BigFix to Ansible migration
Endpoint automation across 20,000+ endpoints and 10+ countries.
UN automation platform
Shared automation with clear team boundaries.
Ansible and AWX platforms for United Nations environments, with reproducible execution, scoped team onboarding and enterprise identity integrations.
The context
United Nations System organizations needed automation across cloud and on-premises estates. Teams had different mandates and conventions, while security and audit expectations required a consistent platform. The UNICC engagement ran from 2021 to July 2026.
The engineering approach
AWX on Kubernetes provided a shared platform. Configuration was held in Git, execution environments were versioned, and team onboarding followed a repeatable path through projects, inventories, credentials and job templates.
- Roles and collections with CI validation
- Molecule scenarios and idempotency expectations
- Access mapped to enterprise identity groups
- Upgrades rehearsed outside production
Integrations and evidence
Vault and CyberArk supplied runtime credentials. LDAP and Azure AD supported identity, Microsoft Graph supported lifecycle actions, and ServiceNow connected automation to change records. AI-assisted operations used scoped capabilities and human approval.
The operational result
Teams could share the platform with scoped access. Automation conventions, execution environments and onboarding became repeatable, while platform changes and job records remained traceable.
Let’s talk