IT Infrastructure Management and Improvement

• Inventory: server, storage, network, licence and application mapping
• Technology maturity and end-of-life (EoL/EoS) risk assessment
• Performance bottleneck analysis (CPU, memory, IOPS, latency, network)
• Capacity utilisation rates and identification of idle or over-provisioned resources
• Cost analysis: separating licence, maintenance, energy and personnel costs
• Prioritised modernisation roadmap and budget proposal

• Selection and sizing of rack, blade and dense server platforms
• Server installation, configuration, firmware management and standard image creation
• High availability (HA) clusters and load balancing architectures
• Hyperconverged infrastructure (HCI) design and deployment
• Secure design of out-of-band management (iLO, iDRAC, IPMI) infrastructure
• Operating system installation and hardening (Windows Server, RHEL, Debian, Ubuntu, AlmaLinux, Rocky)
• Deployment of high-performance computing (HPC) and GPU server infrastructures

• SAN and NAS architecture design, protocol selection (FC, iSCSI, NFS, SMB)
• All-flash and hybrid array selection, sizing against IOPS and latency targets
• Object storage (S3-compatible) and archive tier deployment
• Software-defined storage design and operation (Ceph, ZFS-based solutions)
• Snapshot, cloning, deduplication and compression policies
• Synchronous/asynchronous replication between sites and data consistency verification
• Storage performance monitoring, capacity planning and growth projection

• VMware vSphere/ESXi design, deployment and operation
• Proxmox VE clustering, high availability and storage integration
• Microsoft Hyper-V and Failover Cluster configuration
• KVM, oVirt and OpenStack based private cloud infrastructures
• Desktop virtualisation (VDI) design and user profile management
• Deployment and hardening of Kubernetes and Docker based container platforms
• Resource pools, overcommit policies and performance tuning

Backup is the organisation's last line of defence in a ransomware attack. ONGSEC designs backup architecture not merely as data copying, but from an attack-resilience perspective.

• Backup architecture designed to the 3-2-1-1-0 rule
• Immutable backup repositories and object lock implementations
• Physically separated (air-gapped) copy: tape library or offline media
• Setting RPO and RTO targets with business units and reflecting them in the architecture
• Application-consistent backup (database, e-mail, virtual machine, file server)
• Disaster recovery (DR) site design, replication and failover scenarios
• Regular restore tests and disaster recovery drills
• Aligning the business continuity plan with the technical recovery plan

• Active Directory design, forest/domain configuration and health assessment
• Group policy (GPO) architecture, hardening templates and regular review
• LDAP, Samba and open source directory service deployment
• Enterprise certificate authority (PKI) deployment and certificate lifecycle management
• E-mail infrastructure (Exchange, open source alternatives), SPF/DKIM/DMARC configuration
• File server, authorisation architecture and access audit records

• Infrastructure monitoring platform deployment (Zabbix, Prometheus, Grafana and equivalents)
• Threshold, alarm and escalation definitions; notification integrations
• Centralised log collection and retention
• Configuration management and automation (Ansible and equivalents)
• Patch and update management processes for operating systems and applications
• Standard image and golden template lifecycle

• Server room layout, cooling and power adequacy assessment
• Hardware supply, warranty and support contract management
• End-of-life planning, secure data destruction and disposal
• Spare parts stock and rapid replacement arrangements
• Asset inventory maintenance and documentation