Forward deployed engineering: the complete guide / Buying the capability
Forward deployed engineering as a service
There are three ways to get this capability: build the function in-house, staff individual engineers through a partner, or engage a firm that takes the outcome. Building gives you the most control and takes a hiring cycle plus two or three engagements of learning. Staffing is fastest to a body in a seat and leaves the delivery risk with you. Engaging a firm moves the delivery risk across the table, which only helps if the contract names the production outcome rather than an hour count. Most companies should build eventually and cannot start there.
Key takeaways
- Build: most control, slowest, and you own the structural decisions most companies get wrong on the first attempt.
- Staff through a partner: fastest to a person in a seat, and the delivery risk stays with you because you direct the work.
- Engage a firm: risk moves to the vendor, but only if the contract names a production outcome and a handover date.
- The common mistake is buying an outcome from a vendor while directing the work yourself, which gives you the control of neither model.
This page is the build, staff or engage decision, with what each one actually costs you in control and risk.
Route one: build the function
Hire your own embedded engineers.
What it gives you. Full control, accumulated context that stays with you, and a capability that compounds. If embedded delivery is core to how you sell, this is the destination.
What it costs. A hiring cycle for a competitive profile. Across 1,000 postings the role skews mid-level, with 60 percent targeting three to five years, and you are competing with companies paying well. Then two or three engagements of learning before the function is good, because the first engagements are where you find out what generalises and how long production takes at your kind of customer.
The hidden cost. The structural decisions. Where the function reports is the one most companies get wrong, and the hiring data suggests over half already have: only 45 percent of those postings sat on a dedicated forward deployed team rather than under sales.
When it is right. When this is how you sell, when you have enough accounts to keep engineers busy, and when you can carry the learning period. How to build the team is the playbook.
Route two: staff engineers through a partner
Bring in individual senior engineers who work under your direction.
What it gives you. Speed to a person in a seat, flexibility to scale up and down, and no hiring commitment. You keep control of the roadmap and the approach.
What it costs. You keep the delivery risk. If the plan is wrong, that is yours. And the context these people accumulate leaves when they do, unless you deliberately capture it.
The thing to be clear about. This is staff augmentation, and it is an honest model with honest pricing. It becomes a problem when it is sold as forward deployed engineering, because the words are nearly identical and what you are buying is not. FDE vs staff augmentation separates them.
When it is right. When you have senior technical leadership making the calls and you need capacity. If nobody on your side is making those calls, more hands become capacity that waits.
Route three: engage a firm that takes the outcome
Hand a defined outcome to a firm that works this way.
What it gives you. Delivery risk on the other side of the table, a team that has done this before, and no hiring or learning period. The good version also gives you a capability transfer at the end.
What it costs. More per unit of time, less control over how, and a dependency risk if the engagement is not bounded.
The condition. This only works if the contract names a production outcome and a handover date. A firm engaged on time and materials with an outcome-flavoured description gives you the control of neither model, and that is the most common way this route disappoints. How to price and the contract cover the terms.
When it is right. When the deployment matters more than the capability, when you need it now, or when you want to see the model run properly once before building your own.
The comparison
Speed to start. Staff fastest, engage close behind, build slowest by a hiring cycle.
Control over approach. Build highest, staff high, engage lowest.
Who carries delivery risk. Build you, staff you, engage the vendor if the contract says so.
Cost per unit of time. Staff lowest, build middling once you account for unbilled time, engage highest.
What you own at the end. Build a capability, staff nothing durable unless you captured it, engage a running system plus whatever the handover transferred.
Failure mode. Build hires the wrong profile or reports into sales, staff buys hands for a judgment problem, engage never ends.
The hybrid that works
The sequence most companies should follow rather than choosing one route forever.
Engage a firm for the first one or two deployments, with a handover date and a capability transfer written in. Watch how they run it: the discovery, the production path, the artefacts. Then hire your own, using what you learned about what the role actually needs at your kind of customer.
That reverses the usual order, which is to hire first and learn on your own customers. It costs more per deployment at the start and less overall, because the structural mistakes get made on somebody else's time.
AWS built its partner programme on exactly this shape: its engineers embedded with partner teams, then support shifting to helping the partner scale their own practice, then the partner working independently. Capability transfer as the design goal rather than a courtesy.
What we offer, plainly
We do route three, and we will do route two.
On forward deployed engineers we take the outcome: a specification, an eval suite derived from it, a named production date, a named handover date. If it does not run, that is ours.
On staff augmentation you direct the work and we supply senior people.
We will also tell you when the answer is neither. If your scope is writable and your leadership is strong, you want hands and should pay hands prices. If your accounts are too small to carry an engineer, no vendor fixes that. When forward deployed engineering is the wrong answer is the page we would rather you read first.
Next: how to choose a partner.
Best for
- Deciding between building the function, staffing engineers, and engaging a firm
- Sequencing the capability rather than committing to one route
- Working out where the delivery risk actually sits in a proposal
Avoid if
- You have not yet confirmed the model fits your business at all
Verify before you commit
- Ask who carries the delivery risk if the work takes twice as long
- For an outcome engagement, confirm a production date and a handover date are in the contract
- For staffing, confirm you have someone senior making the technical calls
- If you plan to build eventually, write the capability transfer into the first engagement
Common questions
What are the ways to get forward deployed engineering capability?
Three. Build the function by hiring your own embedded engineers, staff individual engineers through a partner who work under your direction, or engage a firm that takes the outcome. They differ mainly in who carries the delivery risk and how much control you keep over the approach.
Which route is fastest?
Staffing gets a person into a seat soonest, with engaging a firm close behind. Building is slowest by a hiring cycle plus two or three engagements of learning, because the first engagements are where you discover what generalises and how long production takes at your kind of customer.
What is the most common mistake when buying this?
Buying an outcome from a vendor while directing the work yourself, which gives you the control of neither model. The related version is engaging a firm on time and materials with an outcome-flavoured description, so nobody actually carries the delivery risk.
Should we build our own team eventually?
If embedded delivery is how you sell, yes. The sequence that works better than hiring first is engaging a firm for the first one or two deployments with a capability transfer written in, watching how they run it, then hiring using what you learned. The structural mistakes get made on somebody else's time.
Is there a precedent for capability transfer as a model?
AWS's partner programme is built on it: AWS engineers embedded with partner teams, then support shifting toward helping the partner scale their own practice, then the partner working independently. Capability transfer is the stated design goal rather than a courtesy at the end.
When is none of the three the right answer?
When your scope is writable and your technical leadership is strong, in which case you want senior hands and should pay hands prices rather than outcome prices. And when your accounts are too small to carry an engineer's loaded cost, which no vendor arrangement fixes.
Related reading
In-house vs outsourced engineering: what to keep and what to hand off
The real question is not whether to build in-house or outsource. It is which parts belong to your own team forever, and which parts an outside team can do faster and better right now.
Staff augmentation vs a managed team that owns the outcome
Adding individual engineers to your team and hiring a team that owns an outcome look similar on an invoice. They are not the same thing, and picking the wrong one hides a large management cost you did not budget for.
How to choose the right external development team
Hiring an outside team is a high-stakes decision. The wrong partner costs you time and momentum you cannot get back.
More in Buying the capability
When forward deployed engineering is the wrong answer
Forward deployed engineering is expensive and it is often the wrong tool. It does not fit when your contract values cannot carry an engineer's time, when every customer wants the same thing, when you hold a fixed product opinion you will not change, or when the scope is something you can already write down. Each of those has a cheaper alternative that works better. There is also one failure mode that disqualifies the model after you have already started: the engagement with no end date, which has stopped being a deployment and become a dependency.
How to choose a forward deployed engineering partner
Judge a forward deployed engineering partner on five things, in this order: which of the three jobs their engineers actually do, whether they will put a production date and a handover date in writing, what proves the code correct, how they decline work that only serves one customer, and who is accountable by name. A vendor who will not name a handover date is selling a dependency. A vendor with no answer on declining customisation will say yes to everything, and everything they say yes to becomes something you maintain.
Questions to ask a forward deployed engineering vendor
Twelve questions, each with the answer you want and the answer that should worry you. Five of them come from a16z partner Marc Andrusko, who wrote them as pressure tests for investors evaluating companies using this model; they work at least as well from the buyer's side of the table. The most revealing question on the list is how the vendor systematically declines customisation requests, because a vendor with no answer will say yes to everything and you will maintain all of it.
How to prepare your team for an embedded engineer
Three things have to exist before an embedded engineer starts, and all three are yours to provide: access provisioned and tested, one named person who can unblock, and one person with the authority to decline scope. The third is the one everybody forgets, and its absence is why engagements sprawl. Beyond that, the difference between a fast engagement and a slow one is mostly about how much context you share and how completely you include the person. Nobody writes this page, and it decides more outcomes than the vendor's methodology does.
Security and access for embedded engineers
Letting an outside engineer into your systems is a real risk and it is manageable with four rules: least privilege by default, repository access scoped to the repositories the work touches, production access as a named exception with an audit trail and an end date, and revocation on the handover date rather than whenever somebody remembers. What changes when a model writes the code is that the review gate before production matters more, not less, because generated code is not secure by default.