Graffitecs / Services / Cloud & DevOps
Discipline 04 · Platform Engineering

Infrastructure
that sleeps so you can.

AWS, GCP, on-prem, hybrid. Terraform, Kubernetes when justified, serverless when honest. CI/CD pipelines, observability you trust, and runbooks the on-call engineer actually reads.

boring.
on purpose.

Mean lead-time-for-changes: 47 minutes. Mean change-failure rate: 3.1%. We measure what we ship.

AWS / GCP / Azure Terraform & IaC Kubernetes (when justified) CI/CD pipelines Observability SRE & on-call
0min
Lead time for changes
0%
Change failure rate
0%
Avg uptime delivered
0+
Pipelines built
Capabilities

The shapes of platform we ship.

Six recurring archetypes cover most of what we get asked to build. Pick the one closest to yours, or describe your own — we've probably done a cousin of it.

01

Cloud foundations

Greenfield AWS / GCP organisations: landing zones, multi-account, IAM, network, logging baseline, cost guardrails. The plumbing future-you won't curse.

  • · AWS Control Tower
  • · GCP org policies
  • · Cost & budget guardrails
02

Infra-as-code migrations

From "click-ops in the console" to Terraform you can review, plan, and roll back. Without downtime, without drama.

  • · Terraform + Atlantis
  • · Pulumi when better
  • · Drift detection in CI
03

CI/CD platforms

Pipelines that take 6 minutes, not 36. Preview environments per PR, blue-green deploys, automated rollbacks on SLO breach.

  • · GitHub Actions / GitLab
  • · Argo CD / Spinnaker
  • · Preview environments
04

Observability stacks

Logs, metrics, traces, error budgets. Built around a tight set of dashboards your team actually opens, not 400 they ignore.

  • · OpenTelemetry
  • · Grafana / Datadog
  • · SLO + error budgets
05

Kubernetes — but only if

Honest counsel on whether you need it. When you do, we build it correctly: GitOps, network policies, pod security, autoscaling, cost-aware.

  • · EKS / GKE / AKS
  • · Argo CD GitOps
  • · Karpenter autoscaling
06

SRE & incident response

On-call rotation design, runbook authoring, postmortem culture, chaos engineering, capacity planning. Boring excellence.

  • · PagerDuty rotations
  • · Postmortem templates
  • · Game-day exercises
What you walk away with

More than a Terraform repo.

Every engagement ends the same way: a production system, a team that can run it, and a written record of every decision we argued about.

D01
Infrastructure-as-code
Every resource defined in Terraform / Pulumi. Code-reviewed, planned, recorded.
D02
CI/CD pipelines
Build, test, deploy. Preview envs per PR. Rollback in one command.
D03
Observability stack
Logs, metrics, traces wired in. Dashboards & SLOs your team agreed to.
D04
Runbooks & on-call
Written, rehearsed, kept current. The on-call engineer reads them.
D05
Cost reporting
Per-team, per-service, per-environment. Anomaly alerts on spend.
D06
Disaster recovery plan
Tested. Yes, actually tested — RTO and RPO numbers you can defend.
Default stack

Boring on the inside.

A deliberately conservative core. We swap in sharp tools when the problem requires them, never because they're trending.

AWS
GCP
Azure
Terraform
Pulumi
Kubernetes
Argo CD
GitHub Actions
Datadog
Grafana
OpenTelemetry
Cloudflare
How we engage

Three shapes of work.

Pick the one that maps to where you are. Or hop between them — most clients start at one and end at another.

PHASE A

Discovery sprint

2 weeks · fixed

Architecture review, prototype of the riskiest interaction, and a costed roadmap. You walk away with a plan whether or not we build it.

From AED 38,000
PHASE B · MOST POPULAR

Build pod

8–16 weeks · milestones

Senior pod of 3–5: tech lead, full-stack, design, QA. Two-week cycles, demo every Friday, you own the repo from week one.

From AED 145,000 / month
PHASE C

Embedded retainer

ongoing · monthly

Once it's live. A reduced pod stays in your stand-ups, owns the on-call rota, and ships the roadmap quarter-over-quarter.

From AED 65,000 / month
FAQ

Honest answers.

If yours isn't here, just ask. We respond to most enquiries within a working day.

Will you work with our existing engineering team? +

Yes — most of our work is alongside in-house teams. We default to your repo, your code review, your standup. Where we run our own pods, we still pair-program weekly so the knowledge transfers from day one rather than at handover.

Can you take over a project that's already in trouble? +

Frequently. We start with a one-week audit: code, infra, team, runway. Output is a frank document — what to keep, what to throw out, what to rewrite — and a costed path to stable. About a third of those projects we then take on. The rest we hand back with a plan they can execute themselves.

What about IP and code ownership? +

You own everything we write — code, designs, infra, docs — assigned on first commit. We keep no kill-switches and no exclusivity clauses. Our standard MSA is six pages and we'll happily redline yours.

Can you work fixed-price? +

For well-shaped, mostly-known scopes — yes, we offer fixed-fee with milestone billing. For genuinely exploratory work we recommend time-and-materials with a hard cap, because anyone who quotes you a fixed price for an unknown is either lying or building you something cheap.

What's the smallest engagement you'll take? +

A two-week discovery sprint. Below that we're not adding much value over a good freelancer, and we'd rather refer you to one of the four we trust than do it badly ourselves.

Platform pod available July 2026

Got infrastructure
that wakes you up?