Designing a secure, automated Azure foundation with room to grow
Appvia kicked off the engagement by laying the groundwork for a migration plan that was both technically sound and operationally sustainable. First, they conducted a series of collaborative discovery workshops to align on JJ Foodservice’s operating model, business goals, and technical requirements. They then assessed JJ’s existing infrastructure, including the aging on-prem systems and inconsistent Azure environment, and helped the team prioritize workloads based on modernization needs, dependencies, and business impact.
With those insights, Appvia designed and deployed a secure Azure landing zone using Microsoft’s ALZ Terraform modules, enhanced with automation to accelerate deployment and enforce consistency. This solution included guardrails around cost, compliance, and identity, as well as a persona-based access model that mapped real-world responsibilities to environment-specific permissions. It ensured that every workload had the right level of access, from development through production.
To support legacy modernization, Appvia leveraged its Kubernetes expertise to help JJ Foodservice containerize .NET Framework workloads previously confined to VMs. They deployed a Windows-compatible Azure Kubernetes Service (AKS) cluster with Group Managed Service Accounts (gMSA), allowing these applications to run securely within JJ’s modern cloud environment.
All infrastructure was codified in Terraform, enabling JJ Foodservice’s internal teams to manage their cloud platform through repeatable templates and self-service blueprints. The team also worked together to define a baseline application landing zone and automate new subscription provisioning, reducing time to deploy from weeks to minutes.
Throughout the engagement, Appvia used a paired engineering model, co-building alongside JJ Foodservice’s teams to ensure that decisions were clear and outputs were maintainable. By the end of the project, JJ Foodservice had not only migrated their workloads within the projected timeframe; they’d also developed the confidence and capability to operate on their own. And, just in case, Appvia remained available to offer guidance as needed via a limited post-deployment support agreement.