Cloud architecture and landing zones
Organisation and account structure, network topology, identity and access design, and the guardrails everything else inherits. Delivered as Terraform, with the decisions written down.
- Multi-account and multi-project foundations
- Network and connectivity design
- Identity federation and IAM models
- Migration planning and execution
- Cost structure and tagging discipline
Platform and DevOps engineering
The paved road your engineers actually want to use: reproducible environments, pipelines that tell the truth, and self-service that does not require a ticket.
- Terraform modules and reusable patterns
- CI/CD pipeline design and hardening
- Kubernetes platform build and operations
- Developer self-service tooling
- Release and environment strategy
Reliability and SRE
Turning uptime from a hope into a measured property. Service levels defined against what users actually feel, with the observability to prove it.
- SLI and SLO definition
- Observability, tracing and alerting
- Incident response and postmortem practice
- Sustainable on-call design
- Capacity and failure testing
Cloud migration
On-premises to cloud, datacentre exits, database migration and large-scale data transfer, planned so every step is reversible and the cutover is the least interesting part.
- Discovery and dependency mapping
- Rehost, replatform or refactor decisions
- Enterprise database migration with CDC
- Petabyte-scale data transfer
- Hybrid operation during transition
Cybersecurity and DevSecOps
Security as an operating capability: detection and response tuned to your estate, and a delivery pipeline that catches vulnerable code before production does.
- Security operations and SIEM design
- Incident response and tabletop exercises
- CI/CD security gates and secrets hygiene
- Software supply chain integrity
- Vulnerability management programmes
Software development
Web, desktop, mobile and firmware from one senior team: TypeScript, Python, Go, Java, C#, Swift, Kotlin, Flutter and the rest of the modern production stack.
- Web apps in React, Next.js, Vue and Angular
- iOS, Android and cross-platform mobile
- Desktop software for macOS, Windows and Linux
- Backend APIs in every major language
- Embedded firmware in C, C++ and Rust
Systems integration
Connecting platforms, products and data into one dependable system: APIs, events, ERP and CRM integration, legacy bridges and identity.
- Salesforce, SAP, NetSuite and Dynamics integration
- Event backbones with Kafka and Pub/Sub
- Legacy and on-premises bridges
- SSO with SAML, OIDC and SCIM
- Idempotent, monitored, reconciled pipelines
UI and UX design
Product design from research to pixel: discovery, flows, high-fidelity UI, design systems and usability testing, WCAG 2.2 AA throughout.
- UX research and product discovery
- Figma design systems and component libraries
- Prototyping and moderated usability testing
- Accessibility to WCAG 2.2 AA
- Engineering handoff that holds
Electronics, PCB and IoT
Electronic product development from schematic to certified production: circuit design, PCB layout, embedded firmware, connectivity and enclosures.
- Schematic capture and PCB layout
- Firmware on STM32, ESP32 and Nordic
- WiFi, BLE, LoRaWAN and cellular IoT
- Enclosure design and thermal engineering
- EVT, DVT, PVT and certification readiness
Mechanical engineering
CAD, simulation and design for manufacture: parts and assemblies that work, survive and can be built at your volume for a sane price.
- SolidWorks, Fusion 360 and Onshape CAD
- FEA, thermal and tolerance analysis
- Design for CNC, moulding and sheet metal
- Rapid prototyping and iteration
- GD&T drawings and production BOMs
AI, LLM and machine learning
AI systems built for production: frontier APIs or self-hosted open models, retrieval-augmented generation, agents, fine-tuning and the evaluation discipline that keeps them honest.
- Claude, GPT, Grok, Gemini and Mistral APIs
- Self-hosted models with vLLM and Ollama
- RAG pipelines with citation grounding
- AI agents with guardrails and audit trails
- Evals, tracing and cost engineering
Robotics and embodied AI
Machines that sense, decide and act: perception, ROS 2 software, motion control, simulation and edge AI, from invention to field deployment.
- Computer vision and sensor fusion
- ROS 2, Nav2 and MoveIt
- Gazebo and Isaac simulation
- Edge AI on NVIDIA Jetson
- AMRs, drones and fleet operations
Data engineering and pipelines
ETL, ELT, streaming and the lakehouse: data that arrives on time, passes its tests and gives the business one version of the truth.
- Airflow, Dagster and dbt pipelines
- Kafka and Flink streaming
- Change data capture with Debezium
- BigQuery, Snowflake and Databricks
- Data quality, contracts and lineage
Security and compliance
Least privilege that survives contact with delivery pressure, and control evidence that is produced by the system rather than assembled the week before an audit.
- IAM and least-privilege design
- Policy as code and guardrails
- Secrets management and key handling
- Audit readiness and control mapping
- Security review of existing estates