I was asked to provide a health check with insights into the clients Discovery operations. I created a custom application called Pithos – a python-based application which collected data from CMDB and Discovery. This data was then imported into Power BI and we were able to present the following back to the client:

• High disk utilisation
• Presence of core dumps
• Segregated architecture, but no network segregation
• Sensitive data such as plaintext usernames and passwords stored in unstructured data fields
• Scan schedules impacting performance

This was followed up with a roadmap of improvements for the client with the option of being delivered by my company.

The post US Retailer – DevOps appeared first on fitzmoskal.

I worked with presales to deliver a $55k project with insights into the clients Discovery operations created with Pithos – a custom built python-based application which collected data from CMDB and Discovery. This data was then imported into Power BI and we were able to present the following back to the client:

• Sensitive data filters not capturing plaintext username/password
• Under-specced Outpost sizes causing performance issues
• Active user accounts from departed users not removed
• Various data quality issues
• Configuration discrepencies between prod and dev environments

This was followed up with a roadmap of improvements for the client which included development of a runbook, and 10 consultancy days of remediation.

The post UK Pharmaceutical – DevOps appeared first on fitzmoskal.

I worked with this German company to enhance their Discovery and CMDB with various storage metadata and data from unsupported storage systems. I wrote extensive TPL code which integrated with APIs for NetApp, Dell Isilon, IBM Spetrum, and Nasuni.

For Nasuni I had to develop the whole model using data extracted from the APIs to model the Management Console, Volumes and Shares.

The outcome of this project was to allow the client to accurately track storage usage and billing.

During this time I also assisted the client in troubleshooting Azure discovery and retrieving additional matadata from VMware.

The post German Car Systems Maker – Storage Integration appeared first on fitzmoskal.

As part of a larger digital transformation I was responsible for the architecture of their Discovery, modelling application architecture and data integration pipelines to the CMDB.

The initial deployment was minimal and did not cover the whole estate, which was airgapped. I was challenged to come up with an architecture which would be suitable enough capture data across the airgapped environments. The proposed solution involved manual DB snapshots which would be transferred by ftp, however this was later dropped in favour of deployment of a mutual shared platform, which was desperately needed.

This was a part-time multi-year engagement, during this time I developed and delivered various customatisations to their data collection and pipeline, such as:

• SSL Certificate Discovery
• Netcool edge device intergration
• Service modelling
• Reporting and analytics
• Written maintenance manual

The post UK Telecoms Company – Digital Transformation appeared first on fitzmoskal.

I worked 3 short projects with a US-based energy company over a period of three years to develop customisations to the data pipeline to their CMDB. This was to enable a front-end form for application ownership selection. For this they needed specifically to be able to extract metadata from their IBM DB2, MSSQL, Oracle, MongoDB and MariaDB databases for promotion to the front-end display.

The solution involved custom TPL code applied to BMC Discovery, which used a combination of SQL connections of JDBC and API connectivity with MongoDB. Both Discovery and the CMDB sync connections needed to be modified to make it work.

MongoDB presented the most challenging connection as Discovery was not built for a direct integration, so the solution called for running the API retrieval queries directly on the server as it scanned, with a local encrypted text file which contained the API credentials. The output was then retrieved the normal way.

The solution allowed for the client to be able to correctly identify and assign ownership for their database dependent applications.

The post US Energy Company – CMDB Augmentation and Deep Database Architecture appeared first on fitzmoskal.

I was contracted to help win a bid for providing a managed service worth $200k to a large US-based vehicle manufacturer. They were intially discussing a multi-year deal for plant inventory discovery, however it was quickly realised by the client that it would make sense to turn this into a managed service.

The service included upgrade of current Discovery solution with right-sizing the architecture, installation of Remedy with CMDB and support services. The scope of Discovery was to scan the plant networks – the challenge being that these were on profinet and were not only sensitive equipment but scanning was only permitted under very strict windows.

We managed to complete the implementation of the solution upgrade and installation, with the implementation of the full managed service coming later due to delays on the client end. As part of value add of the service, the customer was also provided with a custom solution I developed in python that worked with the Discovery API to be able to load IP ranges with updated location information and automatically update the scan data and schedules.

The post US Vehicle Manufacturer – Managed Service appeared first on fitzmoskal.

My company was initially approached directly by this large telecoms company to deploy Discovery with CMDB. My role as the Principal was technical lead for the project and Solution Architecture. Having worked with the client to draw up the Solution Design, they dropped the project after the first milestone, and used my Solution Design to deploy it themselves.

We were then approached approximately 12 months later by a large managed services company that had taken on the client and wanted to outsource to our Asset & Configuration service solution since they did not have the technical expertise. An intial gap analysis revealed they had mostly followed the design but were struggling in some key areas.

I worked with the MS provider to (now our customer) to workshop and architect the service, worth £240k, that we would provide which included the following roadmap:

• Extend the current deployment and resolve gaps in estate scanning
• Integrate with with Rapid7 to enhance CMDB with ownership details
• Data Quality Assurance
• Deployment of uControl for service modelling
• Credential and license management analysis
• Initiative to identify application owners to reduce risk and improve efficiency in reporting

The post Telecoms Company – Digital Transformation appeared first on fitzmoskal.

I was in charge of the architecture for the deployment £200k worth of solutions and a managed service for a large German consulting firm that wanted to implement a new Asset & Configuration Management function using BMC’s toolset.

Once the deployment was completed and the customer onboarded, I acted as an 3rd line escalation point issues logged through the managed service. In particular I got involved with issues with Data Quality and modelling their network environments. As part of the service they were also gauranteed regular health checks – which we provided in the form of a unique set of analytics written in Python which were exported to Power BI for presenting insights back to the customer, such as:

• Root user logins
• Vulernable open ports
• Recommendations for search and query optimisation
• Compliance issues
• Data quality issues

This unique service was provided only by the company I was working for at the time where I developed it.

The post German IT Consulting Firm – Digital Transformation appeared first on fitzmoskal.

I was part of a consultancy team to deploy a new ITAM function and I was specifically responsible for discovery and integrations to the CMDB, a project worth $3m over 3 years.

The particular challenges faced were that all of their IT functionalities were outsourced to different partners and vendors and some of these partners insisted on work orders to help us with data gathering. This was a complex challenge which required some level of obtaining buy-in and negotiating with the client to get work orders processed as quickly as possible to meet our tight deadline.

I held multiple workshops with the client and partners – and we deployed a “waterfall” data pipeline for populating the CMDB.

After deployment was completed, an issue arose with the accuracy of the CMDB and the wording of the contract which was “95%” accuracy, with no caveats. The first milestone payment was held back whilst the team resolved this critical issue.

I was not directly involved with the client by this time, but as part of resolution I suggested to the account management team that they needed to ensure the contract wording was updated in future to specific automated data only. I also assisted with identifying the sources of data, and types of data – such as that which would be manually entered and would ultimately be down to the client to ensure it met “95%” quality.

The final approach with the client was to review all CIs and fields within the CMDB to be populated and adopt a MoSCoW approach, determining which data were neccesary and which data they agreed, for example, would be impossible to obtain. This massively improved the baseline results and showed that CMDB population was already very close to “95%”. After some additional work on the data pipeline the customer agreed to release the first payment milestone.

The post Canadian Investment Asset Management Company – Ditigal Transformation appeared first on fitzmoskal.

I was hired as a Delivery Manager and Enterprise Architect for the global rollout of Discovery and CMDB for an international Managment Consulting company. This was a 2 year programme directed at North America and European regions worth €2m.

In the first year I identified and implemented €90k worth of cost savings to the programme by automating level 1 support so that the resources were no longer required. I led a team of 8 offshore engineers in India and Poland and was responsible for their training and managing their progress on the the deployment to individual accounts.

I reported to the Programme Manager and was responsible for not only the software architecture but the security design needed to obtain global CISO sign off and allow the programme to proceed when it hit a major hurdle and was blocked by security compliance. One of the many hurdles was implementing RBAC into the solution which had not been designed for full RBAC control.

I worked with one of my lead engineers to find and document all the group permissions available in the tool, then employed a hack to prevent certain pages from loading without the right permissions. This satisfied the requirements of Global CISO. During the process we even discovered a vulnerability that allowed access without permissions, which was reported back to the vendor. The vendor was so impressed that they asked if they could see our documentation.

The post Management Consulting – Global Programme Software Rollout appeared first on fitzmoskal.