Something powerful is at work here, and it\u2019s working very well. As TLM looks to scale nationwide, Zach Boewer, the VP of Engineering, sat down to discuss how 探花大神\u2019s cloud-based directory is playing a crucial behind-the-scenes role in their program\u2019s success and rapid expansion.<\/p>\n\n\n\n
- Organization: The Last Mile<\/li>
- Size: 11 Sites, 4 States<\/li>
- Location: HQ in San Quentin, California<\/li>
- Problem: National expansion, cross-OS environment (Mac\/Windows), highly secure and controlled environments<\/li>
- Goal: Scalable identity management, airtight endpoint security<\/li><\/ul>\n\n\n\n
![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/11\/zach-headshot-1.png\")
Zach Boewer
VP of Engineering<\/em><\/figcaption><\/figure>\n\n\n\nBackground<\/h2>\n\n\n\n
As a not-for-profit organization, The Last Mile is actively turning inmates into students with hands-on technology training. When students reach the end of their prison sentence, they re-enter society equipped with in-demand coding skills that help them to land a job in tech. Not only is this beneficial for the individual and society, these trained programmers are making a mark on their employers as well.<\/p>\n\n\n\n
\u201cThere are certainly other career paths they could go down, vocational tracks like construction, or furniture building, and those are great opportunities. Coding is not for every single person,\u201d Zach explained.<\/p>\n\n\n\n
“However, I think that everybody realizes the power of coding\u2014coding embodies change. It\u2019s a skill set that can literally change the world and how people interact with technology.”<\/em><\/p>\n\n\n\n
![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/11\/codinggold.png\")
<\/figure><\/div>\n\n\n\n
Qualified inmates learn HTML, JavaScript, CSS, and Python \u2013 coding languages that are in-demand for developing websites and web apps. Plans are also in motion for a front-end curriculum to include web graphic design, data visualization, and even UX\/UI in the near future. After a student completes the coursework, they can begin putting their newfound skills to work through TLM Works: the first web development team made of inmates. Successful students complete projects for tech companies and earn a wage while building their portfolio.<\/p>\n\n\n\n\u201cInmates can save money so that when they go back into civilization, they have a trust fund set up to get re-established. They can send money home to support their families and they can use some inside in the commissary to buy food and personal items. But really, we get them the skillset. We help them build a portfolio and a resume, and then assist them as best we can in transition to find a job.\u201d<\/p>\n\n\n\n
![\"Identity](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2017\/11\/The-World-1.png\")
<\/figure><\/div>\n\n\n\nScaling and Security Challenges<\/h2>\n\n\n\n
\u201cSince I started with The Last Mile three years ago, the program has evolved immensely, and so has our stack.\u201d Zach explained, \u201cOriginally it was just one rack of equipment inside San Quentin with no ability to bring in external content, so it was a very challenging environment.\u201d<\/p>\n\n\n\n
Working within a prison meant that TLM needed to meet unique security standards.<\/p>\n\n\n\n
\u201cAt the Last Mile, our security needs are different. We are ultra restrictive. Users can\u2019t access unrestricted sites, they can\u2019t install anything, and they can\u2019t go browse a website.\u201d Zach explained, \u201cSo we have to start building layers of security to prevent that from happening.\u201d<\/p>\n\n\n\n
TLM created a simulated online learning experience using private cloud infrastructure. With this system, incarcerated individuals are able to practice coding without needing access to the rest of the web.<\/p>\n\n\n\n
“We still have some private cloud resources, some assets that we host within Google Compute for example. So we need to enable connectivity to that, while still locking down machines.”<\/em><\/p>\n\n\n\n
![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/11\/securitygold.png\")
<\/figure><\/div>\n\n\n\nNeed for Automation<\/h2>\n\n\n\n
To implement their program throughout prison systems across the nation, TLM had to trade their on-prem solution at San Quentin for something scalable, secure, and automated.<\/p>\n\n\n\n
\u201cWe reached a point where The Last Mile had really started to scale, and one of the major roadblocks for us to do this efficiently and securely was automation,\u201d Zach said.<\/p>\n\n\n\n
“So how do we actually facilitate updates and access to our virtual machines? How do we deliver applications and extensions to make sure our students have access to the best tools to get the job done? And finally, how does all that scale?”<\/em><\/p>\n\n\n\n
\u201cWe knew we couldn\u2019t solve this just by hiring more personnel. We couldn\u2019t afford to build out teams and teams of people internally because of the additional management challenges involved. Instead, we needed to automate.\u201d<\/p>\n\n\n\n
![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/11\/thinkinggold.png\")
<\/figure><\/div>\n\n\n\nThe Solution<\/h2>\n\n\n\n
To meet TLM\u2019s needs, Zach turned to a tool that he had used previously at two other organizations: 探花大神 Directory-as-a-Service\u00ae.<\/p>\n\n\n\n
He explained, \u201cI\u2019m looking at 探花大神 as a new way to manage our environment, that will give us the ability to automate and scale out The Last Mile Works as a platform.\u201d<\/p>\n\n\n\n
Why doesn\u2019t Zach use a legacy IT management solution, like Active Directory? The limitations would greatly hinder TLM\u2019s growth, and ultimately, their ability to reach more prisons.<\/p>\n\n\n\n
“Without something like 探花大神 on an iMac, this type of security and connectivity is very difficult to achieve. I would have to have more systems at play, and my ability to be nimble and roll out new sites would suffer. I don\u2019t think we would be able to scale as quickly as we are able to with 探花大神.”<\/em><\/p>\n\n\n\n
![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/11\/monitorgearsgold.png\")
<\/figure><\/div>\n\n\n\nThe Result<\/h2>\n\n\n\n
探花大神\u2019s ability to manage and track fleets of systems with Policies and the Events API has allowed Zach to meet security demands at multiple sites from a single location.<\/p>\n\n\n\n
\u201cThe fact that 探花大神 can run scripts and has built in Policies and grouping means I can build out users, control password changes, and actually have detailed information about who has access to the machine and when it was used. We can use features like MFA and single sign-on (SSO) so that we know the person signing onto that machine truly is them because they checkout a token, or a Yubikey,\u201d Zach said.<\/p>\n\n\n\n
![\"The](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/11\/usermanagementgold.png\")
<\/figure><\/div>\n\n\n\n![\"\"](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/11\/professionalgoldtie.png\")
<\/figure><\/div>\n\n\n\n![\"SSO](\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2018\/11\/mountaingoldflag.png\")
<\/figure><\/div>\n\n\n\n