Cloud architecture · Infrastructure · DevOps

This is the new Normal

Professional IT solutions for companies that depend on their systems. We design, build and operate secure cloud platforms on Microsoft Azure and AWS, with deep experience from regulated financial services.

  • Cloud architecture
  • DevOps solutions
  • Azure landing zones
  • Kubernetes platforms
  • Infrastructure as Code
  • Cloud migration
  • CI/CD and GitOps
  • Monitoring and observability
  • Security and governance
  • Disaster recovery
  • Cost optimisation
  • Managed operations

Services

IT solutions, from architecture to daily operations

We take responsibility for the cloud and infrastructure your business runs on: designing it, building it as code and keeping it secure and reliable.

Cloud architecture and landing zones

Secure Azure and AWS foundations designed to the Well-Architected and Cloud Adoption frameworks: networking, identity, governance, resilience and cost control.

  • Landing zones
  • Hub-spoke
  • HA/DR
  • Cost control

DevOps and platform operations

Reliable delivery and day-to-day ownership of production platforms, with every change reviewed, automated and traceable through pipelines.

  • Azure DevOps
  • GitLab CI
  • GitHub Actions
  • Argo CD

Kubernetes platforms

Production AKS and EKS clusters, standardised Helm deployments and GitOps, including moving legacy services to containers.

  • AKS
  • EKS
  • Helm
  • Argo CD

Infrastructure as Code

Repeatable environments in Bicep, Terraform and Ansible. Hand-built resources can be brought under code without changing what runs.

  • Bicep
  • Terraform
  • Ansible

Monitoring and reliability

Metrics, logs and alerts that show problems early, plus database operations and disaster recovery that has been thought through.

  • Azure Monitor
  • Prometheus
  • Grafana
  • ELK

Cloud migration and modernisation

Infrastructure and multi-region migrations, from assessment to cutover. Workloads move to Azure or AWS and are restructured for containers where it pays off.

  • Azure
  • AWS
  • Multi-region
  • Containers

Security, identity and Microsoft 365

Entra ID, RBAC and Azure Policy, private networking, Conditional Access and Defender, and zero-touch device management with Intune and Autopilot.

  • Entra ID
  • Private Endpoints
  • Conditional Access
  • Intune

Experience

Experience from production

Our engineers have designed and run business-critical systems in banking, consumer finance, technology and e-commerce. These numbers and projects come from that hands-on work.

  • 7production Kubernetes clusters across 6 environments, under strict compliance requirements
  • 75+cloud servers and 2 EKS clusters run end to end on AWS
  • 500+workstations moved to Windows 11 with zero-touch provisioning
  • 1.5 h → 15 mintime to provision a server after automation, speeding up disaster recovery

Financial services · Azure

Secure AI platform on Azure

End-to-end infrastructure architecture for Azure OpenAI services in a regulated environment: private connectivity, identity-based access and controlled data flows, delivered as code through pipelines.

Financial services · AKS

Regulated Kubernetes platform

Ownership of an Azure platform with deployment pipelines, GitOps, database operations for Azure SQL, SQL MI and MySQL, monitoring, networking and DNS placed under source control.

Financial services · Migration

Multi-region infrastructure migration

Delivery of a multi-region migration and restructuring of a business-critical platform into standardised Helm-based Kubernetes deployments.

Technology · AWS

AWS modernisation from scratch

Infrastructure as Code rolled out with Terraform and Ansible, legacy services moved to containers on Kubernetes, GitOps delivery, and monitoring for a 24/7 call-centre platform.

Consumer finance · Microsoft

Enterprise Microsoft infrastructure

Administration and security for 500+ workstations and 50+ servers across Azure, Active Directory and Office 365, with a zero-touch Windows 11 rollout through Intune.

Certified

Microsoft Certified

  • Azure Solutions Architect Expert
  • Azure Administrator Associate

Platforms and tools we work with

Azure
AKS, Entra ID, Azure Policy, Key Vault, VNet, VPN and Application Gateway, Private Endpoints, Azure OpenAI
AWS
EKS, EC2, IAM, VPC, S3, CloudFront, Route 53, Lambda, RDS
Containers
Kubernetes, Docker, Helm, Kustomize, Argo CD
Automation
Bicep, Terraform, Ansible, PowerShell, Bash, Python
CI/CD
Azure DevOps Pipelines, GitLab CI, GitHub Actions
Observability
Azure Monitor, Log Analytics, Prometheus, Grafana, CloudWatch, ELK, Zabbix
Data
Azure SQL, SQL MI, MSSQL, PostgreSQL, MySQL, RDS
Workplace
Microsoft 365, Intune, Autopilot, Defender, Active Directory, Windows Server

A project we built ourselves

ON THE LIMIT

iPhone app · Latvia · subscription

Problem
Average-speed cameras measure over a whole section, but drivers only see their speed at one moment.
What we built
A live zone average that runs in the background with GPS, on the lock screen, in the Dynamic Island and on CarPlay.
Engineering
Battery-aware location tracking, Live Activities, App Store subscriptions and offline zone data.
Privacy
Location never leaves the phone. No accounts, no analytics, no tracking.

Engagement

Three ways to work with us

Start small with a review, or hand us a complete project. Many projects continue as ongoing operations after go-live.

Architecture review

An independent look at your cloud environment: security, reliability, cost and how far it follows good practice.

For
Companies that want a clear picture before they invest
You get
Prioritised findings, a target design and a plan for what to fix first
Billing
Fixed price

Project delivery

A defined piece of work with a clear result: a landing zone, a migration, a Kubernetes platform or a move to Infrastructure as Code.

For
Companies with a goal and no team free to deliver it
You get
Architecture, implementation as code, go-live and documentation
Billing
Fixed price per phase, quoted after scoping

Ongoing operations

Outsourced care for your cloud and infrastructure: updates, monitoring, pipelines, fixes and steady improvements.

For
Live systems without a dedicated in-house specialist
You get
Engineers who know your setup, and regular reporting
Billing
Monthly, agreed scope

Process

How a project runs

Five steps, the same for a new platform, a migration or an environment we take over. You always know what happens next.

Get a rough plan
  1. Discovery call

    A short call about your goals, your current environment and what success looks like.

  2. Assessment and architecture

    We review what exists, then send a written design with phases, timeline and price.

  3. Build as code

    Infrastructure and pipelines are delivered in small, reviewable changes, so you see progress throughout.

  4. Controlled go-live

    Cutover with monitoring in place from the first minute, and a tested rollback plan.

  5. Operate and hand over

    We keep it secure and running, or hand it to your team with documentation anyone can follow.

Estimator

Get a rough plan in 30 seconds

Answer a few questions. You'll see the engagement, people, phases and timeline we'd suggest, and can send it to us in one click.

What do you need?
Where does it run? choose any
How large is it?
Special requirements choose any
Operations after delivery?

FAQ

Questions companies ask us

Something else? Write to us.

What kind of IT solutions do you deliver?

Cloud architecture and landing zones, Kubernetes platforms, CI/CD and GitOps, Infrastructure as Code, cloud migrations, monitoring, security and identity. We design the solution, implement it and can operate it afterwards.

Which cloud platforms do you work with?

Mainly Microsoft Azure, where we hold Azure Solutions Architect Expert certification, and also AWS. We write the infrastructure as code with Bicep or Terraform, so your setup is documented and repeatable.

Do you have experience in regulated environments?

Yes. Our engineers have designed and run production platforms in financial services, where private connectivity, identity-based access and controlled changes are everyday requirements.

Can you take over an environment someone else built?

Yes. We start with an assessment of security, reliability and cost, fix what is risky, and bring hand-built resources under Infrastructure as Code without changing what is running.

Do you only advise, or also implement?

Both. A review can stand alone as a prioritised plan your team carries out, or we can implement the fixes and hand over the code and documentation.

How do you charge?

Reviews and projects are fixed price after a short scoping conversation. Ongoing operations are billed monthly for an agreed scope. You get a written quote before any work starts.

Who owns the code and documentation?

You do. Everything is built in your accounts and repositories, and the contract says so.

How fast can you start?

It depends on current projects. We give you a start date on the first call.

Where are you based?

In Latvia, in the EU. We work remotely with clients in other countries, in English, Latvian and Russian.

Do you sign an NDA?

Yes, before you share anything confidential.

Contact

Tell us what you need

A new platform, a migration, or an environment that needs a steady hand. Describe the situation and we'll come back with next steps.

SIA THIS IS THE NEW NORMAL
Registration no. 50203461611
Viestura iela 14, Cēsis, LV-4101, Latvia

This opens your email app with the message ready to send. Nothing is stored on this website.