A-Dev LLC

We make regulated software teams audit-ready at the infrastructure layer. Most compliance work stops at policies and evidence collection. We do the part underneath: the cloud accounts, the pipelines, the access model, the logging. In your own cloud, enforced in Terraform, not written down in a document. What we do • SOC 2 and HIPAA infrastructure readiness and remediation • PCI DSS infrastructure controls and evidence preparation • Audit findings turned into a remediation plan you can actually staff • Keyless CI/CD (GitHub Actions with Workload Identity Federation, no long-lived keys) • Kubernetes platforms on AKS, EKS and GKE • Terraform from scratch, or fixing the Terraform you inherited Who we're a fit for • Healthtech, fintech and insurtech teams carrying PHI, PII or cardholder data, where a security review is starting to hold up deals and there's no platform team to own it. Background 9+ years in DevOps. 2,167 hours and 91% Job Success on Upwork. 4.9/5 across 6 Clutch reviews. Current work includes a regulated medical device platform on Azure (AKS, Terraform, Helm, GitHub Actions) and production workloads on GCP. Stack • Cloud: Azure, AWS, GCP • Kubernetes: AKS, EKS, GKE, Helm • IaC: Terraform, Terragrunt, Ansible • CI/CD: GitHub Actions, Azure DevOps, GitLab CI, ArgoCD, Jenkins • Observability: Azure Monitor, Application Insights, Prometheus, Grafana • Data: PostgreSQL, MySQL, Redis • Security: Workload Identity Federation, Key Vault, Secrets Manager, private endpoints, RBAC