Capabilities

What we are actually engaged to do.

Four kinds of problem, eight practice areas, and one standard: qualified practitioners, no outsourced delivery, and an honest account of what we find.

01

Strategy that survives contact

We take the outcome you need and engineer the path to it — commercial, technical and operational. Not a deck. A route with dependencies, gates and a defensible cost.

02

Remediation of what already broke

We are frequently the second team in. We give a true assessment of what was built, what it costs you, and what it takes to make it correct — then we do the work.

03

Automation and applied intelligence

Traditional workflow replaced with parallel, instrumented, machine-assisted execution. Efficiency becomes structural rather than a headcount question.

04

Architecture at carrier scale

Systems designed to hold at a hundred million users a day, five-nines availability and regulated data — because that is the environment we came up in.

How we work

We build it right the first time

Our methodology uses technological innovation to drive company-wide transformation — reducing complexity and risk while increasing value, optimizing output and streamlining process. It reshapes strategy at every level, which is what makes the improvement stick.

  1. 01

    Assess

    We look at what is actually there — infrastructure, workflow, contracts, people — and give you a true assessment. Including the parts that are working, and the parts that were sold to you as working.

  2. 02

    Strategize

    We take the outcome you need and engineer a route to it: sequence, dependencies, decision gates, and a cost you can defend to a board.

  3. 03

    Build

    Our own team executes. Custom-built solutions, not repackaged licenses. We build it right the first time because we are usually the ones cleaning up what was not.

  4. 04

    Hand over

    We leave you with the systems, the documentation and the internal capability to handle the next challenge without calling anyone. That is the point of the engagement.

Practice areas

Where the work lands

Enterprise architecture

Systems designed to hold under real load — a hundred million users a day, five-nines availability, regulated data classes, and the failure modes that only appear at scale.

  • High-transaction and ultra-low-latency architecture
  • Distributed and grid compute design
  • Redundancy, resilience and carrier-class engineering
  • Multi-tier and n-tier application infrastructure

Infrastructure remediation

The second-team-in engagement. Something was built wrong, is costing money, and nobody wants to say so out loud. We assess it honestly and then repair it.

  • Availability and performance remediation
  • Platform migration between clouds and hosting models
  • Cost reduction against existing cloud spend
  • Emergency management and infrastructure takeover

Cloud, virtualization and automation

Private, public and hybrid — designed against provider APIs rather than clicked together in a console, and automated end to end.

  • OpenStack and OpenShift production infrastructure
  • Automated bare-metal cluster build on CoreOS and PXE
  • AWS and Azure architecture, templated and API-driven
  • DevOps toolchains: CI, automated testing, orchestrated deployment

Network functions virtualization

Carrier-grade virtualization and the operational systems around it, for operators moving mission-critical traffic off appliances.

  • SDN, NFV and VNF design and deployment
  • Virtualized Evolved Packet Core and 5G integration
  • Edge compute node design and integration
  • ETSI, ONAP, TOSCA and YANG standards implementation

Data, EDI and integration

Moving transactions between organisations correctly, at volume, under standards that carry penalties when you get them wrong.

  • ANSI X12 4010 / 5010 and ICD-9 / ICD-10 transaction development
  • HL7, health information exchange and CHIN integration
  • Canonical and regressive validation platforms
  • Data warehousing, reporting and analytics infrastructure

Security and compliance

Controls that are enforced rather than documented, tested by people who know how they break, then remediated.

  • Penetration testing and security assessment
  • HITRUST, ISO 27001 and ePHI architecture
  • Configuration enforcement and estate-wide policy compliance
  • Remediation of what the assessment finds

Applied AI and automation

Machine intelligence deployed as governed infrastructure inside your perimeter — not a pilot, and not someone else’s API holding your data.

  • Sovereign AI runtime deployment: on-prem, private cloud, air-gapped
  • Multi-agent workflow engineering with persistent memory
  • Policy, governance and audit as executable controls
  • Trend identification, anomaly detection and predictive analytics
Our AI practice

Product and platform delivery

When the answer is that you need to build something, we build it — with the same standard applied to code as to infrastructure.

  • Custom platform and application development
  • Mobile and connected-device programs
  • Commerce, logistics and supply-chain platforms
  • Third-party interface and collaboration systems

How we are different

Koi does not use the client as a learning experience

Senior practitioners only

Every consultant has operated in your field before they touch your project. You are not anyone’s training exercise, and we do not staff to fill a bench.

Nothing is outsourced

We do not subcontract delivery to third-party organisations. The people who scope the work are the people who execute it, managed directly by us.

Multi-disciplinary by design

Our teams are deliberately small and cross-capable. One person covers what a larger firm would bill as three roles, which is why the economics work.

The truth, always

Problems cannot be solved if the real issue is hidden or softened. We tell you what we actually found — including when the answer is that you should not proceed.

Frameworks

Standards and regulatory frameworks worked under

  • ANSI X12 4010 / 5010
  • ICD-9 / ICD-10
  • HL7
  • CMS / MITA
  • Medicare Part D
  • 340B / HRSA
  • HITRUST
  • ISO 27001
  • 510(k)
  • 21 CFR Part 820
  • ISO 13485
  • ISO 9001:2000
  • ETSI
  • ONAP
  • TOSCA / YANG

Stack

Platforms and technologies

  • OpenStack
  • OpenShift
  • CoreOS
  • AWS
  • Azure
  • KVM
  • Xen
  • VMware
  • RedHat
  • CentOS
  • Ubuntu
  • Kubernetes
  • Chef
  • Jenkins
  • Git
  • Nagios
  • Zabbix
  • Nginx
  • HA-Proxy
  • Salesforce
  • Java
  • Elixir / OTP
  • Rust
  • Python
  • PXE
  • Mainframe

Common questions

How we engage, answered plainly

What is an infrastructure remediation engagement?

A remediation engagement is one where a system has already been built, is failing or costing more than it should, and needs an honest assessment followed by repair. Koi Consulting is frequently the second team engaged on a problem. The firm assesses what was actually built, states what it costs, and then rebuilds the defective portions with its own team rather than subcontracting the work.

How does a Koi Consulting engagement proceed?

Engagements follow four stages: assess the existing infrastructure, workflow and contracts and give a true account of what is there; engineer a route to the required outcome with sequence, dependencies, decision gates and defensible cost; build the solution with the firm’s own team; and hand over the systems, documentation and internal capability so the client can handle the next challenge without external help.

What scale of systems has Koi Consulting delivered?

Representative scale includes architectures serving more than one hundred million users daily for Tier-1 carriers, commerce infrastructure at one million transactions per second, remediation of four hundred and seventeen hospitals in six months for ANSI X.12 and ICD-10 conformance, payer transaction platforms serving eighty percent of United States Medicare Advantage plan volume, and availability improved to 99.999 percent through architecture remediation.

What standards and regulatory frameworks has Koi Consulting worked under?

ANSI X12 4010 and 5010, ICD-9 and ICD-10, HL7, CMS and MITA, Medicare Part D, 340B and HRSA, HITRUST, ISO 27001, 510(k), 21 CFR Part 820, ISO 13485, ISO 9001:2000, ETSI, ONAP, and TOSCA and YANG.

Tell us what has to be true.