About Us

Compliance that holds up, without slowing the roadmap

Boundary first. Continuous evidence. Policy as code: from scope to handoff.

We build cloud infrastructure where compliance is a property of the system, not a checklist somebody runs before each release.

Stonebridge is a founder-led cloud infrastructure, software, and data engineering consultancy for healthcare, defense, and regulated engineering teams. We build the pipelines, platforms, production Python services, and AI RAG systems that auditors approve and engineers want to use. Evidence emits continuously. Controls enforce structurally. Audits become queries instead of projects. Not policy documents. Not assessment narratives. Engineering.

A SpaceX Falcon Heavy lifts off from Launch Complex 39A at NASA's Kennedy Space Center. — Nancy Grace Roman Space Telescope launch, Kennedy Space Center, August 2026. Photo: NASA/Joel Kowsky.

What sets us apart

All US citizens

Every engineer on your engagement is a US citizen working onshore. Senior engineers only, no offshore delivery, and the person who scopes your work is the one who delivers it.

Founder-led certified small business

A certified California Small Business, registered in SAM.gov with a UEI and a CAGE code. We can hold a prime award or sit inside a prime contractor's subcontracting plan. Every identifier is published.

Built for regulated industries

Six years building cloud infrastructure and pipelines under HIPAA, FedRAMP, SOC 2, and CMMC for healthcare and defense engineering teams. That same rigor carries into every engagement we take.

FedRAMP Moderate authorization boundary on AWS GovCloud: four accounts covering production and staging EKS, RDS, Bedrock, a pgvector store, and a write-only logging account. — A FedRAMP Moderate authorization boundary as we draw it: four accounts on AWS GovCloud, with logging write-only and separated from workload accounts.

Lucas Jones, Founder and Principal Engineer at Stonebridge Tech Solutions

Lucas Jones, the engineer who builds it

Principal Engineer · Stonebridge Tech Solutions

Cloud Infrastructure · Data Platforms · Software Engineering

I've spent the last six years building cloud infrastructure and CI/CD pipelines for healthcare and federal engineering teams. The work spans HIPAA-aligned deployment pipelines, FedRAMP and GovCloud infrastructure, Kubernetes platforms in regulated environments, and the compliance posture that holds up when auditors actually look.

Before founding Stonebridge, I worked as a Systems Engineer, DevOps Engineer, and Principal Platform Engineer, including remediation for federal energy infrastructure and platform engineering for healthcare SaaS. I started Stonebridge to do this work senior-led and opinionated, focused where compliance posture and engineering velocity have to coexist. The same engineer, scope to handoff.

The work goes beyond infrastructure. I write the production Python that runs on it, and design data and AI platforms where retrieval sits inside the compliance boundary. For a directional read on your own scope, the audit cost estimator turns seven questions into a control count and a first-cycle cost. The thinking behind it is in the implementation guide and the five patterns that keep failing HIPAA audits.

Book a call See case studies Certifications

Let's talk

Most discovery calls take 30 minutes. We come back with a written proposal within 48 hours.

Book a 30-minute call →