DevOps & Platform Engineering Consulting
I'm Ofir Shtrull. I help engineering teams run secure, cost-efficient cloud platforms on AWS, GCP and Kubernetes — from the first migration to a calm, observable production you can actually trust.
services
Senior, hands-on work across the platform lifecycle — picked up where your team needs depth, handed back so they can own it.
Security baked into the pipeline, not bolted on after. I shift scanning, secrets management, policy-as-code and compliance left — so vulnerabilities get caught at commit time, not in an audit. Experienced building and operating to PCI-DSS, HIPAA and SOC 2 requirements.
Cloud bills that finally make sense. I find the waste, set budgets and guardrails, and cut spend without slowing anyone down.
Move to AWS or GCP with minimal downtime and a clear rollback plan — leveraging the platform instead of just lifting and shifting.
Take monoliths and legacy workloads to Kubernetes done right — resilient, observable and genuinely cloud-native, not just containerized.
Fast, reliable, secure delivery with Jenkins, GitHub Actions and ArgoCD — pipelines shaped to your workflow, not a template.
Honest assessment of where you are, a pragmatic plan for where you're going, and the Terraform to get you there.
process
No 60-slide decks. A tight loop that gets you running and then gets out of the way.
I audit your infrastructure, pipelines, cost and security posture, then show you the real risks and the highest-leverage fixes — in plain language.
Migrations, pipelines, infrastructure-as-code and observability — built incrementally, shipped safely, with your team in the loop the whole way.
Runbooks, docs and pairing so your engineers own what we built. I'm a force multiplier, not a dependency.
about
I've spent more than ten years building and running cloud platforms across cybersecurity, fintech, IoT, fraud prevention, healthcare, web services and smart-home technology. That range means I've seen how the same DevOps problem shows up differently in a regulated bank and a fast-moving startup — and how to solve it for each.
I've worked hands-on in PCI-DSS and HIPAA environments and carried teams through SOC 2 Type II audits — so compliance is something I design into the platform from the start, not bolt on the week before the assessor shows up.
I speak in trade-offs, not buzzwords. Whether you're migrating to the cloud, taming a Kubernetes estate, or trying to make your cloud bill predictable, my job is to make your technology investments deliver measurable business value — and to leave your team stronger than I found it.
Let's talkstack
Proven, boring-in-the-best-way tooling — chosen to fit the team, not to chase trends.
contact
Tell me what's keeping you up at night — a stalled migration, a runaway cloud bill, a pipeline nobody trusts. I'll reply personally, usually within a day.