CloudScale Consulting exists because the hardest infrastructure problems don't have clean answers — and the people giving advice usually haven't lived through the failure modes they're theorising about.
CloudScale Consulting is a specialist technology consultancy focused on four disciplines: AWS architecture, cybersecurity, Zero Trust network access, and rearchitecting large-scale technology platforms. The practice is led by Andrew Baker and backed by 20+ years of engineering leadership at AWS, Capitec Bank, and ABSA Group.
We don't advise from the outside. Every recommendation is grounded in having operated these systems at the highest level — from scaling EC2 at AWS to leading technology transformation across Africa's largest banks. We publish our thinking at andrewbaker.ninja, and we open-source the tools we use in production.
The audience for everything we do — blog, plugins, and consulting — is engineers, CTOs, and infrastructure leads who need opinions from someone who has actually broken the systems they're discussing, not someone who has read about them.
Andrew Baker is a technology executive with 20+ years building and operating large-scale infrastructure across financial services, cloud computing, and banking technology on three continents.
As Group CIO at Capitec Bank, he leads technology strategy for South Africa's leading digital bank — 22 million clients, millions of daily transactions, and the regulatory scrutiny that comes with it.
Before Capitec, he was Director of Engineering for EC2 at AWS — the foundational compute platform powering the internet. Not a consultant advising on AWS. Someone who helped scale the platform itself.
His career has also included CTO at ABSA Group (pan-African banking technology transformation) and algorithmic trading systems at Barclays Capital — where low-latency infrastructure failures have immediate, measurable consequences.
andrewbaker.ninja covers the six domains where CloudScale has genuine operational experience — not curated content, not recycled takes.
Building technical organisations that ship — hiring, structure, culture, and the management patterns that actually work at scale.
Infrastructure decisions that survive contact with production. EC2, Aurora, S3, Lambda, and the performance cliffs most architectures hit silently.
BGP, DNS, TLS, Cloudflare, ZTNA — the networking fundamentals that don't make it onto cloud certification syllabuses but break production anyway.
Five free WordPress plugins. Security frameworks. The philosophy: if it works in our production, we open-source it. No upsells, no premium tiers.
The specific security and compliance constraints of regulated financial services. POPIA, GDPR, PCI DSS, and the threat models banks actually face.
Practical AI integration with Claude and Gemini — in production, on your server, with your data going to the provider API, not through a middleman.