's controls to designing them into the systems they are about to build, roughly $15 an hour above the compliance median.
3. DevOps and solution architecture
Demand: 568 Upwork jobs in the 30 days ending October 5, 2026, and 77% of clients are payment-verified. 8 The tags behind it carry the largest volume in the category: DevOps 781 postings, AWS 707, Docker 417 and CI/CD 395. 9
Rate reality: Median $33 an hour, with the middle spread from $13 to $60 and a fixed-price median of $110. 8 The advertised median rose 1.5% across the prior 30 days. The volume sits at the cheaper end of the category: raw DevOps pays $32.50 across those 781 postings, while configuration management, the governance layer above it, pays $38.75. 9
Learning path: In three days, containerise one small app and run it on your own machine, then push one repository through a single automated check. In four weeks, deploy that app to one cloud with the infrastructure written as code, add a staging copy, and prove you can roll it back. In 12 weeks, take one team's release from a manual afternoon to a scheduled pipeline with monitoring and alerts, and keep it running for a month.
Pricing template: Starter gig, $300 to $700 for one pipeline or one deployment, documented. Mid-tier package, $1,500 to $4,000 for infrastructure as code across staging and production, with monitoring and a handover. Monthly retainer, $500 to $1,500 for pipeline upkeep, cost review and small changes.
Top 3 client-screening red flags: A "DevOps" post that turns out to be a full-time on-call seat at a junior rate pays for your evenings and builds no portfolio. A client who wants you to "tidy up" a cloud account you have never seen, with no access audit and no spend breakdown, is selling you a bill you cannot estimate; price the audit as its own step. A fixed $150 for "CI/CD and Kubernetes" describes several weeks of work, and the client who wrote that number will not move it when you explain the scope. 10
Sample Fiverr gig description:
I will take your team's release process off a checklist and into something that runs the same way every time. You send me how you ship today — the repository, the servers, the manual steps someone remembers — and what breaks most often, and I build the pipeline, put the infrastructure into code, add the staging copy that stops half the surprises, and set up alerts that tell you when a deploy goes wrong. The starter package covers one application and one pipeline, documented. The standard package covers staging and production with infrastructure as code, a rollback you can actually run, monitoring and a handover note. The retainer keeps the pipeline healthy, reviews your cloud bill and absorbs the small changes that arrive each month. I work with Docker, GitHub Actions, GitLab CI, Terraform, Ansible, AWS, Azure and Google Cloud, and I stay inside the tools your team already uses. Two honest limits: I pass on a migration whose scope nobody has written down, and I ask for a read-only look at the account before I quote. Best fit: a small product team shipping by hand and afraid of Fridays. Poor fit: a first cloud migration or a Kubernetes build from zero. Send your repository and your current deploy steps before ordering.
Adjacent specialization for the next step up: SaaS and cloud computing, at a $44.38 median for SaaS work across 59 postings, with cloud computing at $42.50 across 100. 9 Designing a client's cloud estate pays several dollars an hour above running its pipelines, and the category study names software architecture and design the fastest-rising premium lane in its window, up 42.1%.
How to choose
All three picks sit within two dollars of each other on the median, so the tiebreaker is the size of the sample and the difficulty of the brief. Network and system administration has the clearest scope — a client names the machines and the outcome — and the largest fixed-price spread. Information security and compliance has the highest-spending buyers and the most paperwork, which suits someone who would rather write than tinker. DevOps and solution architecture has the deepest posting volume and the noisiest briefs, because "our deploys are messy" describes a project nobody has scoped yet. Sell one contained package first, priced per deliverable, and name the work you are leaving out in the gig text before the client orders.
Cover image: AI-generated illustration for this issue.
References
- 1Upwork Market Index: Weekly Freelance Report
snipework.com
- 2Upwork Market Report Sep 28 – Oct 4, 2026
snipework.com
- 3DevSnipe AI Automation Rate Index
devsnipe.com
- 4Upwork Rate Calculator
upalerts.app
- 5Hire the best DevOps experts
fiverr.com
- 6Network & System Administration Upwork Rates
upalerts.app
- 7Information Security & Compliance Upwork Rates
upalerts.app
- 8DevOps & Solution Architecture Upwork Rates
upalerts.app
- 9Highest-Paying IT Skills on Upwork
upalerts.app
- 10
This story was produced automatically by a channel. One sentence is all it takes for Neodrop to keep producing for you.