Public Sector

Solving Your Mission’s Biggest Challenges in the Cloud

Enhance citizen services, increase operational effectiveness, and build cultures of innovation & agility with our best-in-class technology.

Whether your organization is interested in modernizing applications or using data analytics and machine learning to improve decision making, Google Cloud is the best partner for your digital transformation journey.

Best-in-class Security from device to data center.

Our comprehensive security model is designed to keep your data safe at every layer, from infrastructure to applications and devices. We provide security administrators with tools to control and automate who has access to critical information. All of our products regularly undergo independent verification of security, privacy and compliance controls to achieve certifications against global standards. From Chronicle, Mandiant, Security Command Center, and more, our team will help you right the right solutions to fit your needs and budget.

State & Local

Whether it’s providing information in an emergency situation, improving public safety or giving community members access to critical information, Google Cloud’s innovative tools and applications help modernize operations to better serve your community.

Education

Program managers, researchers and agency leaders analyze extensive amounts of data to arrive at new discoveries and make informed decisions. Our world-class infrastructure, scalable computing and intelligent analytics provides a more secure environment that reduces the time it takes to find key insights and meet your objectives.

Federal

Decision makers and service members need real-time access to critical information in order to effectively operate in the field. Our comprehensive approach to security minimizes risks, while our smart analytics capabilities provide actionable insights.

New York State DMV Improves Security Posture, Hardens Infrastructure Security with Google Cloud

The New York State Department of Motor Vehicles cloud environment had not been updated or assessed in some time. Being a government entity, their cloud environment needed to be secured with a comprehensive security audit and implementation for security posture improvement. Their ETL (Extract, Transform, Load) jobs for data transferring and processing between the Cloud SQL database and BigQuery data warehouse were not well architected and needed to be updated. We have the solution.

A number of work stream gaps were identified and prioritized based on urgency. An IaC methodology was developed and CI/CD pipelines implemented to create a consistent infrastructure/security foundation and a production deployment, using Terraform code. Performance bottlenecks were identified for data transfer between SQL databases and data warehouses. The data transfer pipeline is re-architected for optimal performance.

Cloud IAM and Access Management

  • Established secure connection to the environments via Identity Aware Proxy (IAP)
  • Defined best practices for Cloud IAM roles and service accounts

High Available and secure Networking structure 

  • Architected Firewall network design for GCP to support private worker pool, GKE & SonarQube
  • Architected Internet facing GKE ingress/egress
  • Established workload connectivity via Cloud SQL Auth Proxy

Cloud Monitoring

  • Architected GCP infrastructure monitoring 

Security Command Center

  • Implemented legacy infrastructure flaws remediation according to SCC recommendations and Best Practices

Infrastructure as Code

  • Implemented DMV Github as code repository 
  • Developed Terraform as code Infrastructure 

DevOps 

  • Developed IaC CI/CD pipeline for DevOps
  • Included security checks for static code
  • Included vulnerability scan for images
  • Enabled private pool workers for Cloud Build

Data Transfer

  • Assessed the current data transfer process between Cloud SQL and BigQuery
  • Identified performance bottlenecks for the data transfer process
  • Redesigned the data transfer and processing architecture
  • Optimized data transfer and processing pipeline

Secure & Accelerate Your Cloud Journey