Alternative, comparison: forward deployed engineer vs consultant

Two job titles, two business models, one operational rubric that tells them apart.

The term "forward deployed engineer" was coined at Palantir in the early 2010s to describe an engineer with commit rights on a customer's stack. In 2026, it is also being used by Big Four consulting firms (EY publicly launched 45 to 50 FDE roles for the UK and Ireland on 2026-04-28). So the title alone tells you nothing. The honest test is operational, and it fits on one page.

M
Matthew Diakonov
13 min read

Direct answer, verified 2026-04-29

What is the difference between a forward deployed engineer and a consultant?

  • A forward deployed engineer commits production code in your repo and leaves behind named artifacts: an eval harness, two CI gates, a runbook, and a feature flag.
  • A consultant produces recommendations, decks, and reference architectures, and their work product lives in their systems or in handover documents.
  • As of April 2026, both groups use the FDE title (EY launched 45 to 50 FDE roles in the UK and Ireland on 2026-04-28), so the operational test is which file paths land on your main branch and who has commit rights from week 1.

Sources verified 2026-04-29: EY UK FDE launch announcement (2026-04-28), Pragmatic Engineer on Palantir-origin FDE.

4.9from 5 named production agents shipped on the rubric below
Named senior engineers in the client's GitHub from week 1
Eval harness on main in week 2, refund wired to numeric threshold
Six leave-behind files, no platform license, no hosted runtime

Why the title stopped meaning anything in 2026

The forward deployed engineering pattern was a Palantir invention. Engineers were placed at customer sites because the customers (early on, intelligence agencies) could not describe their requirements through normal product discovery. The role had two non-negotiable properties: the engineer was on the customer's stack, and the engineer shipped code, not recommendations. Palantir kept this pattern through 2016, at which point it had more FDEs than ordinary software engineers.

Twelve years later, the pattern is fashionable. AI startups use the title. Hyperscaler partner programs use the title. And in April 2026, the Big Four started using the title openly. EY announced it would hire 45 to 50 FDEs for the UK and Ireland to help clients "design, build, integrate and operationalise AI in production." That sentence describes work a Palantir FDE in 2014 would also have done. It also describes work a senior management consultant has been doing under a different title for ten years.

So the question of "FDE vs consultant" is no longer a question of titles. It is a question of contract clauses, file paths, and commit rights. Below is the operational test we use when buyers ask us to compare ourselves to a Big Four AI delivery team or a boutique consultancy.

The 7-point operational rubric

If you are evaluating a vendor that calls itself forward deployed, this is the checklist to bring to the SOW review. Every point is something that either lands as a file in your repo, a clause in your contract, or a name on your CODEOWNERS file. Nothing on this list is a soft signal. A genuine FDE engagement signs every line.

What a real forward deployed engineer engagement signs

  • Commit rights to a branch on your repo from week 1, listed in CODEOWNERS by name.
  • First production PR merged inside 7 calendar days of the kickoff call.
  • Eval harness lands on main in week 2, scored against a numeric threshold the engagement is held to.
  • Week-2 refund clause wired to a CI gate, not a meeting; missed threshold pauses the open invoice automatically.
  • Runbook for on-call engineers in your repo, with alerts, oncall rotation, rollback PR template, and dashboard links.
  • Feature flag or rollout file owned by you, flipped by a single one-file PR at the end of the engagement.
  • Zero hosted runtime, zero platform license, zero seat fee after handoff. The vendor leaves and the agent keeps shipping.

Anchor fact: six file paths

Across every PIAS engagement we have shipped (Monetizy.ai, Upstate Remedial Management, OpenLaw, PriceFox, OpenArt), the same six files land on the client's main branch. The names are identical, so an engineer who has worked on one client repo can read another client's setup cold. None of these files exist in a typical consulting deliverable, which is the operational difference the title hides.

Anchor fact

The six files an FDE leaves behind, none of which appear in a consulting SOW

  1. rubric.yaml. Numeric thresholds and gate configuration. Read by both required CI checks. The single source of truth for whether the engagement is on track this week.
  2. .github/workflows/pilot-gate.yml. Required check from day 14. Runs on every PR and on a Monday 09:00 UTC cron. Fires the billing refund webhook on a threshold miss.
  3. .github/workflows/production-gate.yml. Required check from day 42. Runs only on the promotion PR, asserts the title prefix, the one-file diff, seven green nightly runs in a row, runbook present, handoff checklist complete.
  4. eval/cases.yaml. Test corpus. 30+ rows at week 2, growing weekly via tail-mining PRs. Both gates read it.
  5. runbook/<agent>.md. On-call playbook. 300+ words. Five canonical sections: alerts, oncall, rollback, eval-dashboards, owner-rotation. Read cold by three on-call engineers in week 5.
  6. flags/<agent>.yaml. The feature flag the promotion PR flips from 10 to 100. The diff of the entire promotion PR is one line in this file.

Side by side: the seven-point rubric, scored

Left: what the typical Big-Four-shaped engagement carries (whether it is sold as "FDE" or as "AI advisory"). Right: what a PIAS forward deployed engineering engagement carries. Every row is a thing we have either watched matter on a real engagement, or read in a contract from a firm we lost a deal to.

FeatureBig Four AI advisory + deliveryPIAS forward deployed engineering
Where the work product livesIn the firm's deck repository, in a Confluence space they admin, or in a SOW addendum. The deliverable is a document or a slide. Your repo has a few prompts and a reference architecture diagram.On main, in your repo, behind your CI. Six files: rubric.yaml, .github/workflows/pilot-gate.yml, .github/workflows/production-gate.yml, eval/cases.yaml, runbook/<agent>.md, flags/<agent>.yaml. Every change is a PR you can git blame.
Who has commit accessA rotating bench. Whoever is available that week. Most code arrives as zip files or as PRs from a shared service account, because individual access onboarding takes longer than the engagement.Two named senior engineers from week 1, listed in CODEOWNERS, present in your standup, on your Slack, with an SSH key the platform team issued. They open PRs with their own GitHub handle.
When the first PR shipsAfter week 3 or 4, once the discovery phase, current state assessment, and target state architecture are signed off. The first deliverable is usually a slide deck, not a diff.Day 7 or earlier. If it does not, billing pauses on day 8. The clause is in the SOW and the workflow that pauses the invoice runs on a Monday cron.
What the eval rubric isA success criteria slide in the SOW with words like robust, scalable, accurate. Nobody can point at a file that decides whether the project is on track this Monday.rubric.yaml on main with rubric_min_score, ragas_faithfulness_min, p95_latency_ms_max, per_case_regression_max. Read by two required CI gates. Stakeholders argue by opening a PR to that file.
How the refund clause worksA clause in the MSA that requires written notice, a formal acceptance review, and 30 to 45 days of negotiation. Refund is theoretical, not operational.pilot-gate.yml runs on a Monday 09:00 UTC cron. If rubric_min_score is below threshold, a webhook posts to billing and the open invoice pauses. A GitHub issue opens, labeled refund-triggered. We see it, you see it, neither side schedules a meeting.
What you keep after handoffThe recommendation deck, the architecture diagram, and a handover document. The actual implementation often lives in the firm's tooling, the firm's templates, or behind a managed service that converts to a retainer.Every artifact on main: the eval harness, both gates, the runbook, the cases corpus, the feature flag config, the prompts, the model configs. No platform license, no hosted runtime, no seat fee. The vendor leaves, the agent keeps shipping.
How the model vendor is chosenWhatever the firm has a partner discount or co-sell agreement on. Common pattern: the FDE-shaped offering is in fact a wrapper around a single hyperscaler partnership, and switching providers is itself a separate engagement.Vendor neutral. rubric.yaml has a model_provider field per agent. Anthropic direct, Bedrock, Vertex, Azure OpenAI, or open-weight: client choice. Gates do not hard-code a provider.

The contract diff

Two excerpts. First: a redacted PIAS SOW for a six-week forward-deployed engagement. Second: a redacted Big-Four SOW for a 12 to 16 week AI advisory + delivery engagement we read in a head-to-head bake-off. The titles overlap. The clauses do not.

AI-Production-Acceleration-SOW.docx (redacted, Big Four)

Same six weeks, two different repo states

Toggle to see what a buyer's repo and contract look like after six weeks under each model. The prompt, the use case, and the AI ambition are the same. The artifact you can point at to justify the spend is different.

Two engagements, week 6

Week 6 of a 16-week engagement. Three slide decks delivered, one architecture diagram, one set of acceptance criteria. The repo has zero new files in /agents, zero in /eval, zero in /runbook. Procurement renegotiated the SOW because the firm could not get individual GitHub access onboarded in time. The senior consultant who wrote the discovery deck rolled off two weeks ago.

  • no production code on main
  • no eval threshold a workflow reads
  • first PR was a README update in week 8
  • named engineer rotated off mid-engagement
  • deliverables are .pptx, not .py

What a real FDE SOW signs that a consulting SOW does not

Below is a verbatim block from a PIAS SOW (redacted client details). The four sections that distinguish forward-deployed work from consulting work are all present and all numeric: deliverable file paths, gate thresholds, refund mechanics, and a vendor-leave-behind clause. A consulting SOW typically has paragraphs about acceptance reviews, change orders, and the firm's licensed accelerator library.

SOW-2026-discharge-summary-drafter.md (redacted)
6

Six file paths on your main branch, two named senior engineers in your CODEOWNERS, one numeric refund clause wired to a Monday cron, zero platform license fees after week 6. That is the operational definition of forward deployed in 2026, regardless of what the title on the SOW says.

PIAS leave-behind contract, applied across Monetizy.ai, Upstate Remedial Management, OpenLaw, PriceFox, OpenArt

When a consultant is actually the right hire

We lose deals to consulting firms regularly, and most of those losses are correct. If the deliverable you need is a recommendation (which vendor to pick, whether to build or buy, whether a use case fits a regulated process), or a regulatory artifact (an audit, a risk filing, an external sign-off the regulator wants on a firm's letterhead), the right hire is a senior management consultant. They are good at the work, and the deliverable is the point.

The cases where a forward deployed engineer beats a consultant are narrower and more concrete: there is a specific production agent, with a deadline in the next two to six weeks, and the bottleneck is senior MLE capacity that cannot be pulled off another deadline. In that case, what you need is code on main and a runbook in the on-call rotation. A recommendation does not unblock anything. The FDE pattern was invented for exactly this shape of problem, and it still fits.

The buyer mistake we see most often in 2026 is hiring a Big Four FDE-titled team for the second case (specific shipping deadline, senior MLE bottleneck) and discovering at week 6 that the engagement is actually shaped like a consulting plan. The seven criteria above catch this in the SOW review, before the contract is signed.

Want the seven criteria signed in your SOW, with two named senior engineers and a six-week clock?

60-minute scoping call with the senior engineer who would own the build. You leave with a one-pager: the agent, the rubric thresholds, the feature flag path, and the named engineer who will deliver it.

Forward deployed engineer vs consultant, the questions buyers actually ask

Isn't a forward deployed engineer just a consultant with a different title in 2026?

It depends on the firm. The Big Four are now hiring under the FDE title; EY publicly launched 45 to 50 FDE roles for the UK and Ireland on 2026-04-28, focused on AI in production, governance, and risk. The role at Palantir, where the term originated in the early 2010s, was different: an engineer with commit rights, on the customer's stack, shipping code as the primary deliverable. The honest test in 2026 is operational, not titular. Ask the firm to put two specific lines in the SOW: a named-engineer commit-rights clause for week 1, and a numeric eval threshold wired to a CI gate that pauses billing on miss. A real FDE engagement signs both. A repackaged consulting engagement adds a meeting to discuss them.

What are the actual file paths a forward deployed engineer leaves on our main branch?

Six files in a PIAS engagement: rubric.yaml (the numeric thresholds and gate config), .github/workflows/pilot-gate.yml (the week-2 required check), .github/workflows/production-gate.yml (the week-6 required check on the promotion PR), eval/cases.yaml (30+ rows of test cases that grow weekly), runbook/<agent>.md (the on-call playbook with five canonical sections, 300+ words), and flags/<agent>.yaml (the rollout_percent feature flag the promotion PR flips from 10 to 100). All six are version-controlled, all six are in your repo, none are hosted by us. If the engagement ends and we never come back, the agent keeps shipping because the gates, the rubric, and the runbook all live on your main.

What does the week-2 refund clause actually look like as code?

pilot-gate.yml has a refund-signal job that runs only on the scheduled Monday 09:00 UTC snapshot, and only when the eval scoring step failed. The job posts the failing snapshot to a billing webhook configured in rubric.yaml, which pauses the open invoice. It then opens a GitHub issue against the engagement owner, labeled refund-triggered and billing-paused, linking the failing workflow run. No human clicks anything. If the next Monday snapshot is green, billing resumes and a 7-day prorated credit is applied. If it misses three Mondays in a row, the engagement ends per the MSA exit clause, every PR merged to date stays in your repo, and you owe nothing for the final week. A consulting acceptance clause cannot do this; it requires written notice and a negotiation.

How do I tell during the sales process whether I am buying an FDE or a relabeled consultant?

Three questions, no jargon. (1) Will you put the engineers' GitHub handles in the SOW, with a specific date by which they will be added to CODEOWNERS in our repo? (2) Will you accept a numeric eval threshold in the contract, wired to a CI gate, where missing the threshold pauses your invoice automatically? (3) When the engagement ends, what files are in our repo and what files are in yours? A real FDE answer is yes, yes, and 'every artifact is in your repo, none are in ours.' A consultancy answer is usually about access policies, acceptance reviews, and the firm's accelerator library being licensed on a separate Order Form.

Big Four firms have started selling FDE engagements. How is PIAS different?

Three concrete differences. First, scoping: every PIAS engagement starts from a free 60-minute scoping call that produces a written one-pager naming the agent, the rubric thresholds, the feature flag path, and the named senior engineer. Second, contract shape: a six-week engagement, week-1 first-PR clause, week-2 numeric refund clause, week-6 production gate, and a no-handoff-no-invoice tail clause. Third, leave-behind: zero PIAS-hosted runtime, zero platform license, zero seat fee. The Big Four offerings we have read tend to bundle a managed runtime, a per-seat accelerator library, and a 12 to 16-week phased plan. Both can be the right call. The honest difference is what the contract says about week 7 onward.

We already have an internal AI consultancy. Why hire a forward deployed engineer at all?

Because the bottleneck is usually senior MLE capacity on a specific production agent, not advisory hours. If your internal team has time and skill to write rubric.yaml, both gates, the runbook, and the cases corpus, and to keep the eval green for the trailing seven nightly runs, you do not need an FDE. If the constraint is that two senior engineers would need to be pulled off another deadline for six weeks to do that work, an FDE is the cheapest way to ship without breaking the other deadline. The win is that the leave-behind is identical to what your team would have built, so internal ownership is intact when the engagement ends.

How is the engineer's IP and our IP separated in an FDE engagement?

Cleanly, in the contract. Every PR merged to your main is your IP, work-for-hire, and there is no carve-out for the firm's accelerator library because there is no accelerator library. The PIAS engineering practices (the file shapes, the rubric format, the gate workflows) are open-source patterns we publish on the public guides at fde10x.com/t. They are not licensed back to you, you owe no fees for using them, and you are free to fork and rename. The only thing the firm keeps is the ability to publish a redacted case study, with your written consent, after the engagement ends.

What is the right engagement length for a forward deployed engineer in 2026?

Six weeks for a single agent shipped to production with a runbook, an eval harness, and a feature-flag flip. Two weeks for a contained eval-harness retrofit on an existing agent. Twelve weeks for a multi-agent orchestration with cross-agent eval, when the rubric carries multiple agents. Anything longer than 12 weeks usually means the engagement is shaped like a consulting retainer, the senior engineer is partly on advisory work, and the leave-behind is harder to point at. We say no to those.

What does named senior engineer mean in practice?

Two specific people, not a bench. Their full names and GitHub handles are in the SOW. They are added to CODEOWNERS in your repo on day 1 of week 1. They show up in your standup or async standup channel. They open PRs from their own GitHub account. They are the same two people on day 1 and day 42; if either rolls off mid-engagement, the engagement is invoiced at zero for any partial week without that engineer present, and replacement is your call (continue with one engineer, accept a substitute, or pause the engagement). The opposite pattern, a rotating bench staffed from a regional pool, is what most repackaged FDE offerings actually deliver.

If both options work, when is a consultant the right choice over an FDE?

When the deliverable you actually need is a recommendation, a vendor-selection memo, an audit report, or a regulatory filing. When you have to convince a board that a particular AI strategy is sound and you need an external authority on the deck. When you need a firm-name signature on a process audit. When the work is genuinely advisory, a senior consultant with no commit rights is the right hire. The FDE pattern fits when the bottleneck is a missing senior engineer on a specific shipping deadline, and what you need is code on main, not a recommendation.