Engagement Model

How We Work

Not a full-time hire. Not a one-off audit. Senior infrastructure architecture expertise embedded in your team for 3–6 months — then you own it.

10–20 hrs / week

Embedded capacity

3–6 months

Typical engagement

1 sync / week

+ async updates

$129–149 / hr

Via MBO Partners

When This Is a Fit

Most workloads still in a single AWS account
Environment provisioning is slow or inconsistent
Hiring platform engineers but no architecture direction yet
Compliance or security needs aren't structurally solved

If two or more of these are true, let's talk.

What I Work On

Core Deliverables

  • AWS multi-account architecture (Organizations, Landing Zones, Control Tower)
  • Transit Gateway hub-spoke network design
  • ECS and EKS platform design and workload migration
  • Terraform module library design and IaC adoption

Supporting Work

  • IAM and identity architecture (Identity Center, SSO, least-privilege)
  • Compliance foundations (NIST 800-53, STIG, FedRAMP prep)
  • Platform engineering team enablement and runbook development
  • CI/CD infrastructure for infrastructure teams

The First 30 Days

Every engagement starts with understanding before proposing.

Week 1

Current-State Audit

  • AWS account structure and IAM topology
  • Network layout — VPCs, peering, egress patterns
  • Terraform state: what's managed, drifted, or console-only
  • Team workflows and friction points
Week 2

Gap Analysis + Architecture Proposal

  • Written doc: what's working and what needs to change
  • Proposed architecture with trade-offs documented
  • Phased implementation plan with clear sequencing
Weeks 3–4

Foundation Work

  • Account structure and landing zone
  • Hub-spoke networking baseline
  • IAM baseline and Identity Center configuration
  • Terraform module scaffolding
Month 2+

Migration + Enablement

  • Workload migration into the new structure
  • Terraform module library build-out
  • Runbooks and operational documentation
  • Internal team enablement — you own it when we're done

What I Don’t Do

Staff augmentation

I'm not a pair of hands for ticket-driven work

Ongoing ops support

I build the foundation and enable your team

Full-time employment

This is fractional by design

Contracting & Compliance

Two paths to engage — whichever works for your procurement process.

Direct Engagement

Straightforward for companies with an existing independent contractor process. SOW-based, invoiced monthly, net-15 terms.

  • Standard consulting agreement provided
  • Invoice via your preferred AP method
  • Fastest path to starting — typically within days

Via MBO Partners

Enterprise-ready

I am a pre-vetted Independent Professional on the MBO Partners Marketplace. For enterprise clients already using MBO, I can be engaged directly through their platform — streamlining compliance, AOR/EOR, and payments without additional vendor onboarding.

  • Eliminates contractor misclassification risk for your HR team
  • Works with existing enterprise vendor agreements
  • Automated payments — no new AP vendor setup required
  • Engagements can typically start within days, not weeks

Not sure which path fits? Mention it when you get in touch and I'll make it easy.

Ready to talk through your infrastructure situation?

Describe what you're working through and I'll respond within one business day.