Hey folks, We’ve been interviewing engineers and l...
# platformbuzz
b
Hey folks, We’ve been interviewing engineers and leaders across Platform, DevEx, SRE, and DevOps about their biggest challenges. The #1 theme we’ve heard: growing tech stack diversity is making it harder to enforce org-wide standards for code quality and security. IDPs and CI/CD templates help, but most teams we spoke to still struggle with edge cases and legacy services that never quite make it onto the “paved path.” Especially in regulated industries, where compliance isn’t optional, this turns into a lot of manual effort to ensure the right things are happening everywhere. Curious if this matches what you’re seeing, or are we way off base?
d
My 2 cents from a consultants POV is that while the diversity of tech stack is a contributor to this feeling of chaos but to me it is deeper rooted than that that. My observation is that teams in more mature orgs are not usually incentavized to deal with this, there frankly are not org-wide or even group wide standards in many cases. IE - they might be recommendations that teams only maybe have to adopt. For smaller orgs and startups - this does not get worked into the fabric and habits early enough and retro fitting is always a harder lift.
b
Good observation - I've also noticed that with startups that have grown, but I have talked to some larger companies that have standardized really well from the beginning and feel less of the chaos because of it (rare though imo)
a
> growing tech stack diversity is making it harder to enforce org-wide standards for code quality and security. I'd say this was true for other things as well as code quality and security. Even things like Monitoring, Logging, Tracing. Each team has different requirements which don't fit the org-wide selected tool or eco system. This leads to teams deploying and managing their own tools and services which eventually don't get the attention they need.
m
I've seen this in other orgs. My current one, well isn't very mature. The Devops team puts everything on devs without any guard rails. So every Dev team gets to pipeline by a unique process which takes too long to setup.