Open for new work · UK · GMT
2026 ·  Brightfield Works Studio · UK

Practical systems for digital platforms, infrastructure, and operational work

We design, build, secure, and operate the systems your organisation depends on — from modern web platforms and cloud infrastructure to quality, safety, and training programmes. Polished where it shows. Sound where it matters.

02  /   The system

Four practices, one connected way of working.

FIG. 01 — Brightfield Works practice map Last revised · 2026 · Q1
03  /   Expertise

Digital delivery first, with the operational judgement to keep it useful.

01.1

Digital platforms

Modern websites, ecommerce, CMS builds, integrations, payments, performance, and deployment workflows. We aim for systems that ship cleanly, read well to other engineers, and stay legible after we hand them over.

AstroNext.jsTypeScriptHTML/CSSStripe
01.2

Technology & infrastructure

Cloud, automation, migrations, networks, security, compliance, and operational reliability. From PKI design and certificate hygiene to hypervisor upgrades and storage refresh — the unglamorous work that keeps everything else honest.

CloudflareAzureVMwareNetAppTerraformPowerShellBeyondTrust
01.3

Platform care

Optional support after delivery: hosting coordination, domain and email administration, updates, monitoring, and practical day-to-day help. Quiet, paid by the hour or retainer, and easy to leave behind when no longer needed.

Google WorkspaceCloudflareLinearMonitoring
01.4

Operational systems

Quality, safety, EHS, training content, process design, internal communications, and rollout support. Systems-thinking applied to the people side of the work — with the same precision we give to code and infrastructure.

EHSQualityZero HarmTrainingRollout
04  /   Selected work · Live properties

Sites we built, currently live and owned by the client.

05  /   Infrastructure & security

Quieter work behind the scenes — migrations, hardening, and refresh.

PRJ — 05.1 Security · Migration

Microsoft PKI review, redesign, and migration.

Full review of an enterprise PKI estate, followed by redesign and migration. Security hardening across certificate templates, web enrollment, CRL distribution, and related components.

FROM Windows Server 2012
on-prem VMware
TO Windows Server 2022
Azure VMs
Active Directory CSCertificate templatesCRLAzureHardening
PRJ — 05.2 Virtualisation · Refresh

VMware hardware refresh and version upgrade.

Hypervisor upgrade alongside a full hardware refresh, with compute consolidation to reduce footprint and operating overhead without losing headroom.

FROM vSphere 7
previous-gen hosts
TO vSphere 8
consolidated compute
vSphereESXiCompute consolidationCapacity planning
PRJ — 05.3 Storage · Refresh

NetApp storage refresh, retiring EOL platforms.

Retirement of end-of-life NetApp FAS and AFF systems onto newer hardware, with the migration sequenced to keep workloads stable throughout.

FROM FAS · AFF
end-of-life
TO Newer NetApp
supported platforms
NetAppONTAPSAN/NASData migration
06  /   How we work

Optional support after delivery, without opaque ownership models.

You own the work.

Where possible, clients own their code, accounts, domains, and infrastructure directly. We document the bits that aren’t obvious, hand over keys properly, and write things so the next person — yours or ours — can read them.

After launch, we can stay involved through optional platform care: hosting coordination, domain and email administration, updates, monitoring, and day-to-day technical support. Quiet, scoped, and easy to leave behind.

Principles we don’t bend on.

  • A.No opaque ownership of domains, accounts, or code.
  • B.Documentation written for the person reading it next.
  • C.Security and ops are part of the brief, not an afterthought.
  • D.Small estate > large estate. Less to break, less to manage.
  • E.Platform care is optional and can be ended at any time.
07  /   Credentials

A working mix of academic, professional, and operational practice.

Academic · MSc Computer and Information Security
Academic · MSc Global Marketing
Professional BCS Professional Member
Operational EHS, quality, and Zero Harm leadership

Bring us a platform, process, or technical decision that needs clarity.

We’re a small studio. We take on a handful of engagements at a time, across digital delivery, infrastructure, and operational systems. If something here maps to a thing you’re working on, write to us.