DevOps engineers embedded for specific infrastructure outcomes rather than general cloud administration. Engagement scopes matched to the gap:
CI/CD pipeline setup: GitHub Actions or GitLab CI with build, test, security scan, and deployment stages; branch-based environment promotion from feature to staging to production; deployment rollback triggered by health check failure.
Containerisation and Kubernetes: Dockerfile optimisation for layer caching and image size; Kubernetes deployment configuration with resource requests/limits, pod disruption budgets, and horizontal pod autoscaler; Helm chart setup for release management.
Infrastructure as code with Terraform: state management in S3 with locking via DynamoDB; module structure for reusable infrastructure components; plan-and-apply workflow in CI.
AWS or GCP architecture: VPC design with public/private subnets and NAT gateway; RDS Multi-AZ setup; ECS Fargate vs EKS decision based on your operational capacity; cost tagging and Reserved Instance purchase recommendations. Monitoring setup: CloudWatch or Datadog dashboards with p50/p95/p99 latency and error rate per service; PagerDuty alerting with runbook links on every alert; distributed tracing setup with AWS X-Ray or OpenTelemetry. Security posture: IAM least-privilege role design; AWS Security Hub or GCP Security Command Center configured; secrets management with AWS Secrets Manager or HashiCorp Vault. Engineers who have operated the infrastructure they build, they know which Kubernetes node issues surface at 2am, not just how to configure the cluster.