Cover Image for Building Platforms That Scale: Infrastructure, Security & CI/CD
Cover Image for Building Platforms That Scale: Infrastructure, Security & CI/CD
Avatar for PlatforMa
Presented by
PlatforMa
PlatforMa is Israel’s premier conference dedicated to advanced platform engineering.

Building Platforms That Scale: Infrastructure, Security & CI/CD

Register to See Address
Registration
Approval Required
Your registration is subject to host approval.
Welcome! To join the event, please register below.
About Event

​Join us for a PlatforMa meetup in collaboration with Gong – an evening of talks about engineering challenges, practical solutions, and knowledge sharing.

​As engineering organizations scale, platform teams face growing challenges: keeping infrastructure consistent, balancing developer autonomy with security, and building CI/CD systems that support fast-moving teams without compromising reliability. In this meetup, we’ll explore how engineering teams tackle these challenges through automation, smarter infrastructure management, and developer-friendly guardrails.

​Hodaya Yoav and Daniel Rubin (Gong) will share their journey from Terraform and Terragrunt to Crossplane, including the challenges of managing infrastructure at scale and migrating existing resources. Stav Ochakovski and Roy Reznik (Eon) will take us behind the scenes of a monorepo supporting 80 engineers and 2,500 commits a month, sharing how they built a CI system that keeps up with developers and AI agents alike. Shahar Shporer (AWS) will explore the complexities of identity and access management, and how platform teams can enable secure development without slowing engineers down.

​This meetup is for platform engineers, DevOps, SREs, infrastructure and cloud engineers, and anyone working on developer experience, automation, and scalable engineering platforms.

​All talks will be delivered in Hebrew.

​---------

​Agenda

​17:45 – Food, drinks and mingling

​18:30 – From Terraform and Terragrunt to Crossplane: A Gradual Migration at Scale – Hodaya Yoav & Daniel Rubin, Gong

​19:00 – 80 Engineers, One Monorepo, and Our CI Hasn't Broken (Yet) – Stav Ochakovski & Roy Reznik, Eon

​19:30 – Access Denied: A Love Story – Shahar Shporer, AWS

​20:00 – More drinks and mingling!

​---------

​Location & Arrival

​Gong Offices – Icon Tower
13 Menachem Begin Road, Floor 21, Ramat Gan
(Bursa District)

​The venue is conveniently located near Tel Aviv Savidor Central train station and major public transportation routes.

  • ​Israel Railways: Tel Aviv Savidor Central Station – approximately 5–7 minutes on foot.

  • ​Light Rail: Abba Hillel Station (Red Line) – approximately 8–10 minutes on foot.

  • ​Bus: Multiple bus routes serve the Savidor Central and Ramat Gan Bursa areas.

​Please note that a valid photo ID is required for entry to the building.

​---------

​// From Terraform and Terragrunt to Crossplane: A Gradual Migration at Scale – Hodaya Yoav, DevOps Engineer & Daniel Rubin, Staff DevOps Engineer at Gong

​How do you keep your desired infrastructure state aligned with reality when many developers provision resources across multiple cloud accounts?

​We faced this challenge managing our cloud infrastructure with Terraform and Terragrunt. As our environment grew, it became harder to keep declared state aligned with the resources actually running in our cloud environment. Daniel and Hodaya will share how this led us to adopt Crossplane and migrate gradually by importing existing resources.

​We’ll explain the core building blocks: Providers built with Upjet connect Crossplane to external APIs, Compositions define reusable infrastructure abstractions, and Composition Functions add programmable logic to shape the resources they produce. We’ll also show how we use Argo CD to manage and deliver our Crossplane configuration through GitOps, and discuss practical considerations for introducing and operating Providers, including versioning, credentials, and upgrades.

​Finally, we’ll cover the orphaned resources we found: resources that were no longer actively managed but still had tags indicating that they were. We’ll describe how we built an internal controller to detect and address this mismatch, and share lessons about infrastructure ownership and lifecycle management at scale.

​

​// 80 Engineers, One Monorepo, and Our CI Hasn't Broken (Yet) – Stav Ochakovski & Roy Reznik, Senior DevOps Engineers at Eon

​It's 11:40 PM in Tel Aviv, and the PRs are still coming in. Some are from engineers. A lot are from AI agents who don't believe in bedtime.
Eighty developers. One monorepo. About 2,500 commits a month. A culture that moves fast and doesn't wait for permission. On the other side of all that motion is a production environment that customers trust to simply work.

​This is the story of how we stopped relying on people to remember the rules and built a CI system that remembers them for us.

​We'll show you how a change runs only what it touches, how identical work runs once, how new tests earn their place before they can block anyone, and how the mistakes tired reviewers miss now fail on their own.
And yes, the AI agents follow the rules too. The rules live in the repo, not in anyone's head, so humans and agents hit the same gates.

​No product pitch and no vendor worship. Just strategies you can steal on Monday morning: affected-only pipelines, caching everything, a lifecycle for flaky tests, automated review gates, and CI as the one teammate who never forgets.
We move fast and break things sometimes, just not in production. Come see how.

​

​// Access Denied: A Love Story – Shahar Shporer, Technical Account Manager at AWS

​A developer needs one permission to get things working. A quick IAM policy change, a successful deployment, and everyone is happy. Until that quick fix introduces a security risk no one anticipated.

​In this talk, we’ll explore the hidden complexity of identity and access management, the risks of overly permissive access, and how platform teams can make secure choices easier through least privilege, reusable policies, and automated guardrails.

​In the final part, we’ll look at how AI-assisted security reviews, including AWS Security Agent, fit into this picture, helping us rethink how security can support developers without becoming a bottleneck.

​---------

​About the speakers:

​Hodaya Yoav – DevOps Engineer at Gong
Hodaya Yoav is a DevOps Engineer with four years of experience in the field, following several years in backend development. She designs and scales production cloud infrastructure, specializing in AWS, Kubernetes, CI/CD, and Infrastructure as Code. Her work focuses on automation, reliability, and developer productivity through GitOps workflows and platform capabilities. Her software development background helps her collaborate closely with engineering teams and deliver end-to-end solutions.
LinkedIn

​Daniel Rubin – Staff DevOps Engineer at Gong
Daniel Rubin is a Staff DevOps Engineer experienced in designing and scaling complex, enterprise-grade cloud infrastructure. Specializing in AWS and production Kubernetes lifecycles, he leads platform engineering and system stability initiatives at Gong. Daniel is an active tech community contributor and recently shared his expertise as a speaker at the AWS Summit.
LinkedIn

​Stav Ochakovski – Senior DevOps Engineer at Eon
Stav is a DevOps Engineer at Eon, managing highly scalable, multicloud environments with a focus on Kubernetes, CI/CD, and observability. An AWS Containers Hero, he has a strong interest in cloud-native identity and infrastructure security. With a background in DevOps engineering and instruction, he combines hands-on technical experience with a passion for sharing knowledge. Outside of work, Stav is a pastry-chef school graduate and a licensed skipper.
LinkedIn

​Roy Reznik – Senior DevOps Engineer at Eon
Roy is a DevOps Engineer at Eon, where he founded the DevOps team and helped build the infrastructure behind a next-generation cloud backup platform from the ground up. Before joining Eon, he served in Unit 8200, holding key roles in cybersecurity and DevOps, including leading an engineering team.
Roy is passionate about tackling complex challenges, pushing technological boundaries, and turning seemingly impossible ideas into reality.
LinkedIn

​Shahar Shporer – Technical Account Manager at AWS
Shahar is a Technical Account Manager at AWS with more than 15 years of experience across DevOps, cloud infrastructure, and platform engineering. Before joining AWS, she built and led DevOps practices in complex, multi-cloud environments, helping engineering teams improve reliability, automate delivery, and build better ways of working. She is also an active member of the tech community, leading DevOps groups, mentoring engineers, and speaking at conferences about the technical and human sides of building and operating systems.
LinkedIn

​---------

​See you soon!

Location
Please register to see the exact location of this event.
Avatar for PlatforMa
Presented by
PlatforMa
PlatforMa is Israel’s premier conference dedicated to advanced platform engineering.