For research institutions, a solid IT foundation can prove to be the difference in delivering meaningful results for scientific endeavors — and thereby in securing valuable funding for further research.

To that end, University of California, Riverside has launched an ambitious cloud transformation to shift from a small on-premises data center to an advanced research platform powered by Google Cloud Platform and its various service offerings.

As part of a three-year partnership with Google Public Sector, which kicked off in January, UC Riverside aims to empower its researchers in computer science, materials and quantum engineering, genomics, and precision agriculture to fully exploit Google’s location-agnostic application modernization platform, as well as its scalable compute and high performance computing (HPC) capabilities, says Matthew Gunkel, CIO of IT solutions at UCR.

Gunkel enlisted Google Public Sector professional services specifically as part of a strategy to quickly evolve UC Riverside’s small data center into an advanced cloud hub with robust research computing capabilities that would enable researchers to better compete for grants and funding opportunities.

“We identified Google as being well aligned with us strategically,” says Gunkel. “They have an agile infrastructure. They have the ability to facilitate industry-leading service concepts in additional clouds through a service they run called Anthos.”

Google’s Anthos is a hybrid cloud container platform for managing Kubernetes workloads across on-prem and public cloud environments. Gunkel also cited Google’s Looker and Big Query BI data analysis tools and its Chronicle security operations suite as important for enabling the university to operate a wide variety of applications and research on the cloud.

A partnership and cloud training model

With roughly 180 staff members, UC Riverside IT is relatively small, with largely traditional on-premises IT skills. As such, migrating to the cloud alone was not part of Gunkel’s plan.

Google’s assistance in developing a more efficient cloud architecture and training UCR’s IT staff in cloud technologies has been an immeasurably valuable service, he says, adding that Google is in a support role and is not running the show. UCR’s cloud architecture, for example, has been designed to be location-agnostic so the university is not locked into any one vendor and can adopt a multicloud platform over the long term.

“The services engagement is consulting and training to assist us in moving initial cloud workloads and to assist in our architecture to align to GCP services,” Gunkel says. “This is a ‘teach us to fish’ model. It’s all our work.”

UC Riverside IT is well on its way to migrating its core data to the cloud, developing its research platform, and shifting a range of applications to support the needs of its user base, which ranges from quantum engineering researchers to administrators, faculty, and students.

To date, UCR has moved the “vast majority of our data stores to Google,” Gunkel says, noting that his staff is currently refining the architecture and ETL processes for management and organization of the data long term.

In addition, UC Riverside IT is aligning its data to be accessed from Looker, Google’s enterprise BI and analytics platform, though which UCR will be deploying its Oracle Finance application for scaled reporting. UC Riverside is also rewriting a number of legacy applications to be cloud-native while revamping others for the cloud — there will be no ‘lift and shift’ of any applications, Gunkel says.

To that end, Google helped UC Riverside re-architect and migrate certain legacy services, including an LDAP configuration on a Solaris Unix server, as part of a process of identifying increased efficiencies for the deployment and operation of those services, which has been “an educational experience for a lot of my staff,” Gunkel says, noting that the overall transformation has required “cultural change management.”

Empowering research in the cloud

But the university’s evolving research hub is the crown jewel of the cloud migration.

“We have been working with a number of researchers on a platform that we are calling ‘Ursa Major’ where we committed to a number of compute instances and storage and RAM and GPUs that would be available to our researchers over a three-year time period,” Gunkel says.

Jim Kennedy, CTO of UC Riverside, says Google is helping architect the research hub and is also helping the IT chiefs make connections with researchers beyond UCR to help train UCR’s research faculty on Ursa Major, which will expand and grow beyond the three-year agreement with Google.

“Google connects us to experts in various research fields, and have conversations with our faculty directly, such as our genomics researcher on campus. There are experts on Google’s side, too,” Kennedy says.

Google also helped the Gunkel and Kennedy extend the university’s subscription-based compute and storage services to researchers in a multitude of disciplines. In the past, if a materials engineering researcher wanted to run workloads on several thousand processors, they would often have to write proposals to gain access to external supercomputer clusters.

With HPC requiring vast computing power, Gunkel also notes the benefit for efficiency and sustainability of shifting those workloads to the cloud. “We’re in a fairly constrained region against mountains and our ability to bring power into the university is something we’re constantly battling,” Gunkel says. “One of the things our researchers were very concerned about was [building] a sustainable, more eco-friendly solution. It’s something UCR values heavily but it’s also a challenge for us locally.”

Still, the migration, still in its early days, is being designed to accommodate a wide range of computing constituencies. For instance, UCR is also using Salesforce and MuleSoft as well as Google’s API layer to provide the “connective tissue” that is required across the university’s many enterprise platforms.

“The best way to think of the university is really as a collection or community of small businesses,” Gunkel says. “A lot of what we try to provide on the service stack side are tools that empower all of them in their different endeavors.”

Cloud Computing, Education Industry, High-Performance Computing

By Ravi Balwada, CTO of Guitar Center

In retail, we don’t have the luxury of thinking about security as an afterthought. We have to think about security early in the innovation process and make sure our security best practices, governance and architectures are taken into account when we are designing our solutions—everything from defining what a container needs to look like when we deploy something to what sort of access controls we have. 

With modern cybersecurity technology, we have better tools and instrumentation to monitor environments more effectively, to change the security posture very rapidly and meet the changing needs of the company—whether it is adapting to a new wave of mobile devices or introducing a new population of workers to information that is sensitive. 

Also thanks to modern cybersecurity, new use cases have become available in retail that were never possible before. Many retail leaders talk about the changes being enabled for their customers, but it’s also vital to explore the exciting new ways retailers can enable their frontline workers.

Three areas cybersecurity is helping to supercharge our frontline workforce

When you focus on cybersecurity in an environment like Guitar Center, you have the power to do amazing things—for your sales associates, customers and overall business. Here, digitization and cybersecurity are empowering our sales associates in three major aspects of our business:

Customer serviceBack office functionsEfficient, individualized, business management

Securing a new level of customer service and relationship

Our mission is to build a lifetime relationship with our customers in their musical journeys. Whether it’s lessons, product, repair or rental services, acquiring or selling used equipment, technology connects how we build our relationships with customers. Customers can start online and finish in a store; start in a store and finish online; or any combination they choose.

As a result, we’re shifting the engagement with the customer to the aisle instead of at the point of sale. In a previous incarnation of our business it was: “What do you need? Let me ring you up.” Now we are about: “Let me work with you collaboratively. I understand who you are, your needs, your aspirations. Let us brainstorm and together we can find the best solution. Let’s move this conversation to the aisle where I can help you make good choices.”

Our sales associates leverage information across all channels, which changes the conversations we have with customers. If you’re a salesperson, you actually know if the customer has been browsing certain items online. You know what the customer has purchased in the past. You can make recommendations for equipment, lessons, sheet music. You can help them complete their purchase and you can help them take advantage of other things that might make their musical journey more fulfilling. 

For our almost 12,000 frontline sales associates, it’s no longer a world of post-it notes and pieces of paper. We are bringing a massive amount of information and insight. They have full visibility into supply chains, status of inventory, deep insights into each customer, and much more. They are dealing with volumes of information around dozens of variables. There is far more data and activity at the edge and a much larger attack surface.

This requires cyber innovation and evolution. You now have multiple places where data is residing that have to be secured, which means you need cybersecurity with visibility and granular access controls to ensure that the right people are accessing the right information at the right time. There is also the challenge of forensics and investigation of security incidents. We need systems that have amazing logging and automation for us to be able to react very rapidly to any security incidents. That requires us to work with modern technologies that are agile and can very quickly be swung into action. 

Our data management is a key focus, including building data lakes and visual analytics capabilities that we are introducing across our entire enterprise. We also have to make sure we have a secure platform. We are replatforming our firewalls and leveraging new technology around identifying threat patterns—isolating problems when necessary, isolating our environments so they are more effective. Only through these kinds of moves can we support our associates to build those deep customer relationships that fuel their success.

Supporting the latest back office functions

Our associates have new frontline tools that enable not only customer relationship management but back office function. For example, every associate will have a mobile device. If associates need to perform actions such as pick up from a store, ship from a store, or access inventory, they have the information at their fingertips using their mobile devices. This provides a tremendous benefit for each of our people, but it also means our endpoints will increase ten times versus what we have today.

With each new device and endpoint, we put powerful capabilities in the hands of associates. You have to have amazing security—with isolation, compliance, controls, encryption, edge protection, and more. We are giving associates the ability to process payments on mobile devices. As you run financial transactions on mobile devices, on wireless networks, you need to prevent associates from compromising personal identifiable information. Another important factor is the ability to onboard people quickly and efficiently, especially with our seasonal workforce. Technology compresses time to value so they can be productive faster with information that is easily available and tools that are highly intuitive. And this speed only becomes possible when all of those interactions are properly protected.

Bringing new levels of management to the business

At a time when retaining and motivating workers is paramount to business success, Guitar Center has been executing operational advancements that are geared toward empowering and engaging our associates in new ways. Today, sales associates can manage their own businesses from their mobile devices. They can view status on commissions; access training; get real-time information on promotions; collaborate with colleagues and peers.  It’s not enough to just build an application that works on mobile devices. It has to be engaging. We’re building experiences across the enterprise that are more gamified.

It is an important, fundamental change—knowing that we have a security posture to support this kind of innovation. We continue to harden our security to ensure all of our 12,000+ sales associates can be more and more digitally enabled.

Enabling workforce satisfaction, innovation, and long term success

The value of empowering sales associates with robust, secure, digital experiences cannot be overstated, especially in today’s environment where workers have more options and are seeking jobs that are more enriching and satisfying. There is, however, one caveat. The kind of data-driven frontline innovation I am describing is only possible when we invest in and treat cybersecurity as an enabling technology, and a nice-to-have. At Guitar Center, we are always aware that we can only do the things we want to do if we have the security that we need. 

About Ravi Balwada:

Security Roundtable author, Ravi Balwada, is the chief technology officer at Guitar Center, the world’s largest musical instrument retailer.

IT Leadership