Architecting a Highly Secure Enterprise Multi-Cloud Infrastructure

Global Fortune 100 Food Processor Transitions to Google Cloud Platform

With over 100,000 employees, this global food processor has plans to modernize its IT stack in its transition to the multi-cloud environment. Its digital transformation goals include taking advantage of all the flexibility, cost savings, and ease of scale of using cloud services. The IT team wanted to accelerate the adoption of apps and services by its employees and spin down its own data centers to reduce capital expenditures. After decades of running their own data centers, they lacked the cloud expertise and knowledge to pull it off. More importantly, they were concerned with how to address the massive compliance requirements for the cloud and build a secure infrastructure.

Architecting a Highly Secure Enterprise Multi-Cloud Infrastructure

Partnering with Google for cloud strategy and migration

Google Cloud Platform (GCP) was selected as the solution of choice for the organization to fit into its cloud enablement strategy. Jerry Sanchez partnered with Google to deliver a full enterprise cloud strategy for the food processing giant, selecting solutions like Kubernetes, for simplified management and orchestration of containers, amongst others, to fully support a modern microservices development model being adopted by the organization. Network architecture and implementation plan were designed on top of GCP with the unique requirements and needs of the organization in mind. After the planning and design phase, the team transitioned a forecasting app onto GCP, implementing the proposed solution as part of the engagement with the food processor giant.

There were concerns around the security of data leaving on-premises data centers – but the team presented a variety of tools, frameworks, and best practices like using shared VPCs from GCP and security products like TwistLock to better improve the security of both on-premises and cloud systems. Finally, recommendations and future improvements to the hybrid architecture the food processor was adopting was provided for the IT team to consider. This included recommendations on monitoring and auditing systems, tools/products to use, security frameworks (NIST and general security recommendations), projects and folder structures, CI/CD integration, role definitions and AD integration (general identity and access management practices), and more.

Challenge

  • Transitioning of single business-critical app to the cloud
  • Integrating with existing enterprise solutions like databases
  • Maintaining security of entire IT stack

Solution

Design and implementation of a secure, flexible network architecture based on Google Cloud Platform with full integration across existing solutions like Splunk.

Benefits

  • Future-proof architecture that allows easy scaling to additional workloads and use cases
  • Improved security across a hybrid model of cloud and on-premises apps and resources
  • Lower costs and more efficiencies around scaling and deployment of apps that are tightly integrated with on-premises resources

Products

  • Google Cloud Platform
  • Kubernetes
  • SnapLogic
  • AtScale