Skip to main content

The brief is usually wrong. Finding that out is the job.

MSCLOUDTECH is a forward-deployed engineering practice. A senior engineer embeds with your team, works out what is actually broken, and ships the fix into your production. Eight years on AWS across petroleum, fintech, IoT and property. Four products shipped solo in the last twelve months. The person you talk to is the person writing the code.

8+ yrs
Production AWS shipped
4 products
Shipped solo in 12 months
127 rules
CostPatrol detection engine
$295K/yr
AWS waste cut or flagged

The $295K/yr aggregates two sources. $125K/yr across 5 published proof scans on costpatrol.io (independently verifiable, linked below) plus additional savings from client engagements.

Hired for one thing. The real problem was another.

Both of these started as a different request. Neither problem was in the brief, and in both cases the brief would have been the more expensive thing to build.

RAVINA DEVELOPMENTS · PROPERTY

Asked to connect their Meta ads and improve targeting. There was no ad account, no pixel and no conversion history, so there was nothing to optimise. The audit then found the live site advertising unit sizes the building does not have, and a delivery date already in the past.

Shipped instead: server-side conversion tracking deduplicated against the browser pixel, a bilingual product page carrying the real 70-unit schedule as an interactive floor plan traced from the architect's drawings, a teardown of ten competitors, and a 72-prospect call list.

Read the case study

CUSTOMER SAAS ACCOUNT · FINOPS

Nobody asked for a database review. The scan found 17 redundant Aurora clusters running across four AWS regions, consolidated down to three.

$6,496 a month. The report is published, so this is one you can open and check rather than take our word for.

It is one of five scans on the public record, $125K a year between them. The pattern is the same every time: the expensive thing is rarely the thing anyone suspected, which is why the review comes before the build.

Verify on costpatrol.io

FORWARD DEPLOYED

Four years inside a codebase I didn't write.

Forward deployed is not a consulting engagement with a better name. Since 2022 I have been contracted into a UK enterprise ticketing platform (80+ venues, billions of events a year), writing production code in their repositories, to their review standards, on their on-call rotation. Not advising from outside it.

4 years

continuously embedded

1,441

commits in the client codebase

50

services contributed to

525

days with commits

Their process, not mine

Their standups, their design reviews, their PR standards, their out-of-hours rotation. On a platform with more than a hundred developers I ended up setting the PR review standard for the team. You do not get to import your own way of working. You earn the right to change theirs.

A codebase I inherited

50 services across a multi-tenant platform I did not write, built mostly by people who are still there. The first job in an embedded role is reading: understanding why the previous decision was made before proposing a different one. A lot of the value is knowing which parts not to touch.

Production responsibility

Zero-downtime database engine upgrades across staging, UAT and production. Out-of-hours on-call and live incident response on a revenue-critical platform. The difference between an advisor and an embedded engineer is who gets paged when the thing they recommended breaks.

A recommendation is cheap and reversible. Shipping it into someone else's production and carrying it afterwards is the part most engagements never reach. Commit figures measured 2026-08-21 from a private repository, so they are dated and self-reported; the client is not named here by their preference and mine.

Receipts. Not claims.

Specific work. Specific numbers. Specific stack. Sourced from real client engagements and public proof scans.

Scale & reliability

COSTPATROL

127 rules

AWS cost optimisation SaaS shipped solo in two weeks. 38+ services, Slack-first, cross-account STS scanning.

LambdaDynamoDBEventBridgeStripe

BOODY

3 days

AI nutrition coach on WhatsApp/Telegram from concept to live users. Self-hosted LLM, 4-layer memory.

OllamaLanceDBTypeScript

VOWTRUST

1,000+ files

Institutional deal verification platform with 5 KYC/AML providers and human-mediated deal rooms.

Next.jsLambdaPostgreSQLTerraform

DINTERO (OSLO)

50+ Lambdas

KYC/CDD compliance platform serving 4 Nordic countries from a single multi-tenant SaaS.

LambdaCognitoDynamoDBServerless

FinOps wins

CUSTOMER SAAS ACCOUNT

$6,496/mo

Consolidated 17 redundant Aurora clusters down to 3 across 4 AWS regions.

AuroraRDSMulti-regionverify on costpatrol.io

AURORA → DYNAMODB

85% cost cut

Anonymised example: re-platforming a search-heavy Aurora workload onto DynamoDB single-table design plus OpenSearch.

DynamoDBOpenSearchMigration

MULTI-REGION ENV

$1,112/mo

Retired 35 idle resources flagged across 7 AWS regions covering NAT, RDS, EBS, S3, and Lambda.

NATRDSEBSS3verify on costpatrol.io

OBSERVABILITY

$8,666/mo

Recovered across two fixes. $6,900/mo from filtering unfiltered Metric Streams, $1,766/mo from removing CloudWatch dual-shipping.

CloudWatchMetric StreamsPulumi

Our cost-cut work is on the public record.

Every scan below ran on a real AWS account and links to a public CostPatrol report. Numbers you can verify in one click.

$6,496/mo
$77K/yr

RDS Aurora consolidation: 17 clusters down to 3

Verify
$1,350/mo
$16K/yr

Aurora storage type fix: 93 findings across 21 rules

Verify
$1,168/mo
$14K/yr

DynamoDB billing mode: 3 tables on wrong mode

Verify
$1,112/mo
$13K/yr

Idle resource cleanup: 35 resources across 7 regions

Verify
$284/mo
$3.4K/yr

One EBS volume dormant for 1,790 days

Verify
$10,410/mo
$125K/yr

Total flagged across published scans.

Want a scan on your own AWS account?

Who we have shipped for.

Real companies across six countries. Some are public, some are private. The work speaks for itself.

Norwegian fintech

Dintero

KYC/CDD boarding platform with 50+ Lambdas serving 4 Nordic countries.

Fortune 500 oil & gas

PETRONAS ICT

Downstream petroleum dashboards, SAP integration, real-time WebSocket APIs.

Malaysian RegTech

ReGov Technology

Blockchain identity (OMNI.iAM), serverless GraphQL, investment banking portal.

MedTech

Canary Detect

IoT smart-water monitoring platform, real-time leak alerts and event ingestion.

Egyptian design studio

FourseeDesign

Booking site and internal dashboard on serverless AWS for $5/mo all-in.

Egyptian property developer

Ravina Developments

Acquisition stack from zero: server-side conversion tracking, bilingual product page, competitor teardown, outbound list.

What we build for ourselves.

Three production products shipped solo in twelve months using AI-augmented engineering. Proof we build, not just consult.

CostPatrol

AWS cost optimization and anomaly detection SaaS.

127 detection rules across 38+ AWS services. Slack-first delivery. Multi-tenant with cross-account STS. Stripe billing across 5 tiers.

TypeScriptLambdaDynamoDBEventBridgeStripeSlack
Read case study

Boody AI

WhatsApp and Telegram AI nutrition coach.

Self-hosted Gemma 4 26B for multimodal food recognition, selected by evaluating candidates on real food photos. 4-layer memory (SQLite metrics, LanceDB vectors, LLM-composed weekly notes, recent context). Custom MENA food database. Concept to live users in 3 days.

Node.jsTypeScriptOllamaLanceDBTelegrafBaileys
Private beta

VowTrust

Institutional deal verification for cross-border banking.

Dual-mode platform. Express runs a 15-45 sec automated pipeline integrating 5 KYC/AML providers. Institutional runs human-mediated deal rooms with bank officer and lawyer roles. 1,000+ TypeScript files.

Next.jsLambdaPostgreSQLTerraformServerless
SOC 2 design

The work behind the receipts.

Full write-ups of selected engagements. Architecture, decisions, trade-offs, and the production numbers.

50+ Lambdas

Dintero KYC/CDD Platform

4 Nordic countries. 6 compliance providers. Built on Serverless + CDK.

Read case study
127 rules / 38+ services

CostPatrol FinOps SaaS

Multi-tenant, cross-account scanning, Slack-first alerts, Stripe billing.

Read case study
Millions of readings/day

Smart Water Monitoring

IoT ingestion, 15+ real-time alert types, leak detection at scale.

Read case study
70 units, 4 floors

Ravina Square Launch Stack

Conversion tracking, an interactive plan traced from the architect drawings, competitor teardown.

Read case study

Four principles. Each backed by how we actually work.

01

AI-augmented engineering

We built our own Claude Code skill ecosystem (20+ custom skills: PR review, security scans, content QA, project discovery). CostPatrol, Boody, and VowTrust each shipped solo in weeks instead of months.

02

Senior only

Senior and hands-on. No bootcamp grads, no junior pairs, no offshored throughput. The person you talk to is the person writing the code.

03

Owned on-call

We carry the pager. 3am PagerDuty alerts, pull the maintenance page if needed, escalate when it is beyond a quick fix. Production is not someone else's problem.

04

Tested under load

TDD with Jest plus LocalStack for Lambda. Integration suites hit real backing services. UAT before merge. We assume flash sales, throttling, and the stuff that breaks at scale.

05

The audit comes first

Before building what was asked for, we check it is the right thing. On the Ravina launch that meant finding a conversion event firing from 35 different URLs, and product copy describing units the building does not have. Neither was in the brief. Both would have been paid for in wasted ad spend.

Senior-led, with a specialist bench.

Mohamed builds and ships. Frontend and design specialists join for custom UI, like the FourseeDesign build. Remote-first since 2020.

Mohamed Shehabeldin, Founder & Lead Engineer at MSCLOUDTECH
Founder & Lead Engineer

Mohamed Shehabeldin

Backend and infrastructure engineer. Eight years shipping production systems on AWS across fintech, IoT, energy, and devtools. Cut an AWS bill by 85% on an Aurora migration. Shipped four products solo in 12 months with Claude Code. Founded MSCLOUDTECH in 2022.

[email protected]LinkedInGitHub

Extended bench

YH
Frontend Engineering

Youssef Hany

React, Next.js, and modern web. Comes in for custom frontend and UI work, like the FourseeDesign build, when a project needs design depth.

HA
Design

Hania Ayman

Product design and user experience. Bridges design and engineering on client work where the interface matters as much as the system underneath.

In their words.

MSCLOUDTECH integrated quickly with our agile delivery, brought the AWS depth we were missing, and adapted to the way our teams already worked.

Their team-extension model carried us through the rollout of an event-driven architecture. The stability and scalability of what shipped speaks for itself.

Engineering Manager

UK Theatre Ticketing Platform . 40+ venues . Billions of events/year

Senior-led. Remote-first.
Registered in Estonia.

MSCLOUDTECH OÜ. Remote-first since 2020, registered in Estonia in 2022. Senior-led software development and AWS consulting, with frontend and design specialists for custom UI. No outsourcing, no subcontracting, no junior pyramid. Clients across the UK, Norway, Malaysia, Egypt, US, and UAE.

Founded
2022
Registered
Tallinn, EE
Reg #
16617760
Delivery
Senior-led
Clients
6+ countries

Let's talk about what you're building.

15-minute call. No pitch. We will tell you honestly if we are the right fit.