Cloud Consulting — Tomasz Sobczak

What I Do

Four ways I can help

Whether you are moving to the cloud for the first time, starting something new, cleaning up what grew organically, or chasing a reliability problem — I have done all of it in real production environments.

Migration to AWS

Moving workloads to AWS is never just a technical exercise — it is a business transition. I plan and execute migrations that keep the business running: lift-and-shift where speed matters, re-architecture where it pays off long-term.

Assessment and migration strategy
On-premise to AWS lift-and-shift
Re-architecture for cloud-native services
Zero-downtime cutover planning
Post-migration stabilisation and handover

Building from scratch

Greenfield infrastructure done right the first time avoids years of technical debt. I design and build AWS environments with the security baseline, networking, observability, and IaC that growing teams need — before they need it urgently.

AWS account and network architecture
Infrastructure as Code with Terraform
Kubernetes and container platform setup
IAM, VPC, and security baseline
CI/CD pipeline integration

Troubleshooting and simplification

Cloud environments that grew without a plan become expensive and fragile. I audit existing setups, find what is causing pain — whether cost, complexity, or incidents — and simplify it into something your team can actually maintain.

Architecture review and risk assessment
Root-cause diagnosis for recurring incidents
Complexity reduction and service consolidation
IaC adoption for unmanaged infrastructure
Documentation and knowledge transfer

Reliability engineering

Reliability is not a feature you bolt on after incidents. I embed with your team to build the alerting, runbooks, and resilience patterns that keep production stable — and make sure your on-call rotation is not a nightmare.

Observability setup with Datadog or CloudWatch
Alerting strategy and runbook authoring
SLO and error-budget definition
Failure mode and resilience review
On-call process improvement

How We Work Together

Simple. No lock-in.

Every engagement starts the same way — a conversation about your problem. What comes after is entirely shaped by what you actually need.

First Step

Introductory call

We start with a free call where you walk me through what you are running, what the problem is, and what a good outcome looks like. I ask the questions that help me understand whether and how I can help — no sales pitch, no pressure.

Free, no commitment

If I am not the right fit, I will say so.

Ongoing Work

Long-term collaboration

Once we agree on scope, I work with your team on a time and material basis. You stay in full control — scale up when things are intense, scale back when they are not. No fixed retainer, no minimum commitment, no exit penalty.

Time and material

You control the pace and the budget.

Approach

Engineering first. Always.

I do not produce slide decks and hand off to someone else to implement. I work directly in your environment — reading logs, writing Terraform, pairing with your engineers — and I stay until the work is production-ready.

Discuss your Project

Infrastructure as Code — no exceptions

Every resource I create or modify goes into Terraform or Ansible. If it is not committed to version control, it does not exist. Your team inherits something maintainable, not a manual setup they cannot reproduce.

Security and networking from day one

IAM least-privilege, VPC segmentation, and encryption at rest and in transit are not optional extras. They are part of the base design — not retrofitted after an audit.

Observability built in, not bolted on

Logs, metrics, and traces are designed in from the start. I set up Datadog or CloudWatch so your team sees what is happening before users notice — not in the post-mortem.

Tell me what you are building or breaking

Whether you have a migration plan that needs a second pair of eyes, an architecture that grew out of control, or a reliability problem keeping your team up at night — the first conversation is free.

Start a Conversation

AWS infra built to last