STC accelerates application delivery with DevSecOps

When stc Group began its journey to modernize application delivery using a DevSecOps approach and cloud-native development, it encountered challenges stemming from its traditional operating models and process gaps. To tackle these issues and maximize its investment in Red Hat OpenShift, stc Group collaborated directly with Red Hat Services. As a result of this collaboration, stc Group established a best-practice operating model for application development, leading to improved Headquarters developer experiences, strengthened security, and faster time to market for new applications.

Benefits: 

• Strengthened a DevSecOps approach, unifying developers and operations
• Improved developer experiences and security needs
• Cut time to deploy new applications and application throughput by 50%

stc Group’s business strategy aims to create value by utilizing innovative digital methods to improve efficiency for a better future. It is built on key pillars that include connecting the market with cutting-edge technology and digital services, providing uninterrupted, personalized, and secure customer experiences while adopting innovative work methods to transform into an agile digital enabler.

To support these goals, stc Group embarked on a journey to modernize its application delivery through cloud-native development and a DevSecOps approach.

As with any transition, however, there were challenges along the way: “Although we had invested in a cloud platform, traditional operating models and gaps in organizational processes hindered its adoption,” said Faisal Al Hatlani, Application Planning and Control GM, stc Group. “It took a long time to deploy applications, and we couldn’t fully utilize the benefits of a containerized approach.”

As part of its journey, stc Group implemented Red Hat OpenShift. Providing a consistent hybrid cloud foundation for building and scaling containerized applications, OpenShift had the capabilities to support stc’s application modernization initiative.

stc Group recognized that successful modernization is about more than just technology. To establish the new operating model, delivery processes, and the framework for development needed for success, the company partnered with Red Hat Services to deliver a DevOps Center of Excellence (CoE) program.

“Establishing the DevOps CoE program at stc Group reflects our commitment to building an environment that empowers innovation, accelerates software lifecycle, and facilitates a smooth integration between processes, people, and technology,” said Turki Almushaiqah, Business Enablement General Manager, stc Group.

Led by stc Group’s Application Quality Assurance team, the multi-track program lasted nearly a year. It involved a virtual task force combining Red Hat’s experts with stakeholders from the Group’s business, including members from infrastructure design, DevOps, cybersecurity, infrastructure operations, application architecture, developers and application operations teams.

“The program established best practices for DevOps activities across the Group,” said Saeed Basad, Director of Quality Assurance, stc Group. “We established clear ownership and accountability, streamlined end-to-end processes for a seamless application deploying, and developed comprehensive developer guides and documentation. This framework not only covers immediate needs, but also is a scalable and a replicable model, empowering our affiliates to accelerate adoption, drive consistency, and deliver innovation with speed, security, and precision across the Group.”

Strengthened a DevSecOps approach, unifying developers and operations

As part of the program, Red Hat helped stc Group connect development and operational teams with a shift-left methodology. This means operational teams are involved at a much earlier stage, and development teams have visibility in advance of whether their application is likely to meet deploying acceptance criteria. As a result, developers can identify and resolve potential issues faster.

Improved developer experiences and security needs

Developers now have clear guidance on which systems, tools, and processes to use, so they can focus on developing great applications. Security checks are built into these processes, focused on security needs, without creating an additional burden on the team.

Cut time to deploy new applications and application throughput by 50%

By halving the time to deploy new applications and improving application throughput, stc Group has accelerated the time to market for new applications. “The new DevOps processes are aligned to our KPIs, which are designed to maximize operational efficiency,” said Al Hatlani. “These KPI improvements have been validated through the successful delivery of pilot applications.”

The CoE program aligns with stc Group’s overall business strategy, by enabling new ways of working and improving customers’ digital experiences and connectivity with higher-quality, cloud-based applications.

For the next step in its DevOps journey, stc Group plans to migrate to Red Hat OpenShift on bare metal, which will allow it to take advantage of Red Hat management tools and move to a Container-as-a-Service approach.