The perfect blend of talent and experience helped Vietnam’s largesttech ecosystem build an infrastructure for the ages. The Challenge:growing pains the lead in its field, it needed to partnerwith a company that had expertise andexperience in these kinds of infrastructureimprovements — as well as a firm grip onbest practices to offer the best advice oncontinuing the journey. Enter SoftServe.One Mount had already reached out toSoftServe in March 2021 for TAM (technicalaccount management) services, but as theconversations and workshops deepened,and these newer needs were considered,both companies realized a wider and morenuanced approach could achieveamazing results. One Mount Group is Vietnam’s largesttechnological ecosystem, providingsolutions and services along theentire value chain in the financial services,distribution, real estate, and retail sectors.With so many services running on thislarge infrastructure, the data workloadsOne Mount has to work with every day areenormous. And with the business rapidlyexpanding within Vietnam, One Mountrecently found itself needing to makecareful choices to keep adapting in timewith its speed of growth. The Solution:when Dev meets Ops One Mount and SoftServe beganto plan the best way to make thisgrowing infrastructure best-in-class.On a basic level, the project was all aboutreducing the load on the infrastructureteam and reducing time to market bymaking it easier for developers to placenew code on One Mount’s systems. Allthis, and taking special care to securethe infrastructure, to protect the dataand applications it hosted. With increasing customer need for a largeexpansion of their existing Kubernetessolution, data platform, and MLOps, thetime came for the company to improveits services with faster and more efficientprocesses, and to scale with an emphasison a growing focus on cloud operations.One Mount also needed to make sure itdeveloped security appropriately aroundall these changes. The solution would involve introducinga smoother and better-integrated DevOpsprocess to the whole infrastructure —in other words, infrastructure as code(IaC). With a set methodology, versioningprocess, and descriptive models in placefor defining and deploying infrastructure,developers would be able to see changesto their code instantly, rather than waitingfor a separate team to troubleshoot. Due to the sheer scale and speed theproject needed to help One Mount maintain in optimizing the cloud frameworks.Two SoftServe DevOps engineers wouldprepare the way on a technical level, tomake implementing DevOps processeseasier. Troubleshooting, diagnosing, andfixing production issues in software acrossthe service lifecycle, they would developmonitoring solutions, perform maintenanceand configuration, and help to fix OneMount’s internally developed code. Specifically, One Mount and SoftServeidentified that they would need to: Implement Terragrunt — a wrapperfor HashiCorp’s Terraform IaCtool — along with Atlantis, which isan application for automating pullrequests on Terraform. Define policies for how Terraformand Atlantis function. Adding the security element to the mix,SoftServe’s DevSecOps engineer would beresponsible for reviewing existing securitypolicies, procedures, standards, and tools,and advising on how to best move forwardwith the needs of the new architecture.Off the back of IaC, they would help tointroduce security using policy as code(PaC) — managing security policies in theform of code, for continuous integration viathe agreed DevOps approach. Introduce quality gates to setcriteria for project landmarks, tocut down on non-compliantresources being created. Implement a security engine todetect non-compliant resources onOne Mount’s systems. Define other detective policiesfor resources that are running onthe infrastructure. The Team:specialists assemble! The work would be carried out byOne Mount’s infrastructure and sitereliability engineering (SRE) team —which already had members filling in thegaps between “Dev” and “Ops” for OneMount and were skilled in knowing howbest to introduce true DevOps. SoftServe’s team was a mixed group ofexperts who could work across each keyelement of the project.The cloud architectwould review technical components andworkloads in One Mount’s current cloudenvironment, explore best practices, andoffer technical and strategic guidance Keeping a close eye on project goals andtimelines, as well as keeping One Mountstakeholders fully informed of milestones,was SoftServe’s project manager. Value delivered:optimized, secured,and expansion-ready Outcomes-at-a-glance:the technical resultsof One Mount andSoftServe’s collaboration The crack team of One Mount andSoftServe techies ticked off everyobjective on the list, finishing on timeand within scope. The immediate effectwas a marked improvement in processand productivity optimization — the mainbusiness goal of the project, achievedsmoothly. A single IaC repository (monorepo),operated using At