JBGRID
EN
ESENDE
← Back to profile

Architecture in Context

Technical decisions addressing real business and operational challenges.

Projects

NETWORKING · CRITICAL SYSTEMS

Air traffic systems

Modernizing regulated critical infrastructure.

ARCHITECTURAL TRANSITIONNETWORKING
Existing infrastructure
Domain A
Physical network
Virtualization · NSX
Containers · Tanzu TKG
Domain B
Physical network
Virtualization · OpenShift
Containers · OCP OKE
Critical services remain operational

Physical infrastructure keeps services running while the change is prepared.

THE CHALLENGE

Evolve bare-metal infrastructure into a hybrid platform of virtual machines and containers while maintaining strict regulatory compliance and operational continuity. Automate deployments and integrate physical networks, VMware NSX and OpenShift SDN with connectivity and segmentation across domains.

THE DECISION

Design a network architecture that enabled physical and virtualized infrastructure to coexist, maintaining connectivity, segmentation and operational continuity throughout the transition.

THE TRANSFORMATION

Evolution of the network architecture to integrate virtual machines and containers in a hybrid environment while meeting security, availability and regulatory compliance requirements.

RESILIENCE · OPERATIONS

Backup and recovery

Verified operational recovery.

OPERATIONAL RECOVERYRESILIENCE
Protected workloads
VMware
Hyper-V
AUTOMATED PROTECTION
3-2-1 STRATEGY
3Copies
2Media
1Off-site
RESTORE TEST
SERVICE RECOVEREDOperational validation, not just data restoration

THE CHALLENGE

The AS-IS relied on manual backup processes and heterogeneous protection across VMware and Hyper-V, without relying on copies alone as proof of service recovery.

THE DECISION

Automate backup processes, structure protection around the 3-2-1 rule and include restoration tests and checks of the recovered service.

THE TRANSFORMATION

Automated backup architecture implemented and handed over to operations, with restoration tests and validation of service operation.

IDENTITY · FEDERATION

Digital identity

Corporate Identity and Access Control.

IDENTITY AND ACCESS CONTROLIDENTITY
Identification and context
UsersIdentity and roles
DevicesAssociation and context
Federated identityAuthentication · Authorization
MFANetwork accessPolicies
ApplicationsFederated access
ResourcesControlled access
Access traceability and security monitoring

THE CHALLENGE

Transform a fragmented user, role and permission model into a centralized identity architecture capable of establishing who accessed applications, from which device and under what security conditions.

THE DECISION

Design a federated identity architecture combining multifactor authentication, network access control and user-to-device association while retaining interoperability with existing applications.

THE TRANSFORMATION

Deployment of an identity and access platform bringing together authentication, authorization and device controls, with access traceability and security monitoring capabilities.

IDENTITY · DISCOVERY

IAM Modernization · Banking

Identity and digital signatures with progressive customer migration.

IAM MODERNIZATIONIDENTITY · BANKING
Platform coexistence
Banking customerSign-in
Identity evaluation
Legacy IAMExisting identities
Modern IAMNew identity platform
Progressive migration at loginCoexistence during transition
Authentication and digital signaturesModernized capabilities

THE CHALLENGE

Modernize customer authentication and digital signatures through modern cryptographic methods and a mobile application while ensuring coexistence between legacy systems and the new identity platform.

THE DECISION

Design a coexistence architecture that progressively migrated customer identities during login, avoiding an initial bulk migration. Validate the integration approach through a ForgeRock MVP.

THE TRANSFORMATION

Identity and digital-signature architecture validated through an MVP, subsequently evolved and incorporated into banking operations.

CLOUD · PLATFORM ENGINEERING

AWS · Operable platform

Reproducible architecture and operational autonomy.

OPERABLE AWS PLATFORMCLOUD
Infrastructure definition
Terraform + AutomationReproducible definition and deployment
Infrastructure provisioning
AWS OrganizationsMulti-account
Environment AService Container · Private network
Environment BService Container · Private network
StagingEphemeral
Autonomous operationsDeployments · Maintenance · EvolutionDevOps team

THE CHALLENGE

Evolve an AWS platform to support product growth, improve consistency across environments and reduce the operational impact of changes while maintaining continuity of existing services.

THE DECISION

Design a multi-account architecture with AWS Organizations, isolated environments, private networks and a consistent Service Container platform. Introduce Terraform and automated deployments to manage the lifecycle of infrastructure and applications.

THE TRANSFORMATION

Platform implemented with independent environments, ephemeral staging and reproducible infrastructure. Knowledge and operational capabilities transferred to the DevOps team to manage deployments, maintenance and platform evolution autonomously.

AI · PLATFORM ENGINEERING

AI Platform · Infrastructure Industrialization

Secure, reproducible infrastructure designed for evolving AI products.

INFRASTRUCTURE INDUSTRIALIZATIONAI PLATFORM
Bootstrap · Foundations and governance
AI productsIndependent lifecycles
Product Av1 → v2
Product Bv1
Services and runtimesAutomated deployments
Service Container · Application services
Foundational infrastructure
Networks and isolation
Platform foundations
Cross-cutting governance
Federated identitySecurityMandatory taggingTerraform · Automation

THE CHALLENGE

Evolve infrastructure composed of modules and partially automated processes into an industrialized platform that supports growing AI products, can be reproduced from an empty account and maintains independent lifecycles without compromising operational continuity.

THE DECISION

Define a modular architecture based on infrastructure patterns, Terraform automation and governance by design. Incorporate security, federated identity, environment isolation and mandatory tagging, separating foundational infrastructure from services and Service Container-based product deployments.

THE TRANSFORMATION

Progress toward a reproducible, governed platform model with automated deployments, modular infrastructure and self-service capabilities for DevOps and AI teams, enabling products to evolve without repeatedly changing the foundational architecture.

INTEGRATION · HOTEL TECHNOLOGY

Hotel Technology

Integrated technology architecture for hotel operations and guest experience.

CONCEPTUAL TOPOLOGYHOTEL TECHNOLOGY

Hybrid connectivity and sites

⌂ MAIN HOTEL

Guest roomsCommon areasBack of house

▦ REMOTE SITES

Site ASite BSite C

☁ CLOUD

AWSAzure

Hybrid services and applications

◎ CONNECTIVITY AND SECURITY

SD-WANFirewallRedundant linksWi-FiVLANs and segmentation

IDENTITY AND SECURITY

Active DirectoryAzure ADFederationAccess control

UNIFIED COMMUNICATIONS

VoIP PBX systemsSIP TrunksExtensionsBetween sites

ENTERPRISE APPLICATIONS

SAP S/4HANAPMSOther systems

COMPUTE AND STORAGE

HypervisorsServersStorage arrays

⚙ HOTEL INTEGRATION AND OPERATIONS

InteroperabilityMonitoringAutomationContinuity

MULTIMEDIA AND DIGITAL SERVICES

IPTVChromecastDigital services

SMART GUEST ROOM

VoIP telephonyHome automationClimate controlLightingComfort

STAFF OPERATIONS

ReceptionOperationsMaintenanceManagement

GUEST EXPERIENCE

ComfortServicesEntertainmentConnectivity
MAIN FLOWSData and applicationsCommunications (VoIP)Cloud servicesInternal integration

THE CHALLENGE

Design a technology architecture capable of integrating communications infrastructure, enterprise platforms, in-room systems and digital services, ensuring availability, interoperability and operations aligned with the needs of the hospitality business.

THE DECISION

Define an integrated architecture bringing together networks, identity, security, communications, corporate systems and in-room technologies. Establish integration mechanisms across vendors and platforms so technology services operate as part of one operational ecosystem.

THE TRANSFORMATION

Technology architecture implemented and brought into operation, integrating infrastructure, platforms and services for both staff and guests, with the flexibility to adapt as the hospitality business evolves.