Cloud Infrastructure & DevOps
Most businesses spend heavily on cloud before setting up their foundations correctly. We fix that — and build it right from the start. Enterprise-grade architecture, CI/CD, and infrastructure-as-code from a Principal SRE who has managed $23M+ cloud environments.
Multi-Cloud Architecture
Multi-account, multi-region cloud environments designed for security, cost efficiency, and scale. Networking, IAM, and everything between — built to last, not just to launch.
CI/CD Pipeline Design
End-to-end delivery pipelines using your toolchain of choice. Automated testing, staging environments, and zero-downtime deploys — so shipping stops being the scary part.
Container Orchestration
Managed or self-hosted container cluster design and management. Autoscaling, resource optimization, and workload reliability that holds under real pressure.
Infrastructure as Code
Declarative, version-controlled infrastructure — no more snowflake servers. Everything auditable, everything reproducible, everything deployable in minutes instead of days.
Self-Hosted Infrastructure
Tunnel-based access, self-hosted application stacks, and containerized services. Own your data, reduce SaaS costs, and maintain control without sacrificing reliability.
Observability Stacks
Metrics, alerting, and distributed tracing across your entire environment. Know what's happening before your users do — and respond before it becomes an incident.
Security & IAM
Secrets management, least-privilege IAM policies, SOC II alignment, and security hardening. Infrastructure that earns trust and holds it under scrutiny.
Cost Optimization
Right-sizing, reserved instances, Spot/Preemptible workloads, and architectural reviews that cut waste without cutting performance. Steward your cloud budget well.
Legacy Migration
Lift, shift, and modernize. Move from on-prem or legacy cloud setups to cloud-native architectures with minimal disruption and a clear path forward.
Who it's for
- Startups whose infrastructure outgrew the person who built it. The engineer who set up AWS has left, deploys are manual, and nobody is sure what happens if a region goes down.
- Teams paying for cloud they can't explain. The bill climbs every quarter and no one can say which workloads drive it.
- Teams with a security review or SOC 2 audit coming who need IAM, secrets and audit trails that hold up under questioning.
How we work and what it costs
| Engagement | What you get | Starting at |
|---|---|---|
| Infrastructure assessment | A written review of your architecture, cost, security and reliability, with a prioritized fix list | $3,000 |
| Fixed-scope project | One defined outcome: a CI/CD pipeline, infrastructure-as-code for an existing environment, an observability stack, or IAM hardening | $6,000 |
| Platform build or migration | A new environment or a move off legacy hosting, built as code and handed over with runbooks | $12,000 |
Every engagement starts with a free 20-minute discovery call. Scope and price are agreed in writing before work begins, and everything we build is version-controlled and yours.
Proof from our own stack
FigTree runs its own business on the platform it sells. Our site, automation and internal tools run on a self-hosted Kubernetes cluster managed entirely through GitOps. Every change is a pull request, nothing is configured by hand, and monitoring, logging, alerting, policy enforcement and image scanning run on the cluster around the clock.
Jason Drane has spent 15+ years in enterprise SRE and DevOps across AWS, GCP and Kubernetes, including environments with $23M+ annual cloud budgets across 16 accounts. Our partner Stephen McDermott brings 25 years of software architecture: recent work includes AWS WAF and IAM controls written in Terraform, policy-as-code checks that block insecure changes before deploy, and owning triage of major production incidents.
Frequently asked questions
How much does a DevOps consultant cost for a small team?
An assessment starts at $3,000 and fixed-scope projects at $6,000. You get a written scope and price before any work begins, so there is no open-ended hourly billing.
Do you work with AWS, Google Cloud or Azure?
Our deepest experience is AWS and Google Cloud, and we work in Azure as well, plus Kubernetes on any provider and self-hosted infrastructure. We'll tell you on the discovery call if your stack is outside what we do well.
Can you take over infrastructure someone else built?
Yes. That is the most common starting point. The assessment documents what you have before anything changes, so nothing breaks while we learn it.
Will we be locked in to FigTree?
No. Everything is built as code in your repositories, with runbooks. Another engineer can pick it up without us.
How do you reduce cloud costs without risking uptime?
We start with the bill: what each workload costs and what it actually uses. Then we right-size and remove waste in small, reversible changes, with monitoring in place first.
Can you help us prepare for SOC 2?
We build the infrastructure side: least-privilege IAM, secrets management, audit logging and policy checks in your deploy pipeline. We don't issue the audit report; your auditor does.
FigTree Development is a Florida-licensed firm based in the Tampa Bay area. We work with teams in Tampa Bay and remotely across the US.
Writing on Cloud Infrastructure & DevOps
You Probably Don't Need Multi-Region: The Availability Math from 15 Years of Keeping Systems Up
Most startups don't need multi-region architecture. Learn the availability math, real cost trade-offs, and when single-region high availability is the smarter build.
Read Article →
Catch the Bad IAM Change in the Pull Request, Not the Postmortem: Policy-as-Code for Teams Without a Security Engineer
Learn how to enforce security checks in pull requests with policy-as-code. Shift-left infrastructure security for teams that lack a dedicated security engineer.
Read Article →
AWS Multi-Account Strategy: The Account Structure That Keeps One Mistake from Taking Everything Down
Learn the AWS multi-account strategy that limits blast radius and protects your cloud. Real patterns from managing 16 accounts and a $23M budget.
Read Article →Let's Plant Something Real.
Every engagement starts with a free discovery call — 20 minutes to understand what you're building and where the friction is. No pitch, just a real conversation.
Start the conversation