Cloud and automation for MSPs

Hire Remote Cloud Engineers for Client Tenants and MSP Automation

Somewhere in your RMM is a script only one engineer understands, and somewhere in your client base is a tenant that was built by hand and never written down. A remote cloud engineer, placed by Dokimo, owns that work: client cloud tenants as code, migrations, and the automation that connects your RMM and PSA.

Tell us what you need

The script only one engineer understands

Look through your RMM and PSA and you'll probably find a few of those scripts: the onboarding script that creates the accounts, the policy that patches on Tuesday, the workflow that opens a ticket from an alert, the job that syncs licenses. Each got written by whoever had a free afternoon, and each now depends on that person staying. That caps how fast you can grow, because the next client can't be onboarded faster than the one engineer who remembers how it works.

A remote cloud engineer turns that into owned, reviewed code. The work is scripting in PowerShell or Python against the APIs of the RMM and PSA you run, automation for onboarding and offboarding, integrations between your PSA, your documentation platform and your billing, and the maintenance that keeps them working when a vendor changes an endpoint. Scripts live in version control, get a second pair of eyes, and come with a runbook your service desk can follow.

Client tenants as code, and migrations that don't run on memory

For client Azure and AWS tenants the seat covers landing zones and baselines written as infrastructure as code, in Terraform or Bicep or whichever you standardize on, so client seven isn't built differently from client six. It also covers moves from on-premises servers into the tenant, identity and network design inside the cloud, backup and disaster recovery configuration, and a regular review of cost and idle resources that becomes a line on your QBR.

The kind of seat you pick decides how far it goes. One seat might be a builder who ships modules and pipelines. Another might spend most days inside client tenants on migrations and fixes. Say which you need up front, because the skills test and the price follow from it, and because a seat that tries to be both at once tends to do neither well.

Regulated tenants and physical hardware: where this is the wrong answer

Regulated data needs a conversation first, and some tenants stay with your US staff. Access depends on each client's contract and data. You decide with your counsel, and Dokimo works around it. Some environments are effectively closed to anyone outside the US, and Dokimo won't place an engineer on them: export-controlled defense data and criminal justice systems. Other limits are contract or insurance terms that vary. In a client's cloud tenant a single subscription-level role can reach every resource, so hand out roles as carefully as you pick clients.

A migration that ends with a rack of retired servers, a site with a failing switch, or a printer that won't authenticate needs a person in the building. The engineer can plan the cutover and direct your on-site tech through it, but someone local has to touch the hardware. The same goes for anything that has to be collected, wiped or shipped back.

It's also the wrong answer for one-off work. A single tenant migration with an end date, or a scripting backlog that will end, is better handled by a project vendor. A seat takes time to recruit and ramp, so it doesn't suit a short spike. The seat fits when the automation and the tenants keep needing an owner.

How the seat is priced and tested

Cloud seats run from $2,800 a month in the Philippines and from $4,150 a month in Mexico, and the calculator on the pricing page shows the price for each level. Each price pays the engineer's salary and the employer costs local law requires, including year-end pay. The licenses your MSP provides aren't in it. The level of the work sets where a seat lands: a builder writing automation and a migration engineer inside client tenants are different seats.

Every candidate is tested on the real work before you meet them. For this seat that is a script to debug, an infrastructure as code module to review for mistakes, or a cost anomaly in a tenant to explain. Dokimo won't quote a time to shortlist. The stack and the seat decide it. The single monthly invoice covers the engineer's pay, the search and screening, and employment through Dokimo's employer of record (EOR) partner, which employs the engineer in their own country and runs local payroll. Month to month, with no long-term contract.

What you get

What the engagement covers, and what is optional

Automation for your RMM and PSA

Scripts, policies, workflows and integrations built and kept in version control, each with a runbook your service desk can follow.

Client cloud tenants as code

Landing zones and baselines written as infrastructure as code, so client environments come out of one pattern instead of being built by hand.

Migrations and cost reviews

Moves from on-premises servers into client tenants, plus a regular review of cost and idle resources drawn from the client's own billing data.

Changes that go through your review

Code and changes pass through your review and your change record, and nothing the engineer writes should run on client endpoints until someone on your side has approved it, so the seat doesn't run on one person's memory, including the engineer's.

Optional Productivity and Security Suite

An optional extra at $399 a month per person: a secure, US-hosted Microsoft Azure environment the person works inside, productivity monitoring that shows whether they are working at their station through the day (disclosed to the person and written into their agreement), security and onboarding for the digital workstation, and your reports in our client portal.

Questions

Frequently asked

Does a cloud engineer seat cover scripting and automation for my RMM and PSA?

Yes, when you ask for it. The seat can cover scripts against your RMM and PSA, onboarding and offboarding automation, integrations with your documentation and billing tools, and the infrastructure as code behind client cloud tenants. Say up front which of those matters most, because the skills test and the price follow from it.

Can a remote cloud engineer work in a client's Azure or AWS tenant?

That depends on the client's agreement and data, and you decide with your counsel while Dokimo fits the seat to your answer. A client that blocks sign-ins from outside the US will lock a remote engineer out, so check first. Use least-privilege roles and start on clients you've cleared. Export-controlled defense data and criminal justice systems are effectively closed to an engineer outside the US. HIPAA doesn't itself ban work from outside the US, but health data brings agreements and a risk analysis. Nothing here is legal advice.

What happens if the cloud engineer is not the right fit?

If a hire isn't working out in the first 90 days, we find a replacement at no extra cost. Month to month, with no long-term contract.

Will the engineer already know my PSA, RMM and cloud tooling?

Don't assume so, and Dokimo doesn't promise it. The skills test is real cloud work, so you see how a candidate handles it before you interview. Expect ramp time on your specific tenants, runbooks and change process, as you would with any new engineer.

Tell us which cloud and automation seat you need

Tell us the seat, the hours you need covered and the tools you run. We'll reply with questions and the next steps, not a pitch deck.