Technology partners
Interkey delivers Docker and Kubernetes work in Saudi Arabia
Interkey provides Docker and Kubernetes consulting in Saudi Arabia: containerising applications that were never designed for it, building the pipelines around them, and operating the platform afterwards.
The trap
What Interkey delivers with containers
Containerisation is well understood as an idea and frequently mishandled in practice. The common failure is treating it as a packaging exercise: an existing application is wrapped in a container, deployed to a cluster, and nothing improves, because the application still holds state locally, still assumes it is the only instance, and still cannot be restarted without a coordinated outage.
Interkey’s container work starts from the application rather than the platform. That means identifying what actually prevents a given system from running as multiple interchangeable instances: local session state, filesystem assumptions, hard-coded configuration, a startup sequence that depends on something else being ready, and fixing those before the orchestration layer is expected to solve them.
The delivery
From application to running platform
Unblock the application
Find and fix what prevents the system from running as multiple interchangeable instances, before the orchestration layer is expected to solve it.
Images and pipelines
Container image design and build pipelines, with CI/CD so that deployment becomes routine rather than an event.
Cluster architecture
Kubernetes cluster architecture and sizing, designed for the workloads it will actually carry.
Operate for years
Monitoring, logging, resource management and the upgrade discipline a cluster needs to stay healthy over years.
Capability
Where this sits in the practice
Container orchestration, cloud-native development, DevOps consulting and CI/CD pipeline development are all listed among Interkey’s core capabilities, and this sits alongside its mission-critical solutions practice, which matters, because the organisations doing this here are frequently running systems that cannot simply be taken offline for a weekend.
The pipeline work meets teams where they already are: builds and deployments in whichever CI the estate runs, GitLab CI, GitHub Actions, Jenkins, Azure DevOps, with GitOps-style declarative delivery adopted where it genuinely fits the team’s operating model rather than as a fashion statement. The test applied throughout is unglamorous: can this team deploy on a Thursday afternoon without holding its breath.
The first decision
Managed or self-managed Kubernetes: decided by constraint, not preference
The honest decision rule: take a hyperscaler’s managed service when your data and workloads are allowed to live there, and take self-managed only when a constraint forces it, accepting that self-managed means owning the platform’s operation for years. Everything else is detail on those two sentences.
| What decides it | Managed service | Self-managed, in-Kingdom |
|---|---|---|
| Where workloads may run | The provider’s regions; fine when your obligations allow it | Your infrastructure, inside the Kingdom, which is the usual reason to be here |
| Control-plane operation | The provider’s problem: upgrades, availability, patching arrive as a service | Your problem, or your partner’s: versions, upgrades and rollback discipline are real work |
| Node lifecycle and scaling | Largely automated | Designed and operated deliberately, sized against the workloads it will actually carry |
| What you give up | Residency control, and some architectural freedom | The provider’s automation: you are buying control with engineering effort |
| Who to staff for | Application and platform engineers | The same, plus real cluster operations, in-house or through Interkey |
Security posture
What a production cluster has to be able to show
Container platforms concentrate risk as well as workloads, and a security review will ask for these whether or not anyone planned for them. Building them in from the start is dramatically cheaper than retrofitting them under audit pressure.
- Role-based access control that maps to real teams, not one shared admin credential
- Admission policy: what is allowed to run, and what is automatically refused
- Image scanning and a private registry, so provenance is known for everything deployed
- Secrets managed outside the codebase, with rotation that actually happens
- Network policy between workloads, because a flat cluster network is an incident waiting
- An upgrade cadence with a tested rollback, written down and rehearsed
- Backup and restore for cluster state and data, proven by an actual restore
Day two
Who holds the pager
The container platform conversation this market skips is the one that matters most: after go-live, who owns the cluster. Kubernetes versions move on a fixed cadence, nodes fail, certificates expire, workloads creep past their resource requests, and a cluster nobody owns degrades silently until it fails loudly. Self-managed platforms in particular need a named operator with an upgrade discipline, a capacity review habit and an on-call arrangement that survives contact with a Thursday-night incident.
Interkey does that work on the Saudi working week, either operating the platform or backing the in-house team that does, and treats visibility as part of the platform rather than an optional extra: a cluster is not finished until its workloads can be seen, which is where this practice meets Interkey’s observability work. Cost belongs in the same conversation, because unbounded resource requests and forgotten namespaces are the container platform’s version of the unread log bill.
The Saudi context
Two constraints shape these projects locally
Two constraints shape these projects locally. The first is data residency: many Saudi organisations cannot run workloads outside the Kingdom, which pushes them toward self-managed Kubernetes on local infrastructure rather than a hyperscaler’s managed service. Self-managed means somebody has to design, operate and upgrade the cluster: that is the work.
The second is that modernisation here is usually incremental. Large government and enterprise systems are not rewritten; they are moved piece by piece, with the legacy system running alongside the new one for a long time. Container platforms in this market have to accommodate that hybrid state rather than assume a clean cutover.
Sectors
Industries and connected services
This work appears across government and semi-government entities modernising citizen services, telecommunications operators running large internal platforms, energy and industrial organisations, and e-commerce and logistics businesses that need to scale with demand rather than provision for a peak they hit twice a year.
It connects directly to end-to-end software engineering, since containerisation is usually part of building or rebuilding an application, and to digital transformation and cloud migration, where moving to containers is one workstream inside a broader modernisation programme. Where a data platform change is happening at the same time, the two are normally planned together.
From the insights library
Where this practice connects
Docker and Kubernetes: every question a buyer asks
Getting started, the managed-versus-self-managed platform decision, and what operating a cluster involves, in one place.
Implementation guideKubernetes monitoring in Saudi Arabia
What breaks without cluster visibility, and how observability is designed for sovereign and on-premise clusters.
HubThe observability practice
A platform build is incomplete until its workloads can be seen: how Interkey approaches the second half.
Migration guideWhen the data layer moves at the same time
Container and data platform changes are normally planned together; here is how the data half runs.
Containerisation of systems that predate containers
The application unblocked first, then the platform
Self-managed and in-Kingdom platforms
For estates that cannot leave the Kingdom
Operated on the Saudi working week
Riyadh engineering, Sunday to Thursday
DevOps and CI/CD practice since before it had the name
In Saudi enterprise IT since 1999
Next step
Discuss a container platform
Tell us what runs where today — VMs, bare metal, a cloud account — and whether the constraint is residency, cost or release speed. That is enough for a first conversation.
Or directly
+966-11-2180999 info@interkey.com.saTawuniya Towers, North Tower, 7th Floor, King Fahad Highway, Olaya, P.O. Box 56835, Riyadh 11564, Saudi Arabia
Elsewhere