Dmitriy Kiselev Platform engineering

SRE · DevSecOps · AI

Scatteredparts intoone system

Reliability, security and AI are almost always built by different people: different tools, different environments, different rules. Everyone owns their piece and nobody owns the whole. Need one platform and I build one. Need two, or all three, and they come together as one system rather than parallel projects.

Discuss your case Message on Telegram

Fixed scope · agreed up front · handed over to your team

A three-pass print Three screenprint inks locked in registration: reliability, security, AI
The overlaps are what nobody owns: every team has its own piece, and the seam between them is left to no one
  1. 01 Cyan Reliability
  2. 02 Scarlet Security
  3. 03 Amber AI

Overprints

  • Reliability × Security Releases without risk
  • Security × AI Data never leaves the perimeter
  • Reliability × AI AI runs as a service

Drift alwayssurfaces atthe worst moment.

A printer aligns the form to the sheet using registration marks: until the passes meet, there is no image — only coloured ghosts along the edges.

Infrastructure works the same way. While what is described drifts from what is running, the company pays twice: first in engineering hours spent on manual checks and sign-offs, then in an incident at the worst possible moment.

With no gap: releases stop being risky events, every change has an author and a way back, a new environment comes up in hours, and one person going on holiday no longer stalls delivery.

Separation viewer

Switch a pass off or pull the layers apart to see the gap.

Separation viewer
Passes

Misregistration 0.0 mm In register

What stops being a problem

A short list of what people usually call about. If you recognise yours, that is already a conversation.

Reliability

outages at peak hoursrecovery depends on one personcustomers notice the failure firston-call is burning the team outnobody has ever tested the backupsscaling done by hand

Security

access granted foreverkeys and passwords in chat threadsevery review turns into a projectno answer to who changed whatvulnerabilities found in productionconfidential data leaving the perimeter

AI

pilots never reach the people who need themthe model invoice is unpredictablecompany data goes to the providerevery department buys its own subscriptionchanging vendor breaks everything at onceno visibility into what a request sends

What you can order

Three platforms and the lead role. Take one, two or all of them, depending on what hurts right now. Any combination comes together as one system rather than a set of parallel projects.

01 Cyan

Reliability and operations

Services stop falling over at peak hours, and recovery speed stops depending on who happens to be on call.

  • stated availability targets, with ownership behind them
  • predictable recovery time after a failure
  • you hear about the problem before your customers do
  • load peaks handled without manual intervention
  • on-call without heroics or burnout
  • a recovery plan that has been tested, not just written

You end up with Availability commitments you can quote, held by a team that is not permanently firefighting.

02 Scarlet

Security built into delivery

Protection is part of how you ship, not something checked a week before an audit.

  • security rules applied automatically to everything that ships
  • access granted by role and revoked on its own
  • keys and passwords stop living in chat threads and source code
  • confidential data leakage closed off at the process level
  • audit readiness as a side effect, not a separate project
  • data-loss risk closed by recovery that has actually been rehearsed

You end up with Security that does not slow shipping, and reviews you do not spend a month preparing for.

03 Amber

AI the whole company uses

AI stops being a toy for enthusiasts and becomes a working tool for everyone: support, legal, sales, analysts, engineering.

  • people get through routine work faster, without queueing for IT
  • answers are built on the company own documents and data
  • one way in for everyone instead of a personal subscription per department
  • confidential data never leaves the company perimeter
  • spend is visible, capped and predictable
  • you can see what goes out in a request, and forbid it

You end up with A tool people actually open every day, a predictable invoice at month end, and data that stays yours.

04 Key

Technical leadership

In print, the black form is called the key plate: it holds the others in register. Here that is the lead role.

  • the platform run as a product, with dates, priorities and owners
  • hiring and assessing engineers instead of filling seats at any cost
  • incident reviews that actually stop the incident recurring
  • measurable commitments to the business instead of technical reports
  • a team that works without being managed by hand from above

You end up with A team that holds the platform on its own, with a lead inside the company rather than a vendor outside it.

The order of passes

Engagements are fixed-scope: we agree on the volume and the result first, then build. Scope does not creep: anything new is a next stage with its own estimate, not "just a bit more" for the same money.

  1. 1

    Take the reference

    Look at what exists and what is holding the business back: where time is lost, where the risk sits, where money leaks. Describe the target state and fix the scope.

  2. 2

    Print

    Build what the scope covers. Every step is reproducible and visible, so at any point you know what you paid for and what already works.

  3. 3

    Hand over the form

    Documentation, procedures, training for your team, the first incident reviews. I leave when it all runs without me and does not fall apart a month later.

Tell mewhat hurts right now

A useful first message starts with three things: what exactly drags or breaks, what it costs the business, and what you have already tried. That is enough for a specific answer instead of a generic one.

Telegram @KiselevDA

I answer myself. If it is not my kind of problem, I will say so straight away and point you elsewhere where I can.