Cloud + DevOps
We architect, build, and operate cloud infrastructure for SaaS, e-commerce, and internal-tools clients. Our own infrastructure (five software platforms, ~7 servers, 5 RDS databases, ElastiCache, CloudFront) is the proof of practice — the same engineers who run our production run yours.
Concrete deliverables
- AWS / GCP / Azure architecture from scratch — VPC, IAM, networking, secrets management.
- Kubernetes clusters — EKS, GKE, AKS, or self-managed (K3s for small fleets).
- CI/CD pipelines — GitHub Actions, GitLab CI, CircleCI, custom Jenkins migrations.
- Infrastructure as code — Terraform, Pulumi, AWS CDK, Cloudformation. State management + module libraries.
- Observability — Datadog, New Relic, Grafana + Prometheus + Loki, OpenTelemetry instrumentation.
- Security + compliance — SOC 2 prep, GDPR/HIPAA controls, secrets rotation, IAM audits.
What we work with
We pick what fits your team. We don't push our preferences when your stack works.
Cloud providers
AWS (deepest) · GCP · Azure (less common) · Hetzner (cost-optimised EU)
Container orchestration
Kubernetes (EKS/GKE/AKS) · ECS Fargate · Docker Swarm (small ops) · Nomad (rare)
IaC
Terraform · Pulumi · AWS CDK · Helm · Kustomize
CI/CD
GitHub Actions (default) · GitLab CI · CircleCI · Jenkins (legacy migrations) · ArgoCD for GitOps
Observability
Datadog · New Relic · Grafana + Prometheus + Loki · Sentry · OpenTelemetry
Databases
RDS (PostgreSQL, MySQL) · Aurora · DynamoDB · Redis (ElastiCache) · ClickHouse · Snowflake
How we work
Discovery (1-2 weeks)
Read your existing infra (if any), document the current state, write a target-state architecture diagram. Risk + cost matrix in writing.
Foundations (2-4 weeks)
VPC, IAM, secrets, IaC scaffolding, CI/CD pipeline. Nothing in production yet — but the rails are laid.
Migrate / cutover
Phased migration with rollback plans. Often we run old + new in parallel for 1-2 weeks.
On-call + observability
PagerDuty / OpsGenie integration, runbooks, observability dashboards, optional 24/7 on-call retainer.
From our own production
Merot's software platforms
Single EC2 t3.large + shared RDS + ElastiCache + CloudFront serving five production software platforms + marketing sites.
Lambda@Edge subdomain redirects
CloudFront Function deployed across 6 distributions to 301 marketing paths from per-product subdomains to merot.com/{product}/* — single source of truth in git.
PDF generation infra
Node + Handlebars + WeasyPrint running on a single VPS, serving three of our platforms via shared template engine — survives spikes via CDN-cached PDFs.
Nearshore delivery by buyer market
Country pages explain the trust, timezone, compliance and delivery questions buyers ask before choosing a software partner.
North Macedonia
Custom software development for Macedonian companies: web apps, mobile apps, cloud systems, AI automation and integrations from Merot's Skopje engineering teams.
Germany
Senior Balkan software teams for German companies: web, mobile, AI, cloud and integrations with EU timezone overlap, GDPR-aware delivery and DACH communication.
Austria
Nearshore web, mobile, cloud and AI engineering for Austrian SMEs and product teams. EU timezone, DACH communication, GDPR-aware delivery.
Netherlands
Senior React, mobile, backend, cloud and AI teams for Dutch SaaS and operations companies. English-first delivery, EU timezone and GDPR-aware workflows.
Switzerland
Senior Balkan software teams for Swiss companies: secure web, backend, cloud, AI and integrations with DACH communication and privacy-aware delivery.
Sweden
Nearshore web, mobile, backend, cloud and AI engineering for Swedish SaaS and operations teams. Senior delivery, EU timezone, clean handoff.
Denmark
Senior nearshore engineers for Danish product and operations teams: web, backend, mobile, cloud, AI and integrations with EU timezone overlap.
Ireland
Senior EU nearshore engineers for Irish SaaS, fintech and operations teams. Web, backend, mobile, AI and cloud delivery with English-first collaboration.
United States
Senior European software engineers for US companies: custom web apps, mobile apps, backend systems, cloud, AI workflows and integrations with practical US overlap.
Canada
Custom web, mobile, backend, cloud and AI engineering for Canadian companies. Senior European delivery, practical timezone overlap and clean handoff.
United Kingdom
Senior nearshore software engineers for UK companies: custom web apps, backend platforms, cloud modernization, AI workflows and integrations.
France
Nearshore product engineering for French companies: web apps, mobile apps, AI workflows, cloud systems and integrations with EU timezone delivery.
Belgium
Nearshore web, backend, cloud, mobile and AI engineering for Belgian companies operating across languages, regions and EU compliance expectations.
Where these engineers come from
Direct EOR employment in two markets, hiring advisory across four more.
Senior engineers from North Macedonia
Merot's home market — deepest pool. ~30,000 IT professionals. Direct EOR via MEROT DOOEL Skopje.
Labour-law + payroll detail →Engineers from Kosovo
Youngest population in Europe, EUR currency (no FX risk). Direct EOR via MEROT L.L.C. Pristina.
Labour-law + payroll detail →Plus 4 advisory markets
Albania, Serbia, Bulgaria, Montenegro — hiring advisory + vetted local payroll partners. See the full outsourcing landing for the trade-offs.
Outsourcing landing →Engagement model
Frequently asked questions — Cloud + DevOps
Do you work with our existing cloud account, or do you provision a new one?
Yours. We work as an external IAM principal (often via SSO + a dedicated 'merot-engineer' role). We don't take ownership of your AWS account or your billing.
What about SOC 2 / ISO 27001 / HIPAA prep?
Yes — we've taken multiple clients through SOC 2 Type II audits. We'll help you scope what's in your trust boundary, write the security policies, set up the technical controls (access logging, MFA, secrets rotation), and prep for the auditor's evidence requests.
How do you handle production secrets?
AWS Secrets Manager / GCP Secret Manager / Vault — never .env files committed to git. CI/CD reads from the secret store at deploy time. We help you rotate after our engagement ends.
Kubernetes — yes or no?
Default no for teams under 10 services. Often ECS Fargate or even just systemd on a VM is cheaper + simpler. We push back on K8s when the operational cost outweighs the benefit.
Multi-region / global distribution?
Yes — including active-active Postgres setups, CloudFront geo-routing, RDS read-replicas across regions. Heavier engagement (3-6 months typical).
Cost optimisation engagements?
Common. We audit your AWS bill, find the cuts (rightsizing, savings plans, spot instances, CloudFront cache-hit improvements, RDS instance type changes), and implement. Typical 30-60% reduction in 1-2 quarters.
On-call rotation — do you provide it?
Optional. We can be your tier-2 on-call (24/7 with paging via PagerDuty / OpsGenie) on retainer. Typical SLA: 15-min ack, 30-min triage, 1-hour mitigation for P1.
Do you migrate from one cloud to another?
Yes — common engagement. AWS → GCP, Azure → AWS, on-prem → cloud. We scope, plan rollback, run a phased migration. Plan 3-6 months for a full SaaS migration.
Let's scope your cloud + devops project
Free 60-min discovery call. 6-page written brief in 48 hours.