Global Financial Company enables secure access at scale for remote workers using AWS Workspaces
The Client, a global financial company, provides payments solutions to enterprises and medium size companies, with business across more than 100 countries and a workforce of thousands of employees and contractors.
As a global company with a large employee and contractor base segregated across the world, The Client faced a unique challenge as the different countries around the world were affected by the global pandemic, and workers moved out of their offices into remote work. The capacity of legacy VPN and VDI systems was a concern, additionally company expansion and acquisitions required rapid enrollment of new users which were affected by the global resource shortage resulting on delays on provisioning of corporate laptops that would allow them to perform they day to day activities.
The Client needed an enterprise solution to manage remove desktops, it needed to be deployed in days not in months, cost-efficient, providing robust security to integrate with their infosec systems and PCI standards, and allow access to resources both cloud and on-premises with locations in over 5 continents
MacondoTek carried out an assessment of the requirements and specific challenges and reviewed the needs to integrate into the existing systems and operational processes and procedures of the company. The proposed was designed and presented the to the different stakeholders to validate the architecture, security, resilience, cost, and operational best practices, to adopt AWS Workspaces.
The solution included:
- 5 new Virtual Private Clouds (VPCs) in 5 different AWS regions for global coverage and to allow better network connectivity from the user’s locations
- High Availability using multiple networks and Availability Zones (AZs)
- Connectivity to 3 global datacenters in North America and Europe
- Integration with on-prem MS Active Directory
- Integration with corporate Single-Sign-On and Multi Factor Authentication (MFA)
- Custom Workspace Images to incorporate corporate standards for security tooling and monitoring
- Integration with Corporate software distribution tools
- Updates to user on-boarding processes and systems for operational provisioning of new workspaces
- All components deployed and configured using CI/CD pipelines and Infrastructure as Code.
- Robust control and security policies implemented to align with organization IT infrastructure standards.
The solution allowed The Client to enroll multiple new employees during the pandemic, reducing the impact of resources shortage to rapidly expand their workforce without needing to provision physical devices, as well as enabling the decommission legacy VPN and VDI resources to consolidate access to remote workers and consultants across 5 continents.
Related Content
