Focused engagements, delivered by a senior engineer.
Every engagement below is scoped to a clear outcome and a fixed price, with all code and documentation handed back to your team. Ideal for the specific, high-leverage work that's too small for an agency and too important to leave to guesswork.
AWS & EKS provisioning with Terraform
Get your initial AWS landscape built properly from day one. We provision a production-ready foundation — VPC and networking, IAM, an EKS cluster with the add-ons you actually need — entirely in Terraform, then hand you the code so you're never locked to us.
- Landing zone: accounts, VPC, subnets, routing, security groups
- EKS cluster with managed node groups, autoscaling and core add-ons
- IAM roles, IRSA and least-privilege access
- Modular, reusable Terraform with remote state and clear structure
Kubernetes security hardening — EKS & on-prem
Lock down clusters before they become a liability. We audit and harden both managed (EKS) and on-prem Kubernetes against real-world attack paths and CIS benchmarks, and leave you a clear report of what changed and why.
- RBAC review and least-privilege roles
- Network policies, pod security and admission control
- Secrets management and image/supply-chain hygiene
- CIS benchmark remediation and a prioritised findings report
CI/CD pipelines — GitLab CI, GitHub Actions, Jenkins
From your very first pipeline to a mature build-test-deploy flow. We design and implement CI/CD that fits your stack and team size, so shipping stops being a manual, error-prone event.
- Build, test, scan and deploy stages wired end to end
- GitLab CI, GitHub Actions or Jenkins — your choice of tooling
- Container builds, registries and environment promotion
- Pipeline-as-code your team can read and extend
Application & infrastructure performance remediation
When something is slow, timing out or falling over under load, we find the real cause and fix it — then document what was wrong so it doesn't come back. Backed by deep performance-engineering experience across application, database and infrastructure layers.
- Bottleneck diagnosis: latency, throughput, saturation, contention
- Database and query hot-spot analysis and tuning
- Kubernetes resource, scaling and node-level tuning
- Before/after evidence and a remediation write-up
Self-hosted GitLab to cloud migration
Move off the box in the corner. We migrate self-hosted GitLab to a cloud-hosted setup with a tested cutover, preserving repositories, history, CI configuration and artifacts — with a rollback plan in your back pocket.
- Assessment of current GitLab install and dependencies
- Target design and staged, tested migration
- Repositories, history, pipelines and artifacts preserved
- Cutover runbook and rollback plan
Custom Helm charts & AWS architecture design
Two things worth getting right early: how your apps are packaged for Kubernetes, and how your cloud is shaped before you build on it. We write clean, parameterised Helm charts, and design AWS architecture that won't need re-doing in six months.
- Custom, reusable Helm charts with sane values and templating
- Greenfield AWS architecture: accounts, networking, compute, data
- Well-Architected review of an existing or planned design
- Cost, scaling and resilience considered up front
CI/CD pipeline migration — Jenkins, GitLab CI & GitHub Actions
Switching CI/CD tools without losing weeks to broken builds. We translate your pipelines in any direction — Jenkins, GitLab CI or GitHub Actions — preserving behaviour, secrets and history, then prove parity before cutover.
- Any combination: Jenkins ⇄ GitLab CI ⇄ GitHub Actions (including reverse)
- Pipeline-as-code translated (Jenkinsfile, .gitlab-ci.yml, workflows)
- Secrets, credentials, runners/agents and caching migrated
- Parity testing and a staged cutover with rollback
Describe the problem — we'll scope the fix.
Tell us what's blocking you and we'll come back with the right engagement, a fixed price and a timeline.