Platform Engineering: Herding the Electric Sheep & Some Frogs

A talk about platform engineering, DevOps, DevSecOps, sprawl, chaos, bad decisions, compliance, and security. Why engineer an Internal Developer Platform when I have DevOps? DevOps works fine when you are a 20 person start-up, but it often doesn't scale to enterprise-level development efforts. When you have 3,000 developers with different needs and you are responsible for EO compliance and security, a modular self-service platform is a good choice to build. In this talk, I cover the challenges we have faced in a 3,000-developer enterprise, and how we are working to address them. I also cover how we are working on automating, integration, and scaling the creation of our internal developer platform. We talk about the tools we are using including JFrog products like Artifactory, Curation, Xray, and Advanced Security. I also talk about how we are leveraging SBOMs, SLSA, and other tools to help build out a secure and compliant platform.