banking on innovation and devops

Banking on Innovation & DevOps

‹#›

Tapabrata “Topo” PalDirector, Individual Contributor, DevOps Evangelist

tapabrata.pal@capitalone.com @TopoPal

Past: • PhDinSemiconductorPhysics• Over20yearsofITexperienceasDeveloper,Architect,SystemEngineer

• ExperienceinRetail,HealthcareandFinanceindustries

Relativetoourpeers,weareastart-up

“EverysinglepersonintheUShadthesamecreditcard.

Itmadeabsolutelynosense.”

RichFairbankCapitalOneFounder&CEO

InformationBasedStrategy(IBS)

Data Technology DataScience

Test&Learn

+ +

MobileFirst

TheDigitalRevolution

"Ultimately the winners in banking will have the capabilities of a

world-class software company.“

RichFairbankCapitalOneFounder&CEO

About Four Years Ago…

About Four Years Ago…

• Mostly outsourced

About Four Years Ago…

• Mostly outsourced• Waterfall

About Four Years Ago…

• Mostly outsourced• Waterfall• Quarterly Releases

About Four Years Ago…

• Mostly outsourced• Waterfall• Quarterly Releases• Manual Processes

About Four Years Ago…

• Mostly outsourced• Waterfall• Quarterly Releases• Manual Processes• Change Orders

About Four Years Ago…

• Mostly outsourced• Waterfall• Quarterly Releases• Manual Processes• Change Orders

Seedof“DevOps”

Seedof“DevOps”

Seedof“DevOps”

Seedof“DevOps”

‹#›Confidential

Development • Architecture • Design • Code • Test

‹#›Confidential

Business • Requirements • Feature Request • Roadmap

Development • Architecture • Design • Code • Test

‹#›Confidential

Business • Requirements • Feature Request • Roadmap

Development • Architecture • Design • Code • Test

Operations • Infrastructure • Platforms • Environment • Deployment • Incident Mgmt • Change & Release Mgmt.

‹#›Confidential

Business • Requirements • Feature Request • Roadmap

Development • Architecture • Design • Code • Test

Operations • Infrastructure • Platforms • Environment • Deployment • Incident Mgmt • Change & Release Mgmt.

Information SecurityApplication Security Security Testing Information Security Infrastructure Security

‹#›Confidential

Business • Requirements • Feature Request • Roadmap

Development • Architecture • Design • Code • Test

Operations • Infrastructure • Platforms • Environment • Deployment • Incident Mgmt • Change & Release Mgmt.

Information SecurityApplication Security Security Testing Information Security Infrastructure Security

DevOpsSec

Code Build Release MonitorDeploy + Test Execution

Code Build Release MonitorDeploy + Test Execution

App

Test

Infra

Code Build Release MonitorDeploy + Test Execution

App

Test

Infra

DEV INT QA PERF PROD

DEV INT

SEC

QA SEC PERF PROD

DEV INT QA SEC PERF PROD

Code Build Release MonitorDeploy + Test Execution

App

Test

Infra

DEV INT QA PERF PROD

DEV INT

SEC

QA SEC PERF PROD

DEV INT QA SEC PERF PROD Infra

App

Code Build Release MonitorDeploy + Test Execution

App

Test

Infra

DEV INT QA PERF PROD

DEV INT

SEC

QA SEC PERF PROD

DEV INT QA SEC PERF PROD Infra

App

Flow

Code Build Release MonitorDeploy + Test Execution

App

Test

Infra

DEV INT QA PERF PROD

DEV INT

SEC

QA SEC PERF PROD

DEV INT QA SEC PERF PROD Infra

App

Flow Feedback

BuildingaserverinaDatacenter

Steps=62Days=60Cost=$25kPain=@#$%^&*Opportunitycost=?????

http://github.com/capitalone/Hygieia

Image TBD

OurOpenSourceContributions

WhyareweOpenSourcingourtools?

It is the right thing to do

WhyareweOpenSourcingourtools?

It is the right thing to doCulture of Continuous Experimentation and Learning

WhyareweOpenSourcingourtools?

It is the right thing to doCulture of Continuous Experimentation and LearningOpen Sourcing makes it better

WhyareweOpenSourcingourtools?

It is the right thing to doCulture of Continuous Experimentation and LearningOpen Sourcing makes it betterWe are in the process of changing banking for good!

WhyareweOpenSourcingourtools?

It is the right thing to doCulture of Continuous Experimentation and LearningOpen Sourcing makes it betterWe are in the process of changing banking for good!We found it inevitable to do DevOpsSec the right way

WhyareweOpenSourcingourtools?

22

Wherearewenow

CodeCommit Random 100s/day

Deployment

ProdRelease

Manual Automated

Integration 1/month 15mins

QA,Perf 1/month 4/daymonthly/quarterly

1/sprint

UnitTest ? ~90%+

23

Howdowescale

24

25

OurFirsteverSoftwareEngineeringConference

2days1,200+attendees

13LearningTracks28TechExpoBooths

52Sessions0Vendor

26

26