Sophotech is a European engineering consultancy. We work in cloud and platform engineering — Kubernetes, GitOps, FinOps, compliance — and contribute upstream to the tools we use. Engagements run 4–16 weeks fixed-scope, with optional extension once the platform is live.
Built by the engineers who contribute upstream.
Multi-cluster, multi-tenant Kubernetes platforms across upstream Kubernetes, the managed services (EKS, GKE, AKS), and OpenShift. We deliver cluster topology, networking, observability, and security baselines aligned to your workload profile.
Cloud migrations across AWS, GCP, Azure, and Oracle OCI, including OpenShift-on-cloud and OpenShift-on-bare-metal targets. Phased delivery with strangler-fig or lift-and-shift patterns selected per workload.
Terraform module library, multi-account or multi-project structure, state management, and policy gates in CI. Includes upstream contributions to the providers we depend on.
FluxCD or ArgoCD as the sole reconciler for your clusters. Deployments via Git commit, rollbacks via revert, automated image promotion, and progressive delivery integrated with SLOs.
Metrics, logs, and traces deployed and integrated for production debugging. SLOs and SLIs defined with product and engineering, enforced through alert routing and error budgets.
FinOps audit across AWS, GCP, Azure, and Oracle OCI. We identify waste, right-size workloads, and establish ongoing cost governance practices.
Tools we ship in production.
Cloud and platform engineering, delivered by senior engineers. We work fixed-scope, name the tools we use, and contribute upstream to the projects our clients run in production.
Kubernetes platform engineering
GitOps with FluxCD and ArgoCD
Cloud cost optimization (FinOps)
Terraform and infrastructure as code
Observability and SLO engineering
Compliance and security baselines
Fixed-scope projects, dedicated contractor placements, retainer, or advisory — written down in an SOW before work starts. Project engagements run 4–16 weeks with rollback gates per phase. Senior engineers do the work.
The easiest way to know a system is to have shipped code into it. We contribute to FluxCD, Kyverno, KEDA, Terraform providers, and other projects our clients run in production — so the bugs we hit on engagements get fixed at the source, not worked around in a fork.
Fintech, healthcare, energy, and public-sector workloads. Compliance controls — PCI DSS, HIPAA, NIS2, GDPR, DORA, SOC 2, ISO 27001 — designed into the platform with audit-ready logging, evidence collection, and documented change management.
