Sigma Software operates as a 2,000-person consultancy that's been building enterprise software since 2002, originally out of Kharkiv. The firm runs 43 offices across 21 countries and has shipped over 2,100 projects for clients including SAS, Volvo, Knorr-Bremse, and Verizon Media. The work spans analytics platforms, automotive systems, rail transport tech, and media infrastructure - domains where broken code has operational consequences.
The technical stack centers on Python, AWS infrastructure, and data pipeline tooling: Snowflake for warehousing, Airflow and DBT for orchestration and transformation, Terraform for infrastructure-as-code. Container deployment runs on ECS and EKS, with CI/CD through GitHub Actions and Buildkite. It's the standard modern data engineering and cloud ops playbook, which means security surfaces include cloud IAM configurations, containerized workloads, CI/CD pipeline integrity, and data access controls across multi-tenant analytics environments.
Founded by four programmers and a lawyer, the company has grown 400-fold while maintaining a developer-driven structure. The threat model for a consultancy this size operating across automotive, transport, and telecom verticals includes supply chain risk, client data exposure, and the expanded attack surface that comes with distributed teams touching production systems for Fortune 500 clients. No public breach disclosures, but the operational reality is managing security across dozens of client environments with varying maturity levels.
