Services

Senior DevOps, applied to what you are running today.

No generic transformation programme. We look at what is fragile, expensive or slow, and fix it as code in your repositories.

Cloud & Infrastructure Architecture

Landing zones, account structure, networking and IaC foundations designed so the next fifty engineers inherit something sane instead of something archaeological.

AWS · GCP · Azure · Terraform · Terragrunt · Pulumi

Multi-account / multi-project topology with guardrails
VPC, connectivity and egress design that survives audit
Terraform modules, state strategy and environment promotion
Written architecture decision records, not tribal knowledge

Kubernetes & Container Platforms

Production-grade clusters with the boring parts automated: ingress, autoscaling, GitOps delivery and a clear blast radius for every workload.

Kubernetes · Helm · Argo CD · Karpenter · Istio · Kustomize

EKS / GKE / AKS cluster design, upgrades and node strategy
GitOps delivery with Argo CD or Flux
Autoscaling that responds to real traffic, not guesswork
Multi-tenancy, network policy and resource governance

CI/CD & Developer Experience

Pipelines your team trusts. Fast feedback, reproducible builds, and releases that are a non-event rather than a calendar invite.

GitHub Actions · GitLab CI · Jenkins · Argo Rollouts · Docker · Buildkit

Pipeline redesign with caching and parallelism that cuts build time
Progressive delivery: canary, blue-green, feature-flagged rollouts
Ephemeral preview environments per pull request
Golden paths and templates so new services start correct

Observability & SRE

Know what broke before your customers tell you. Metrics, logs and traces wired into SLOs and an on-call rotation people can actually live with.

Prometheus · Grafana · Loki · OpenTelemetry · Datadog · PagerDuty

SLO/SLI definition tied to user-visible behaviour
Unified metrics, logs and distributed tracing
Alerts that page on symptoms, not on noise
Incident response, runbooks and blameless postmortems

Cloud Cost Engineering

Most cloud bills are 30-50% waste hiding behind unlabelled resources. We find it, cut it, and put guardrails in so it does not creep back.

AWS Cost Explorer · Kubecost · OpenCost · Infracost · Athena

Full cost attribution through tagging and account hygiene
Right-sizing, Spot / Savings Plans and commitment strategy
Storage lifecycle, data transfer and idle resource cleanup
Per-team budgets, anomaly alerts and a monthly review cadence

Security & Compliance Engineering

Least-privilege IAM, real secret management and supply-chain controls built into the pipeline, so compliance becomes a byproduct instead of a project.

Vault · AWS IAM · Trivy · OPA / Gatekeeper · SOPS · Falco

IAM and RBAC rebuilt around least privilege
Secrets out of env files and into a managed vault
Image, dependency and IaC scanning enforced in CI
SOC 2 / ISO 27001 technical control readiness

Migration & Modernization

Data centre to cloud, VM to container, monolith to services — sequenced so the business keeps shipping while the platform changes underneath it.

Docker · Kubernetes · DMS · Terraform · Kafka · Nginx

Dependency mapping and a wave-based migration plan
Containerization and gradual service extraction
Zero / near-zero downtime database and traffic cutover
Rollback plan rehearsed before the real cutover

Engagements

Three ways to work together.

Most clients start with a review and move into a retainer once the roadmap is clear. Pricing depends on scope — you get a concrete proposal, not a rate card.

Engagement

Architecture Review

1-2 weeks, fixed scope

You inherited a platform and need an honest read on it.

Infrastructure, pipeline and security audit
Prioritized findings with effort and impact
Cost reduction opportunities, quantified
Written remediation roadmap and walkthrough

Most common

Fractional DevOps

Monthly retainer, agreed hours

You need senior platform ownership without a full-time hire.

Ongoing platform ownership and on-call escalation
Roadmap, standards and code review for infra changes
Mentoring for your existing engineers
Cost and reliability reporting each month

Engagement

Project Delivery

Fixed scope, milestone-based

A defined outcome: a migration, a platform build, a rebuild.

Discovery, design and a signed-off delivery plan
Implementation with your team in the loop
Documentation, runbooks and handover
Post-delivery support window

Start here

Tell us what is breaking.

A slow pipeline, a cloud bill nobody can explain, a cluster that only one person understands. Send the details and you will get a straight answer on whether we can help.

Write to Drozan hello@drozan.com