#12 DevOps and SecOps

In this episode, Toby and Krisztian take a deep look at DevOps and SecOps: where the ideas came from, what they were supposed to mean, how they got warped by the industry, and what good looks like in practice. They cover the waterfall origins of ops as a separate team, the shift-left movement, the build-it-you-run-it principle, why DevOps as a job title makes no sense, platform engineering, and how security is going through the same transformation. They also cover common anti-patterns, DORA metrics, how to get buy-in for a transformation, and what it looks like when it works at scale.

Chapters

0:00 Introduction

0:28 What DevOps was actually supposed to mean

1:57 The waterfall origins: why ops and dev were separate

5:45 Full stack and the rise of the developer-operator

8:40 Why the old model produced poor software quality

11:04 The move to agile and SaaS changed everything

14:15 DevOps as a term: what went wrong

16:08 Platform engineering: the natural next step

21:00 Breaking down the dev vs ops cultural divide

25:47 Real-world example: 10x performance improvement through shared ownership

30:29 Security is going through the same transformation