Three practices. One senior team.
Security & Compliance, Engineering and Managed Operations on AWS – delivered by the same six senior engineers, founder-led, since 2010. Projects at a fixed price after discovery, operations as a monthly subscription. No development team to upsell you.
AWS Managed Service Provider (audited) · Advanced Tier Services Partner · Retail Competency · EKS, ECS & Control Tower Service Delivery · 700+ projects since 2010 · 5.0 on Clutch
Security & Compliance
Assessment → fixed-price remediation → continuous compliance operations → audit support. We own the cloud and infrastructure part of PCI DSS, HIPAA and SOC 2: the technical controls, the evidence and the conversation with your assessor. Payment processors have passed annual PCI DSS certification on environments we built and operate; HIPAA telehealth infrastructure we have built and operated in production. Zero security breaches in any client environment since 2010.
Security & Compliance Engineering
Fixed-price assessment (5-10 days, findings mapped to CIS and your framework), remediation by milestone, EKS hardening included. Learn more →
PCI DSS on AWS
Cardholder data environments engineered to pass the QSA: segmentation, encryption, logging, access control, evidence on demand. Learn more →
HIPAA on AWS
PHI encryption, audit trails, access controls and a defensible answer to every line of the security questionnaire. Learn more →
SOC 2 Readiness
The infrastructure side of SOC 2: access control, logging, change management, DR - built before the observation window. Learn more →
Continuous Compliance Operations
Access reviews, patch cadence, restore tests and evidence for PCI DSS / HIPAA / SOC 2, kept running between audits under the managed operations plans. Learn more →
Engineering
Migrations without downtime, Amazon EKS, disaster recovery, high-load architectures, landing zones and Control Tower, platform engineering. Fixed price after discovery, paid by milestone – miss one, you don’t pay for that phase. Everything in Terraform, so the documentation is the environment.
Migration to AWS
From on-premises, another cloud or a PaaS. Zero-downtime cutovers into a landing zone built for security and cost control. Learn more →
Graduate to AWS
From Heroku, Railway or Vercel to AWS when the enterprise deal needs it. We migrate infrastructure, not your code. Learn more →
AWS Infrastructure Design & Build
Environments built from scratch: accounts, networking, IAM, observability, CI/CD - production-ready and auditable from day one. Learn more →
Kubernetes / Amazon EKS
EKS design, migration, hardening, upgrades without downtime, cost control with Karpenter and Spot. Amazon EKS Service Delivery partner. Learn more →
Infrastructure Audit
Fixed-price review of cost, security, reliability and performance with a ranked findings list and remediation plan. Learn more →
Well-Architected Review
Your workloads against the six pillars, with a remediation roadmap executed by the same team. Learn more →
AWS DevOps Services
CI/CD, Terraform, GitOps, containers on ECS/EKS, observability - delivered as a project or under managed operations. Outcomes, not seats. Learn more →
AI Infrastructure on AWS
GPU/EKS and Amazon Bedrock infrastructure for AI workloads: isolated, cost-controlled, auditable. Learn more →
AWS Consulting
Architecture decisions, cost models and migration plans from engineers who then build what they recommend. Learn more →
Managed Operations
Monitoring, on-call, patching, security operations and cost control under a monthly subscription. AWS independently validated our ability to operate and manage cloud environments on an ongoing basis before granting the Managed Service Provider designation in 2026. 5–15 minute response SLA, 99.95% uptime SLA (up to 99.99% achieved), monthly and cancellable. Priced by scope of responsibility and SLA, not by tickets or seats.
AWS Infrastructure Support (MSP)
Four plans from business-hours support to a dedicated team with continuous compliance operations. Learn more →
FinOps Audit - 20% or free
Five working days, read-only access. We find at least 20% of recoverable spend or the audit is free. Learn more →
Cost Optimization
The ongoing service that follows the audit: right-sizing, Savings Plans, architecture changes, monthly cost control. Documented results 34–60%. Learn more →
AWS Reseller
AWS billing through IT-Magic with partner-level terms and the same senior team behind the account. Learn more →
Industry recognition
Validated by AWS, not self-declared: Managed Service Provider (audited 2026) · Advanced Tier Services Partner · Retail Consulting Competency · Amazon EKS, Amazon ECS and AWS Control Tower Service Delivery.
Why a specialist
We don't write your software
No development department means no incentive to expand the project. We're hired for infrastructure and that's all we bill for.
Audited, not self-declared
AWS Managed Service Provider: AWS independently examined our operations, security and incident management. Plus Retail Competency and Service Delivery validation for EKS, ECS and Control Tower.
You talk to the people doing the work
Founder-led from the first call, senior engineers only. No account manager layer, no swap to juniors after signing. 20+ AWS certifications across six people.
We price the outcome, not the hours
Projects: fixed price after discovery, paid by milestone. Operations: a monthly subscription scoped by what we're responsible for, not by tickets or seats.
FAQ
Which practice do we start with?
Start with the problem, not the practice. A security questionnaire or an upcoming audit → Security & Compliance. A migration, a cluster or a rebuild → Engineering. Nobody owning production → Managed Operations. The 30-minute call sorts this out.
How is the work priced?
Projects are quoted at a fixed price after a short discovery and paid by milestone – miss one, you don’t pay for that phase. Operations are a monthly subscription scoped by responsibility and SLA; included engineering capacity is stated in hours, but you are not buying hours.
Do you build applications?
No. IT-Magic has no development department. We design, secure and operate the AWS infrastructure your application runs on.
What does "AWS-audited" mean in practice?
AWS independently examined how we operate client environments – monitoring, incident management, security, change control, continuity – through a multi-stage audit before granting the Managed Service Provider designation in 2026. It is a validation of the operations practice, not a self-description.
Thirty minutes, one engineer, your findings list
Describe the environment and the deadline behind it. You’ll leave the call knowing which practice applies, what the first step costs, and what you can skip.