Language

Sign in

What we do

We set up, move, fix and run systems on AWS and GCP.

A domain and its certificate, a single server, a network between two clouds, a research platform: every job starts as a request in your account and gets its own quote.

Create your accountSee how it works

If your job is not on this page, write it in your request anyway.

Types of work

What we take on, and the tools behind it

Each type of work lists the jobs we have done in it and the tools we used. Where a job is written up in Real work, its name links to it.

CloudServiceTech
Set up a serverA single server or a highly available setup on EC2 or Compute Engine, hardened, backed up and monitored.
AWS + GCP

End-of-life modernization

In-place LTS upgrades and clean rebuilds, with user configuration carried through intact.

  • Ubuntu Pro/ESM
  • Ubuntu LTS
  • Machine Images
AWS + GCP

Vendor deprecation management

Database, container and desktop end-of-life notices tracked and closed before the deadline.

  • Oracle
  • Ubuntu LTS
  • Container Runtimes
Network and VPNVPCs, site-to-site VPN and links between AWS and GCP.
AWS + GCP

Network

VPN, VPC peering, load balancers and DNS, including cross-cloud HA tunnels verified over BGP.

  • Site-to-Site VPN
  • GCP HA VPN
  • Cloud Router
  • BGP
  • DNS
AWS + GCP

Serverless integrations

Cloud Run and functions behind private egress, reaching databases inside the VPN.

  • Cloud Run
  • Cloud Functions
  • AWS Lambda
  • Serverless VPC Access
Domain, DNS and SSLWe register your domain, point it where it belongs and secure it.
AWS + GCP

Certificate lifecycle

Issuance, a renewal calendar and expiry alerting, so a chain never runs out unnoticed.

  • ACM
  • Certificate Manager
  • PKI
  • CloudWatch
Move to the cloudWe look at your site or application first, then move it to AWS or GCP.
AWS + GCP

Site and application moves

We map what runs where, move it, then rebuild domain, DNS and TLS around the new addresses.

  • GCP Compute Engine
  • Route 53
  • AWS ALB
  • ACM
  • Static IP
  • Dotmatics
Backups and monitoringBackups to S3 or GCS, and alerts that reach the right person.
AWS + GCP

Backup plans

Daily and weekly plans for the critical hosts, and restores that prove them.

  • AWS Backup
  • EBS Snapshot
  • GCP Snapshot
AWS + GCP

Observability

Centralized audit logs and purpose-built dashboards behind VPN.

  • BigQuery
  • Cloud Logging
  • CloudWatch
  • Cloud Run
Users and accessIAM, MFA and service accounts, set up so each person has only the access they need.
AWS + GCP

IAM and service-account hygiene

Least-privilege accounts scoped per resource, dormant key cleanup, actAs audit.

  • AWS IAM
  • GCP IAM
  • Permissions Boundary
  • MFA
AWS + GCP

Identity

Okta SSO, Managed AD and MFA on one directory, with federation kept in sync.

  • Okta
  • Managed Microsoft AD
  • AWS SSO
  • MFA
AWS + GCP

CRO and external partner data exchange

Scoped identities, cross-account policies, presigned flows for regulated data.

  • S3
  • GCS
  • IAM
  • Presigned URL
AWS

AWS WorkSpaces

Secure desktops for overseas teams without issuing them VPN or directory accounts.

  • AWS WorkSpaces
  • Transit Gateway
  • AD Connector
Security scan and reportA one-time scan or one that repeats every month, each with a written report.
AWS + GCP

Scan and report

A one-time scan or one that repeats every month, with read-only access, no agent installed in your environment and a written report.

AWS + GCP

Security operations

wiz.io and CIS Benchmarks: continuous findings, alarm tuning, remediation you can audit.

  • wiz.io
  • Security Hub
  • GuardDuty
  • AWS Config
  • CIS
AWS + GCP

Third-party tooling you already run

Cloud-native services are the default. Where a third-party security platform is already in place, we operate it alongside them or feed its findings into the infrastructure controls. You are not asked to drop what works.

  • wiz.io
  • Security Hub
  • AWS Config
  • EventBridge
DashboardsA dashboard for what you want to watch: storage, cost, security or monitoring.
AWS + GCP

Dashboards

Built for what you want to watch. Each dashboard shows what changed, what it means and what we did about it.

  • BigQuery
  • Cloud Logging
  • Aggregated Log Sink
  • Cloud Run
  • Internal Load Balancer
  • AWS ALB
  • ACM
Lower the cloud billWe find what you pay for and do not use, and take it off the bill.
AWS + GCP

Cost discipline

Rightsizing, anomaly investigation, idle-resource cleanup and lifecycle tiering.

  • Cost Explorer
  • Compute Optimizer
  • Rightsizing
Run a research platformHPC, RStudio, notebooks and the infrastructure under them.
AWS + GCP

HPC clusters and Slurm

Scheduler-managed clusters provisioned as code, sized for the workload and rebuilt from the template when one breaks.

  • Slurm
  • AWS ParallelCluster
  • CloudFormation
  • EC2 GPU
AWS + GCP

Schrödinger

Maestro and license server operations: installation, version upgrades, cross-account license access.

  • Schrödinger
  • Maestro
  • License Server
AWS + GCP

Dotmatics and D360

Application servers on DEV and PROD, load balancing, TLS and single sign-on integration.

  • Dotmatics
  • Certara D360
  • ALB
  • ACM
  • Okta OIDC
AWS + GCP

RStudio / Posit and Shiny

Server builds, packages compiled from source, LTS upgrades without breaking user configuration.

  • RStudio Server
  • Shiny
  • R
  • Ubuntu Pro/ESM
  • nginx
AWS + GCP

Jupyter and managed notebooks

Migration from user-managed instances to managed Workbench, service-account scoping.

  • Jupyter
  • Vertex AI Workbench
  • Service Accounts
AWS + GCP

ELN and lab data platforms

Signals, Spotfire and Egnyte: integration, access paths, serverless bridges to messaging.

  • Signals
  • Spotfire
  • Egnyte
AWS + GCP

Scientific database operations

Oracle on DEV and PROD: version upgrades, restores from backup, capacity and performance.

  • Oracle
  • EC2
  • EBS Snapshot
  • AMI
AWS + GCP

Proteomics, structural biology and AI/NLP workloads

Cryo-EM reconstruction, ParallelCluster, GPU nodes and notebook pipelines.

  • AWS ParallelCluster
  • CryoSPARC
  • Open OnDemand
AWS + GCP

Scientific and lab application servers

Pipeline Pilot, Knime, FragPipe and Bartender: builds, domain join, license handling.

  • Pipeline Pilot
  • KNIME
  • FragPipe
  • BarTender
  • Managed AD
AWS + GCP

Instrument data platforms

Capacity planning, archival strategy and license management for instrument databases.

  • Oracle
  • EBS Snapshot
  • S3 Glacier
Maintenance agreementRegular care for your cloud, if you want it, agreed around your request.
AWS + GCP

Patch rounds

Scheduled operating system patching across both clouds.

Something elseDescribe it, and we will tell you whether it is work we take on.

If something you run is not on this list, write it in your request anyway. We will tell you whether it is work we take on.

How it works

Every job runs through the same four steps.

  1. 01

    Create your account

    You confirm your email and set up two-step sign-in.

  2. 02

    Describe the job

    You write what you need and attach files if they help.

  3. 03

    Get a quote

    The quote shows every line, the delivery date and what is included. Nothing starts before you approve it.

  4. 04

    Follow the work

    Access requests, the delivery and payment requests all appear in the same conversation.

See how it works in detail

Who does the work

You know who is doing your job.

The engineer's name is on your job and you talk to them directly. The quote and the responsibility stay with I-ORBITX. Every quote carries a delivery date; if we cannot meet the date you need, we tell you before we send the quote.

Describe your job and get a quote.

Open an account and write your request. We reply in the same conversation.

Create your account