The numbers are staggering:
- 75% of developers lose 6–15 hours weekly to tool sprawl
- On average, developers now juggle 7.4 different tools for basic operational tasks
- 78% of engineering teams wait 24 hours or more for SRE/DevOps assistance
- 76% of organisations admit that architectural complexity is a primary driver of developer stress and low productivity
That's 15 hours per week — nearly two full working days — lost to context-switching between tools, waiting for other teams, and fighting infrastructure complexity. Across a 50-engineer team, that's 750 hours per week. At $100/hour fully loaded cost, that's $3.9 million per year in pure waste.
But the cost isn't just financial. The developer burden is a security risk (overwhelmed developers skip security reviews), a retention crisis (frustrated developers leave), and a competitive disadvantage (slow teams ship slower than competitors). Platform engineering addresses all three.
Anatomy of the Developer Burden
Tool Sprawl
A typical developer interaction with infrastructure in 2026:
- Write code in VS Code
- Push to GitHub
- Check CI status in GitHub Actions
- View build logs in ArgoCD
- Check deployment status in Kubernetes dashboard
- View application logs in Grafana/Loki
- Check metrics in Prometheus
- Trace a request in Jaeger
- Read a secret in Vault UI
- File a ticket in Jira for the infrastructure change they can't make themselves
That's 10 tools for a single deploy-and-verify cycle. Each tool has its own authentication, its own UI conventions, its own mental model. Every switch costs cognitive overhead — research consistently shows that context-switching takes 23 minutes to recover from. If a developer switches tools 15 times per day, that's 5.75 hours of recovery time. This explains the "6–15 hours lost weekly" statistic perfectly.
The Ticket Wall
What developers actually need from infrastructure:
- A new namespace for their service
- A database provisioned with appropriate credentials
- A TLS certificate for their endpoint
- A secret rotated
- Network access to a service in another namespace
- More CPU/memory for their workload
In most organisations, every one of these requires a ticket — to the platform team, DevOps team, security team, or DBA team. Each ticket enters a queue. The average wait: 24+ hours. During those 24 hours, the developer is blocked. They either wait (wasting expensive engineering time) or find a workaround (often insecure, always tech debt).
Cognitive Overload
Beyond tools, developers are expected to understand:
- Kubernetes manifests (Deployments, Services, ConfigMaps, Secrets, NetworkPolicies, PodDisruptionBudgets, HorizontalPodAutoscalers...)
- Helm chart authoring and values management
- CI/CD pipeline configuration
- Observability stack configuration (metrics, logs, traces)
- Security requirements (SBOM generation, image signing, vulnerability scanning)
- Cloud provider specifics (IAM, networking, storage classes)
This knowledge was traditionally owned by dedicated operations teams. "You build it, you run it" shifted operational responsibility to developers without reducing their feature development expectations. The result: developers who are responsible for everything and expert in nothing.
Platform Engineering: The Solution
Platform engineering creates an Internal Developer Platform (IDP) — a self-service layer that abstracts infrastructure complexity and provides developers with golden paths to production:
What an IDP Provides
- Service catalogue: One place to see all your services, their status, ownership, documentation, dependencies, and health
- Self-service provisioning: Developers create namespaces, databases, secrets, and certificates through a UI or CLI — no tickets, no waiting
- Golden paths: Pre-approved, pre-secured templates for common patterns. "Deploy a Java microservice" gives you a working, secured, observable service in minutes — with all security controls baked in
- Unified observability: Logs, metrics, traces, and deployment status in one place. Not 5 separate tools — one dashboard per service
- Automated compliance: SBOM generation, vulnerability scanning, image signing, and policy evaluation happen automatically. Developers don't think about compliance — the platform handles it
The 7.4 → 1 Reduction
The IDP (typically built on Backstage, Port, or a custom solution) becomes the single interface:
Before: 7.4 tools, context-switching hell
Developer -> GitHub (code)
Developer -> GitHub Actions (CI)
Developer -> ArgoCD (CD)
Developer -> Grafana (logs + metrics)
Developer -> Jaeger (traces)
Developer -> Vault (secrets)
Developer -> Jira (tickets for infra changes)
Developer -> Kubernetes dashboard (deployments)
Developer -> IDP (Backstage) -> {
Code — GitHub integration
Build — CI status inline
Deploy — One-click promote to staging/production
Observe — Logs, metrics, traces in unified panel
Secrets — Self-service rotate/create
Provision — Databases, certs, namespaces on-demand
Security — SBOM, scans, compliance status per service
}
Self-Service With Guardrails
Self-service doesn't mean uncontrolled. The platform enforces guardrails automatically:
- Resource quotas: Developers can scale within bounds. Exceeding bounds requires approval
- Security policies: Namespaces come with NetworkPolicies, PSS enforcement, and RBAC pre-configured. Developers get security without configuring it
- Cost controls: Provisioning shows estimated cost. Budget limits prevent runaway spending
- Compliance checks: Every deployment must pass automated security gates. The platform blocks non-compliant deployments — not a human reviewer
Kubernetes Recipes
Practical guide for container orchestration and deployment — hands-on patterns you can use today.
View on Amazon →The Security Dividend
Platform engineering isn't just a productivity play — it's a security play:
- Fewer workarounds: When developers can self-service what they need in minutes, they don't build insecure shortcuts
- Consistent security posture: Every service deployed through the golden path inherits the same security controls. No more "this service was configured differently because the developer didn't know about NetworkPolicies"
- Faster patching: Platform-level base image updates propagate to all services. When a CVE affects the base image, the platform team patches it once and every service picks it up
- Reduced alert fatigue: Consolidated observability means security alerts route to the right team automatically — not to a central channel that everyone ignores
- Compliance by default: SBOM, scanning, signing, and policy evaluation are platform features, not per-service configurations. Compliance coverage is 100% by design
The Retention Dividend
Developer experience directly correlates with retention:
- Developers who spend more than 30% of their time on operational toil are 2.5x more likely to leave within 12 months
- Top talent joins companies where they can focus on building — not fighting infrastructure
- An IDP that reduces toil by 50% is a more effective retention tool than a 10% salary increase
Introduction to Chip Design with Open-Source EDA Tools
Design and simulate digital circuits using open-source tools. In collaboration with Starweaver.
Start on Coursera →Implementation Path
- Month 1: Backstage deployment with service catalogue. Just the catalogue — getting all services discoverable with ownership is immediately valuable
- Month 2–3: Self-service provisioning for the top 3 ticket types (namespace creation, secret management, database provisioning). Each ticket type eliminated frees capacity for both developers and platform team
- Month 4–5: Golden path templates for your 2 most common service types. New services deploy in minutes with full security and observability
- Month 6: Unified observability dashboard per service. Consolidated alerts, metrics, logs, and deployment status
- Ongoing: Expand golden paths, add more self-service capabilities, measure developer satisfaction quarterly
What Open Empower Delivers
We design and implement Internal Developer Platforms for regulated enterprises:
- Platform architecture: Backstage, Port, or custom IDP design based on your team size and complexity
- Golden path templates: Pre-approved, pre-secured deployment templates for your common service patterns
- Self-service infrastructure: Namespace provisioning, database creation, secret management, certificate automation — all ticket-free
- Security integration: SBOM, scanning, signing, and policy-as-code baked into the platform layer
- Observability unification: Logs, metrics, traces, and security posture in a single per-service dashboard
- Developer experience measurement: DORA metrics, developer satisfaction surveys, and toil tracking to prove the platform is delivering value
Your developers are losing 15 hours a week to infrastructure toil. That's 750 hours per week across a 50-person team. Let's give them that time back.
AI Readiness Assessment
Fixed-fee, 3-4 week infrastructure and compliance audit with a concrete roadmap. No big-consultancy overhead.
See Scope & Pricing →
Luca Berton
