From cloud infrastructure to managed operations.
Engagements draw on one practice or several.
Infrastructure & cloud
We build and run servers, networks, and cloud infrastructure, on-prem or in any cloud. Staying on-prem is a choice we support, and what we build is defined in Terraform and Ansible.
Areas
- On-prem servers and virtualization: VMware, Hyper-V, and Proxmox
- Networking: firewalls, switching, and Wi-Fi
- SD-WAN and site-to-site VPN
- AWS, Azure, and Google Cloud
- Hybrid on-prem and cloud designs
- Backup and disaster recovery
- Migration assessment and cutover
- Storage tiering and lifecycle policy
- FinOps and reserved-capacity planning
Identity & security
Identity runs on Active Directory, Microsoft Entra ID, Okta, or Google Workspace. We set up MFA, conditional access, and privileged access, with controls mapped to NIST, CIS, and HIPAA where required.
Areas
- Endpoint protection
- Email security
- Vulnerability management
- SAML, OIDC, and SCIM integration
- Secret storage and rotation
Platform & DevOps
Pipelines on GitHub Actions, GitLab CI, or Azure DevOps deploy to Kubernetes on EKS, AKS, or on-prem hardware. We build these platforms and operate them.
Areas
- Helm and Argo CD
- Monitoring with OpenTelemetry, Prometheus, and Grafana
- Container registries and image signing
- Blue-green and canary release
- SLOs and error budgets
- Internal developer platforms
Software engineering & modernization
Legacy applications are modernized in stages, with .NET, Python, or TypeScript services taking over while the old system stays live. Integrations with Dynamics 365, SAP, Salesforce, and QuickBooks are part of the same practice.
Areas
- Internal tools
- SQL Server and PostgreSQL
- Batch and ETL replacement
AI engineering
AI systems answer from your own documents, using models from OpenAI or Anthropic, or open models you host yourself. Every build includes evaluation sets, permission-aware access, and human approval for actions.
Areas
- OpenAI, Anthropic, and Azure OpenAI
- AWS Bedrock and self-hosted open models
- Tool and function calling
- Tracing with OpenTelemetry
Managed IT services
A managed services agreement covers help desk, device management, and patching for teams on Microsoft 365 or Google Workspace. On-site support is available in the Houston area.
Areas
- Microsoft 365 and Google Workspace administration
- Device management with Intune and Jamf
- Patching and monitoring
- Backup checks and restore testing
- Vendor and license management
- Incident and change management