Services
What we deliver, and how.
Four service lines, one standard: a principal engineer owns the outcome, writes the RFC first, and stays until it runs in production.
01 · AI systems engineering
Models that run on your hardware, on your data
- —Model fine-tuning: LoRA/QLoRA and full fine-tunes where justified, on your data, on your GPUs or VPC.
- —Quantised self-hosted inference (llama.cpp, vLLM), including multimodal models on single GPUs.
- —Evaluation harnesses and automated AI pipelines (for example image evaluation at scale).
- —Agentic-system security review: tool and MCP boundaries, prompt-injection exposure, data-exfiltration paths.
- —AI SOC responders integrated with your XDR/SIEM.
02 · Platform & cloud architecture
Kubernetes platforms that survive their own upgrades
- —Multi-cloud architecture on AWS, GCP and Azure.
- —Kubernetes at scale: EKS/GKE, multi-cluster, Istio/Linkerd, Karpenter, zero-downtime cluster replacement.
- —GitOps with ArgoCD and Kargo; infrastructure as code with Terraform and Pulumi; migrations between them with zero downtime.
- —Serverless-to-Kubernetes migrations (AWS Controllers for Kubernetes), Bazel monorepos, release engineering.
- —Cost, lifecycle and reliability engineering.
03 · Security engineering
Zero trust that engineers actually use
- —Zero-trust production access (temporary elevated access on AWS SSM and equivalents).
- —XDR and SIEM rollouts and migrations; DevSecOps pipelines with quality and security gates.
- —Supply-chain hardening for IDEs, runners and build systems.
- —eBPF telemetry and kernel-level network security tooling.
- —Immutable backup and recovery designs; SOC 2 readiness evidence.
04 · Fractional principal engineer
A principal on your team, without the hire
- —Ongoing senior ownership of your platform, security posture and delivery pipeline for teams that cannot hire a full-time principal.
- —Architecture reviews, RFCs, and hands-on implementation, not slide decks.
How we engage
Fixed scope, retainer, or fractional
- Fixed-scope delivery
- A defined outcome, a fixed price, a written RFC first.
- Monthly retainer
- A reserved share of principal-engineer time.
- Fractional principal
- Embedded in your team for a season.
Contracting entity: Calibib LLC (US). Work is delivered remotely, in European and US time zones.