[raffraffraff]

> I just don't know how to tackle it beyond putting in hard grunt work to understand the system.

My team are simply replacing large chunks of infrastructure with properly built & documented infrastructure as code. If anyone has a problem, we're asking for a bake-off between this (sensible stuff) and that (wherever-the-hell mess you've got there).