L2–L3 Infrastructure Support to Enhance Security and Availability of Insurtech SaaS

About Our Client

The Client is a US insurtech company specializing in property and casualty claims operations.

Long-Term Technology Partnership to Enhance Insurtech Solution’s Infrastructure

The Client sought a trustworthy and experienced partner to manage the infrastructure of its claim management software product. ScienceSoft had previously completed an insurance SaaS development project for the Client. Satisfied with the project’s success and transparent collaboration, the Client engaged ScienceSoft to provide ongoing infrastructure support for its claim management SaaS.

24/7 Infrastructure Monitoring, Maintenance, and Improvement

ScienceSoft assembled a team of Microsoft engineers, infrastructure engineers, and cloud architects to provide 24/7 L2 support. Our team was responsible for the following tasks:

• Troubleshooting and fixing infrastructure issues.
• Restoring servers, solutions, and systems in case of failures.
• Conducting regular health checks and monitoring of claims management software and its infrastructure.
• Drawing up infrastructure improvement suggestions.

The L2 team escalated more advanced infrastructure tasks to ScienceSoft’s 8/5 L3 support team, which consisted of a senior network engineer and a senior cloud engineer.

To enhance the security of its claim management software, the Client asked ScienceSoft’s engineers to review the configuration of its Azure-based infrastructure. Following the review, the Client received a report with specific recommendations to improve the solution’s security and availability. Subsequently, the Client commissioned ScienceSoft to implement the recommended measures, including:

• The implementation of Azure Firewall with distributed denial of service (DDoS) protection and intrusion detection and prevention system (IDPS).
• The update of an SSL certificate to ensure robust encryption of data in transit.
• Azure Backup configuration to encrypt data at rest.
• The configuration of Advanced Security for Azure DevOps to enable dependency scanning, code analysis, vulnerability detection, and security alerts.
• Azure Site Recovery (ASR) configuration to enable a seamless failover and disaster recovery of virtual machines to another region in the event of an outage.
• The implementation of multi-factor authentication (MFA).

Key Outcomes for the Insurance Software Provider

• Increased stability and availability of the claims management SaaS, thanks to 24/7 maintenance and proactive management of the application’s infrastructure.
• Reduced L2–L3 support costs due to outsourcing software maintenance to a competent and proactive team.
• Enhanced security of the claims management application and infrastructure. ScienceSoft implemented multi-factor authentication, enabled encryption of data at rest and in transit, and configured a secure code analysis tool and a firewall with advanced network security features.
• Improved system availability and reduced risk of data loss and business disruptions thanks to encrypted data backups and automated failover and disaster recovery.

Technologies and Tools

Microsoft Azure, Azure Virtual Machines, Azure Firewall, Azure DNS, Azure Site Recovery, Azure DevOps, Windows OS, Active Directory Domain Services, Remote Desktop Services, Internet Information Services, Microsoft Teams, Jira, Microsoft Authenticator.