Platform Engineering in 2023: From CNCF Whitepaper to Enterprise Delivery Model

The Distance Between the Whitepaper and the Production System

The CNCF Platform Engineering whitepaper, published in October 2022, formalised a discipline that the best engineering organisations had been practising informally for years. It defined an internal developer platform as a layer of tools and capabilities that platform teams build and maintain to accelerate and simplify application development and delivery for their organisations. It described the core capabilities, the organisational model, and the success metrics of a mature platform engineering practice.

What the whitepaper describes is accurate. What it does not describe, because it cannot from a principles document, is what platform engineering actually looks like in organisations with heterogeneous technology estates, legacy delivery constraints, and platform teams that are building the platform while simultaneously supporting the teams that depend on it. The gap between the whitepaper and the production system is where most enterprise platform engineering programmes are currently operating.

Understanding that gap clearly is more useful for enterprise technology leaders than either the idealised whitepaper description or the dismissal of platform engineering as inapplicable to legacy environments. Both of those positions are wrong. The right position is: platform engineering works in enterprise environments, but it looks different from the greenfield reference implementations, and the differences matter for how the investment is planned and how success is measured.

What Platform Engineering Looks Like in Enterprise Practice

The organisational model for enterprise platform engineering has three layers that the whitepaper’s team-of-teams description does not fully capture.

The platform team itself is the inner layer: the engineers building and maintaining the internal developer platform, the golden paths, the self-service provisioning, and the integrated toolchain. In greenfield implementations, this team starts fresh. In enterprise implementations, this team often has an inherited responsibility for existing infrastructure and tooling that the platform was supposed to supersede. Managing the transition from legacy operations to platform operations, while continuing to support teams that depend on the legacy infrastructure, is the most common execution challenge in enterprise platform engineering programmes.

The enabling infrastructure teams are the second layer: the teams responsible for the underlying infrastructure, the security controls, the networking, and the access management that the platform sits on top of. In greenfield environments, the platform team often owns or tightly controls these capabilities. In enterprise environments, they are typically owned by separate teams with their own governance processes and change management requirements. Platform engineering in an enterprise environment requires a working relationship with these teams that allows the platform to evolve at the pace the developer experience requires without being blocked by infrastructure change processes designed for a slower cadence.

The product teams that use the platform are the third layer, and in enterprise environments they are significantly more diverse than whitepaper descriptions assume. A large enterprise platform engineering programme serves teams with wildly different technology stacks, delivery cadences, and regulatory constraints. The platform that works for a greenfield microservices team on a modern cloud-native stack may not work without modification for a team delivering on a legacy Java application that runs partially on-premises. Managing platform diversity without fragmenting the platform into team-specific variants that lose the economies of scale and standards enforcement that justify the investment is the governance challenge that enterprise platform programmes consistently encounter.

The Tooling Decisions That Are Specific to Enterprise

The tooling choices for enterprise platform engineering reflect constraints that greenfield implementations do not face.

Integration with existing CI/CD tooling is the most common. An enterprise that has invested in a specific CI/CD platform, whether Jenkins, GitLab, GitHub Actions, or others, cannot simply replace it with the preferred tooling of the new platform team without a migration programme that affects every team using the existing tooling. Enterprise platform engineering programmes typically need to support existing CI/CD tooling while building toward a preferred platform model, which means the platform needs abstraction layers that can serve multiple CI/CD backends.

Access to shared services is the second enterprise-specific consideration. Enterprise platform teams frequently do not own the identity provider, the secrets management service, the monitoring platform, or the network infrastructure that their platform depends on. Building the internal developer platform on top of shared services controlled by other teams requires formalised integration agreements, change coordination processes, and fallback mechanisms for when shared service changes affect platform behaviour. This operational complexity is not in the whitepaper, and it is one of the reasons enterprise platform engineering programmes take longer to deliver than their greenfield equivalents.

Security and compliance integration is the third enterprise-specific requirement. Enterprise platform engineering programmes are building into regulated environments with security controls, compliance requirements, and audit obligations that greenfield programmes do not face. The platform needs to integrate security controls as first-class features, not as overlay, and it needs to satisfy the compliance requirements of the most constrained teams it serves.

Success Metrics That Reflect Enterprise Reality

The success metrics for enterprise platform engineering need to be calibrated to the enterprise context rather than borrowed from greenfield reference implementations.

Developer lead time reduction, the time from code commit to production deployment, is the canonical platform engineering success metric. In an enterprise context, the baseline for this metric is typically longer than in greenfield implementations, and the reduction trajectory is also longer, because the platform is improving on a complex legacy rather than building on a clean foundation. A fifty percent reduction in developer lead time from a twenty-day baseline is a significant achievement; measuring it against a two-day greenfield baseline makes it look inadequate.

Platform adoption rate measures the proportion of product teams that are delivering through the platform rather than through legacy or team-specific tooling. In enterprise programmes, this metric is more meaningful than capability deployment metrics because it reflects whether the platform is actually serving its users. A platform with high capability deployment and low adoption has built the right things for the wrong audience.

Cognitive load reduction is harder to quantify but important to track. Periodic surveys of development teams about the time spent on infrastructure concerns, the clarity of the path to production, and the confidence they have in the security and compliance of their delivery process provide signal about whether the platform is reducing the complexity it was designed to reduce.

The Investment Decision This Year

The transition from platform engineering as an exploratory discipline to a mainstream enterprise delivery model has a practical implication for investment timing. The organisations that invested early have accumulated operational experience, mature tooling, and developer communities that are difficult to replicate quickly. The organisations investing now are entering a market where best practices are established, vendor tooling is mature, and the organisational model is well understood.

The window for treating platform engineering as something to explore rather than something to invest in is closing. Enterprise technology leaders who have not yet committed to a platform engineering investment are not making a strategic choice to defer. They are building the bottleneck that platform engineering was developed to solve, and the cost of that bottleneck grows with every quarter of delay.

Leave a Comment