Services
Fixed scope, written plan, no surprises
Most engagements start with a short call and a written plan — what I'll do, what it costs, what done looks like, and what I need from your side. For anything ongoing I prefer a fixed scope or a monthly retainer over open hourly billing. It's more predictable for you, and it means we're both optimising for the outcome rather than the clock.
01
Platform & Kubernetes
Clusters your team can actually run
Production and multi-tenant Kubernetes, internal developer platforms with self-service golden paths, and the cloud-native networking underneath. The part most teams underestimate is the network and the tenancy model — that's where I'm most useful.
- Production EKS, AKS, GKE and on-premise clusters — HA topology, autoscaling, upgrade path
- Multi-tenancy with real isolation: hierarchical RBAC, network policy, quotas, per-tenant cost showback
- CNI selection and migration — Cilium/eBPF, Calico — run staged with a rollback path at every step
- Service mesh and Gateway API: mTLS, traffic shifting, east-west observability
- Internal developer platforms — Backstage, Crossplane, golden paths that teams actually use
- Kubernetes
- Cilium
- eBPF
- Istio
- Gateway API
- Helm
- Crossplane
- Backstage
Productized engagements
Kubernetes Production Readiness Review
from $1,200
1 week
An audit against what actually breaks in production — HA, upgrades, RBAC, network policy, backups, observability, cost. Delivered as a risk-rated remediation backlog your team can execute.
Production Cluster Setup
from $2,500
2 weeks
A cluster built properly the first time and defined in Terraform, with a handover session so it isn't dependent on me.
02
Cloud Architecture & Migration
Migration day should be boring
Landing zone design and workload migration across AWS, Azure and GCP — and, increasingly, the return trip. Most migrations fail in the planning, not the execution, so that's where I spend the time.
- Landing zone design — account structure, network topology, IAM boundaries, logging, cost allocation
- On-prem to cloud, cloud to cloud, data centre exit, VM to container
- Dependency mapping against what actually exists, not what the documentation claims
- Rehearsed cutovers with defined rollback criteria at every step
- Cloud exit and repatriation analysis — modelled honestly, in both directions
- AWS
- Azure
- GCP
- Terraform
- OpenTofu
- Ansible
- Bare metal
Productized engagements
Cloud Landing Zone Design & Build
from $3,500
2 weeks
The foundation you only get one chance to get right — account structure, network, identity, guardrails, all in Terraform.
Zero-Downtime Migration Plan
from $1,400
1 week
Dependency map, target architecture, wave sequencing, cutover runbook and the rollback criteria — detailed enough that your own team could execute it.
03
Data Platform Engineering
Data infrastructure, run like a platform
I don't build your dbt models — your analytics engineers are better at that. I make sure the platform underneath them is reliable, versioned, observable and not quietly costing a fortune.
- Airflow or Dagster on Kubernetes, deployed by GitOps, with proper isolation and autoscaling
- Kafka on Kubernetes (Strimzi) — topic strategy, schema registry, retention economics
- Spark on Kubernetes with resource isolation between teams and spot strategy for batch
- Snowflake, Databricks and BigQuery from the platform side: provisioning as code, access control, cost attribution
- Pipeline reliability — freshness and completeness SLAs, alerting on the data rather than the job
- Airflow
- Dagster
- Kafka
- Strimzi
- Spark
- Snowflake
- Databricks
- Terraform
Productized engagements
Data Platform Reliability Review
from $1,500
1 week
Where your pipelines fail silently, what it costs, and what to fix first.
Data Pipeline Platform on Kubernetes
from $3,000
2 weeks
Orchestration and streaming running with the same IaC, GitOps, observability and cost discipline as the rest of your platform.
04
Automation & Infrastructure as Code
Turn tribal knowledge into reviewed code
The pattern is always the same: one person knows how to do the thing, it takes three hours, it happens twice a week, and it breaks differently every time. That's a design problem, and the fix is usually smaller than people expect.
- Terraform and OpenTofu module design, landing zones, environment separation, drift elimination
- Ansible roles for server estates, golden images with Packer, immutable infrastructure
- Operational automation in Python and Bash — the toil that quietly consumes a day a week
- Kubernetes Operators when the automation needs to reconcile continuously, not run on a cron
- CI/CD: build, test, scan, sign, deploy, promote — with the policy gates that make compliance automatic
- Terraform
- OpenTofu
- Ansible
- Python
- Go
- GitHub Actions
- Argo CD
Productized engagements
Infrastructure Automation Package
from $1,600
1–2 weeks
Terraform for provisioning, Ansible for configuration, Python for the glue — plus the CI to test it.
CI/CD Build or Jenkins Migration
from $1,800
2 weeks
Off Jenkins and onto GitHub Actions and Argo CD, with promotion gates and a rollback path.
05
Reliability & Resilience
Everyone has a DR plan. Almost nobody has a tested one.
The boring half of infrastructure — the half that only matters on the worst day of the year, which is exactly why it never gets prioritised until after that day has happened.
- SLO and error budget design, agreed with product rather than imposed by engineering
- HA and multi-region architecture, with an honest answer to what it costs and whether you need it
- Disaster recovery: RTO/RPO by tier, verified restores, failover and failback
- Chaos engineering and facilitated game days — findings turned into design changes, not more alerts
- OpenTelemetry observability that costs what it's worth. Most companies pay enterprise money to store data nobody queries.
- Prometheus
- Grafana
- Loki
- OpenTelemetry
- LitmusChaos
- Velero
- Thanos
Productized engagements
Disaster Recovery Readiness Assessment
from $2,000
2 weeks
We find out whether you can actually fail over. Written report, gap list, remediation priorities.
Observability Bill Audit
from $1,100
1 week
Cardinality, sampling and retention analysis. I'll show you the savings before you commit to implementation.
06
Security & EU Compliance
Between the people who can't implement and the people who can't read a regulation
Compliance consultants produce documents. Infrastructure engineers produce systems. What's usually missing is the person who can take an obligation and turn it into Terraform, an admission policy and an audit trail that survives an assessor.
- Policy as code with Kyverno or OPA, enforced at admission and in CI
- Supply chain security — SBOM, image signing and verification with Sigstore, SLSA provenance
- Identity architecture: cloud IAM boundaries, Kubernetes RBAC, workload identity, OIDC instead of long-lived keys
- Kubernetes hardening against CIS benchmarks, Pod Security Standards, runtime detection
- NIS2, DORA and GDPR mapped control by control to what is actually running
- Kyverno
- OPA
- Vault
- Sigstore
- Trivy
- Falco
- NIS2
- DORA
Productized engagements
NIS2 Infrastructure Readiness Assessment
from €2,500
2 weeks
Each obligation mapped to a technical control, with the gap list and the implementation path. Built for the Swedish Cybersecurity Act, in force since January 2026.
Kubernetes Security Hardening Review
from $2,000
2 weeks
RBAC, secrets, network policy, admission control, supply chain — rated by risk and effort.
Ongoing
Fractional platform architect
Some teams need architect-level judgement without a full-time hire. A retainer buys a fixed number of days a month: architecture reviews, decision records, escalation on hard incidents, and direction for the platform team. Typically two days a week. Get in touch and we'll work out whether it fits.
Tell me what's broken.
Or what you're trying to build. I'll give you an honest read on it before either of us commits to anything — and if I don't think I'm the right person for the job, I'll say so on that call.
Stockholm, Sweden (CET) · Comfortable overlap with European hours and US East Coast mornings