Kubernetes & OpenShift - AWS Solution Architecture - Monitoring with Elastic Stack - Cloud Security - Security Monitoring, Consulting, Coaching

Workshop is a Kickoff Event of a Cloud Foundation & Governance Program. Objective is to enable many Development and On-premise operations teams to move smoothly to the Cloud.

Activities

Concepts Presentations, Consulting, Experience Sharing, Recommendations.

Concepts, Techniques

Landing Zone, Continuous Compliance, Automation, DevOps Workflows.

Several AWS Cloud Products: AWS Serverless File Orchestration Platform, AWS Config Rules Development, OpenDistro for Elasticsearch, EC2 Metrics Dispatcher, Web Proxy for AWS Elasticsearch, JSON Logging.

Activities

Concept, Architecture, Design, Configuration and Software Development.

Methods, Techniques

Continuous Compliance, Infrastructure as Code, Automated Cloud Configuration and Discovery

Automating Cloud Compliance Verification, Vulnerability Scanning and Threat Detection. Findings cover: Violated AWS account and workload settings, Violated Network and AWS Cloud Account Access Activities and VM Vulnerabilities. Incorrect Configurations and identified Threats are reported automatically to a SIEM (Security Information & Event Management System).

Activities

High Level Concept, Researching Tools and existing Solutions, PoC implementation, Incident Simulation

Methods, Techniques

Continuous Compliance, Vulnerability Scanning, Threat Detection, Automation, Anomaly Detection, Automated Incident Response

Enabling 100+ Software Solutions’ Teams to natively provision and own Google Cloud Infrastructure and manage Google Projects (Costs & Security) transparently & smoothly.

Activities

Organizational and Technical Concepts, Interviewing Teams and Management, Implementing Proof –of-Concepts (Hybrid Cloud Service Mesh, Dynamic Secret Service for Containers, Dynamic Cloud Cost Distribution,  Project IAM), Terraform Blueprints (Dedicated VPCs, Private GKE, Private Vault Cluster), Consulting, Presenting results to Management, Handing over to Platform Team.

Methods, Techniques

Dynamic Secrets, Service Mesh (Dynamic Discovery, Resilience), Dynamic Microservices Security (Authentication, Authorization & Encryption), E2E Secure Connectivity to On-Premise Services, Cloud Billing Distribution, Google Folder/Projects Management, Roles & Rights in Cloud & Kubernetes, Secure Introduction of Cloud and Micro-Services Clients, Audit Logs.

This Workshop presents an Overview to Methods and Tools that enable developing and monitoring Secure Application Software in Docker Platforms (Kubernetes) and Cloud (Amazon Web Services)

Activities

Consulting, Preparation of Workshop materials, Demo, Hands-on Training, Recommendations

Methods, Techniques

Compliance, Threat Modeling, Privacy by Default, Blueprints, Proof-of-Concepts, Security Automation, Network Segmentation, OWASP Top 10, Static & Dynamic Security Testing, Web Penetration Testing, Web App Firewall, Container Firewall, Secret Management, Identity Management, Data Encryption (in Transit & at Rest), Key Rotation, Audit Logs, Events Correlation, Anomaly Detection, Alerting.

Social Data Protection, Zero-Trust Security Solution and Self-Audit Framework of a Digital (eGovernment) Platform (OpenShift/Kubernetes and Docker RESTful micro-services). This platform serves social insurance agencies.

Activities

Introducing Zero-Trust Security Solution Architecture, Starting Security Program, Security Risk Assessment with Product Management, Security Concept, Documenting & Prioritizing Security Backlog, Implementing Proof of Concepts, Documentation, Coaching Product Management and Architects & Development Teams, Hand-Over to Product Management,  Development and Operations Teams.

Methods

Cloud Security Alliance Guidance, GDPR, CIS-RAM, CIS Kubernetes & Docker Benchmarks, Dynamic Secrets, Scalable and Secure Access with Vault PKI, OWASP (Open Web Application Security Project), Vulnerability Scanning, Penetration Testing, Secure Software Build Pipeline, Continuous Delivery.

This Workshop trains software developers and DevOps on security concepts (workflows, separation of responsibilities, secret paths, roles, authentication backends, secret backends, and policies). Additionally, the practical part covers static and dynamic  secrets, Vault-Kubernetes authentication backend, Automating PKI (Key/Certificate) Management, Data Encryption.

Methods, Techniques

Security by Design and by Default, Accountability (Audit-Logs), High Availability.

This Workshop presents Security Monitoring and Analytics features of Elastic stack. Additionally a tactical analysis methodology is presented to increase analysis efficiency and minimize false positives

Activities

Consulting, Preparation of Workshop materials, Demo, Recommendations

Methods, Techniques

SIEM (Security Information and Event Management) Basics, Tactical Analysis, Anomaly Detection, Alerting, Automated Prioritization and Filtering of Security Events, Minimizing False Positives.

Process (End2End) & Infrastructure Performance Monitoring Solution to monitor, detect and present performance bottlenecks of an eGovernment (Digital) Platform (OpenShift/Kubernetes and Docker RESTful microservices). This platform serves social insurance agencies.

Activities

Solution Architecture, Performance Monitoring Workshop, Monitoring Concept, Metrics & Logs Collection, Layers Dashboards design and implementation (Process Overview, RESTful API Performance, Docker Containers, Java Virtual Machine, Database Performance), Proof of Concept, Scripting, Deployment, Test, Performance (Metrics/Logs) Analysis and Correlating Events/Bottlenecks, Documentation, Rollout, Coaching and Knowhow Transfer, Handover to development teams.

Methods

Continuous Delivery, Continuous Testing, Continuous Improvement, Event Sourcing, CQRS ( Command Query Responsibility Segregation)

A secure Kubernetes Platform running on-top of AWS infrastructure. Administrative access follows least privilege concept; Data is encrypted; Data integrity, availability and replication controls are implemented   

Activities

Research, Implementation, Integration, Testing

Methods/Benchmarks

AWS Security Best Practices, CIS AWS Foundations Benchmark, CIS Benchmark for Kubernetes, Infrastructure-as-Code

Rollout Elastic stack (ElasticSearch, Logstash, Beats, Kibana) to monitor Digital Platform Infrastructure (Kubernetes and Docker micro-services). This should monitor Docker based (micro-) services that promote & sell energy digital products

Activities

Solution Architecture, Monitoring Workshop, Monitoring & Alerting Concept, Metrics & Logs Collection, Dashboards design and implementation, Proof of Concept, Deployment, Test, Blue Prints, Documentation, Rollout & Handover to product teams.

Methods

Continuous Delivery

Rollout Docker Swarm to run Docker microservices. This should host and run Docker based (micro-) services that promote & sell energy digital products

Activities

Solution Architecture, Monitoring Concept, Metrics & Logs
Collection with Elastic Beats and Splunk Forwarder, Proof of
Concept, Blue Prints, DevOps Support, Deployment, Test,
Documentation, Rollout & Handover to nearshore Operations
team.

Methods

Continuous Delivery, Scrum

Project aims at deploying and operating a Docker and WebApps cluster. It creates and implements operations model in addition to functional-, management-, monitoring and security requirements of a Cloud Platform. This should host and run Docker based (micro-) services to promote sell energy digital products.

Activities

Leading DevOps Team, Roadmap definition, Release & Sprint Planning, Grooming, Research, Solution Architecture, Blue Prints, Consulting, Monitoring Concept with Elastic Beats, Implementation, Test, Documentation.

Methods

Continuous Delivery, Scrum, Scrumban, Kanban

An online marketplace to sell digital contents that is used by kitchen machines. It serves about 1.5 million users worldwide

Activities

Guiding and leading a DevOps team in operating, maintaining and developing a Global Component. Managing Functional & Operational Requirements Backlog. Grooming & Planning. Tracking & Reporting to different Streams & Management. Organizing with several other teams

Methods

Scrumban, Kanban, SAFe (Scaled Agile Framework), Continuous Delivery, Agile Metrics, Predictability, Agile Forecasting

This Workshop aims at increasing Predictability and shorten delivery cycle times. The ultimate goal is to avoid guessing and systematically make accurate Agile Forecasting with proven methodologies.

Activities

Consulting, Preparation of Workshop materials, Recommendations

Migration of an E-Learning platform that offers live and on-demand courses to professionals and students

Activities

Dockerizing Big Bundles Concept & Implementation

Orchestration Concept, Design & Implementation: Resiliency, Discovery, Automatic Configuration

Java Virtual Machines of more than 90 Java Applications (used by 4000+ employees) must upgrade to Java 8. This should resolve many security and concerns of missing support of older JVMs

Activities

Planning, Rollout coordination, Reporting

A new generation Health Insurance Portal that enables officers to find information about insured persons much faster than the classic way.

Activities

Leading Development Teams, Coaching Scrum Masters, Product Owners & Teams, Introducing Self Organization & LeSS Practices, Organizing & Leading Retrospectives

Traffic Information Portal for the German Federal State North Rhine-Westphalia. This portal should enable car drivers, public transport passengers and bike rider to plan their directions and to get up-to-date and personalized information about traffic and possible delays in normal roads, high ways and public transport

Promotion Definition Cockpit is a web application that automates and enhances marketing campaigns of a major mobile telecommunications provider in Germany.

CPCOM is a program that automates and enhances customer’s ordering processes of a major mobile & landline telecommunications provider in Germany

MyCommunity is a program that integrates the subscriber’s social media contacts into his internet address book served by a major mobile & landline telecommunications provider in Germany

WebSessions is a mobile surf portal that enables prepaid subscribers to surf the internet right after payment. This portal has many interfaces to external & internal services. It enables a major mobile telecommunications provider in Germany to increase revenue of data services from prepaid customers.

Defining Performance, Availability & Serviceability Requirements for new Portal Software & Services

Finding Solutions for Status quo Problems