Cloudflare for Teams: Our Story: Episode 2

Welcome to a new series, Cloudflare for Teams, Our Story, where we discuss the journey that we're taking as our own organization in implementing Cloudflare for Teams. I'm delighted to have Juan Miguel Rodriguez-Estevez here, who is our CIO. Juan, would you like to introduce yourself quickly and tell us what the CIO in Cloudflare does? Yeah, absolutely. So, thank you for having me, David. So, CIO can mean different things in different companies. So, in Cloudflare, I am responsible for internal infrastructure. All of the employees at Cloudflare are my customers. My job is to make them more productive, more efficient. I also run internal systems or backbone applications, and then I set up teams, a set of engineering teams around billing, provisioning, and other things. So, I collaborate a lot with the engineering teams internally, and I also, which is one of the reasons why we're talking, is I try to be Cloudflare's first customer. Yes, you do. You do a great job of it. That's right. So, we use a term internally in Cloudflare called dogfooding. I had a Cloudflare TV session about that earlier today, and so that's also one of the things that I'd like to say about my job and the role of the CIO is to be Cloudflare's first customer. Great, what an interesting job, and on the dogfooding side, we always try to not surprise you, Juan, when we are rolling out our products for you and your team to help us beta. So, thank you. Thank you for that. So, before I get into our first question, I want to just tell everybody again quickly what Cloudflare for Teams is, and first of all, I'm David Harnett. I joined Cloudflare six months ago when my company, S2 Systems, I was one of 10 employees, was purchased. So, delighted to be part of the Cloudflare for Teams organization as Director of Product Management there. So, what is Cloudflare for Teams? Well, Cloudflare for Teams provides secure access to any application and the Internet from any device, anywhere. We have two main products, Cloudflare Access, which is a Zero Trust platform, and we have Cloudflare Gateway, which is a secure web gateway. So, that's what Cloudflare for Teams is. So, Juan, before we get into the story of the company, can you tell us a little bit about your own story about getting to Cloudflare? How did you get here? Yeah, so, well, my background, so I'm originally from Spain. I've always worked in the software industry. So, I'm a software, I've done different things inside of software companies, right? I've been in engineering, I've been in product management, I run technical services, I've done a lot of deployments of things in customers, and I've also ended up, for different reasons, running IT organizations inside of software technology companies. I always say that, you know, running IT in technology companies and in software companies, which is what I have experience on, is not the same thing as running IT in a bank or IT in a manufacturing company or things like that. You know, there's all these, you know, software engineers that know a lot about technology. And in many cases, you know, they have more expertise or the interest in technology at a faster pace that the IT organization. So, it's a very collaborative model. It's supposed to be a very collaborative model on how you, you know. So, I, in my previous company, I was, I did different things. I started USAGE, which is a very large international software company. I started there as CIO for North America, and then I moved back to Europe for a while to also run IT for Europe. And then in around 2014, sorry, in 2015, I got asked to create a new function inside of the company that had to do with basically running all our cloud services, right, as we were accelerating from a traditional software provider to a cloud provider. And one of the things that we started using at that point was Cloudflare, right? So, that's why my exposure started. So, it was around 2013 to 2014. And SAGE was a very distributed, decentralized organization. So, every country almost operated in many cases very independently. We had services in many places. And one of the things that I was trying to solve for was how to get basically more consolidated management and visibility for things like the web application firewall, or infrastructure like that. And at the time, Cloudflare was relatively new, you know, still at the game, right? I mean, you know, Cloudflare started around 2010 or something like that. So, it was a little bit like bleeding edge. But one of the things that I've always liked, and I think it's part of also working on technology companies is that, you know, you are more willing to sort of bet and risk, you know, more around things like that, where like you're betting on companies or technologies that may not be entirely baked off. But you can see that, you know, it's something that basically is going to drive potentially a paradigm shift. So, we started using Cloudflare around that time. And then, you know, around the middle of 2019, I can't remember exactly when it was, maybe September, October, something like that. This opportunity to basically, you know, for a Cloudflare CIO came around, and I got connected with our CFO and our head recruitment, and I met Matthew and Michelle and, you know, just to see if it was something that it would be a fit. And I had the pleasure to, you know, be offered the job and I joined in January of this year. So, I've been here, you know, around six, seven months. It's been an interesting six to seven months with the whole thing with the pandemic and all that stuff. I don't know if I was envisioning changing jobs after 10 years, you know, with this kind of onboarding. But, you know, it is what it is. And I think we solved very interesting problems the past few months, you know, with our internal employees and everything. So, yeah, so that's a little bit of my story and how did I end up here talking with you? Absolutely. Well, what a great story. And I know, like you said, you're originally from Spain. So, I'm originally from Ireland. So, I would know Spain from beating you in football or soccer a few times, of course. You sure? Yes, of course, I'm sure. What do you mean? Of course, I'm sure. Okay, well, that's great. It's great to hear your story, which, you know, like you said, started really on the bleeding edge of Cloudflare. And you and I know a person who we spoke about before, Amit Mittal, who was involved with your previous employer. Yeah, so that's good to have that connection there too. What a great company and delighted that we were able to steal you away to the CIO job over here in Cloudflare. Okay, great. So, next question is about user security and the types of security and performance that we can provide with Cloudflare for Teams. What are the problems related to that area that you are dealing with in Cloudflare, a growing organization, like you said, which is very technology focused, on the bleeding edge. So, what are the types of issues and problems that you're dealing with before we go into the solutions? Yeah, so, I mean, many, you know, as I was mentioning, many of our, you know, a large part of, we, you know, we are a very engineering oriented company, right? What does that mean, or engineering led? Basically, our internal engineering teams, you know, whether it's like, you know, our incubation organizations or our like product engineering organizations, you know, are what I will consider, you know, some of the first class citizens, you know, from a customer perspective in Cloudflare. And we live, you know, as an engineering led organization, basically to ship product, you know, out the door, right? That culture of innovation, culture of basically delivering at a speed with quality capabilities, and things like that is very much one of the things that is in Cloudflare. So, at the same time, because of the type of, you know, products and services that we provide, we, security is incredibly important for us. You know, we, a lot of, a significant amount of traffic for the Internet flows through our network. You know, we have visibility, you know, without with many sensitive things, there's many companies out there that rely on us basically to provide security services from them. So, normally, you know, you have that conundrum of, you know, speed, innovation, moving fast, providing basically as much frictionless access to tools, you know, things like our wiki, JIRA, our software repositories, build repositories. We from the other side, you know, having to basically maintain an incredible amount of security and, you know, posture from an identity management, log visibility, and things like that, you know, to all those internal environments. And traditionally, I mean, you know, in the past, I mean, something gives there, and normally, you know, in typical IT organizations, because from compliance reasons, normally the security and the friction part tends to win. So, in what we want is like, how can we basically have a little bit of our cake and eat it too, right? How can we provide as little friction as possible for all these teams that need access to these tools with performance, reliability, without having to depend on, if you want to call it clunky VPNs, you know, that may work okay from a computer, but you know, from a cell phone or something that is totally unacceptable, you know, the experience for the most part. But that is, you know, if you think about it, you know, in a nutshell, the problem, right, is that a sort of conflict between experience, low friction, speed, and all that stuff. And then on the other side, this incredible amount of requirements, you know, from security, compliance, and everything, and trying to basically merge those two, and as I said, try to have our cake and eat it too. You're on mute, David, I think. I cannot hear you. No, can you hear me? Do you want me to talk about some of the other things that we had in the agenda? Why don't you try to solve it? Yeah. So, while David tries to solve his microphone issues, so let me – nope, still cannot hear you. I hope it's not mine, that, you know, it's not my speakers. My speakers are fine. So, one of the things that, you know, that David and I were going to talk about is how did we try to solve for, you know, this situation, this dichotomy of low friction, speed, performance, and things like that, and then, you know, all these requirements around security and compliance and everything. So, Cloudflare tends to operate in what we call, you know, a Zero Trust environment. Effectively, there's no, if you want to call it, you know, internal network and external network, right? I mean, access to – if you are in a Cloudflare office, you know, it's almost like if you were somewhere else from an access point of view, you know. I'm not going to say almost like if you were in a Starbucks, but, you know, in a little bit of a glorified Starbucks, right? I mean, if you wanted to access some of our stuff in our production service and you were in an office, you will have to still VPN, right? So, and that's what it means Zero Trust. We don't really have a trusted network. So, what we try to do, basically, is we came up with this solution to the problem of coming up with this product, which is access, right? And access, what we've done over time is it started with people having to access, basically, our development tools environments. We host our own development environments, whether it's like JIRA or Confluence or our – our Wiki and also our Git servers. So, we try to build, basically, this – what Sam, which is one of our product managers, called this bouncer that basically, you know, as you try to connect with one of these – one of these environments, it will basically be able to check whether you are who you are and then, basically, proxy you to our – you know, to that application that you're trying to connect to. One of the things that, you know, that basically we had with the VPN before is, you know, VPN concentrators live in defined environments, right? So, we have, like, something that is in San Francisco. We have, like, some stuff, like, also in Europe and on the West Coast, but that authentication, that connectivity layer is not close to the user. I don't know if you leave – if you will disconnect this because you are the host, David, just so you know. So, what we did is, basically, build a solution that will run on the edge of the confluence. So, it's like, many of you know, right now we have, like, about 200 – we have, like, over 200 locations for in 100 countries, and the authentication happens, basically, at the edge, very close to the user. Hi, Sam. Hey, Juan. I've been tagged in to ask some questions while David fixes his mic. Yes. I'm trying to interview myself. No, I was enjoying it, but I do – one thing in I am really curious about is, kind of, when you've been thinking about all of the users who are now – all the conflict team members who started remote, and I'm working here – this background is imaginary. I'm here in our Lisbon office. What have been some of the challenges you've seen helping team members get online and securely connect, and how we try to address it as an organization, now that we're all distributed? Yeah. So, one of the things that, you know, that I've hosted a couple of seminars and just roundtables with other CIOs, I mean, in the current environment that we have with the pandemic, I mean, the biggest issue that, you know, a lot of organizations are having is the fact that, suddenly, all their workforce is remote, right? So, you know, outside of office walls, and when you think about our environment, you know, in reality, the way that we have, you know, to begin with, the Zero Trust Network that we have, you know, from an architectural perspective, when you're in a California office, you already are remote, right? So, we don't have, like, an intranet or anything like that. So, and we leverage, you know, access, as I said, you know, versus a VPN to, you know, provide that authentication and access to service and things like that. So, as we had to go, basically, remote to, you know, to onboard our employees remotely, to hire, like, in countries that were, you know, we didn't have before, or even have, like, people that, you know, that that are displaced, you know, and couldn't go back to the local offices, it has played a lot to our advantage, right? Because, you know, with something like access, where authentication and that entry point is running, basically, close to all those, you know, locations that they might have, they, you know, these employees don't really have to deal with, from a performance and accessibility perspective, having to come all the way to a VPN concentrator for authentication, right? We don't have to deal with installing VPN on their clients and things like that. It's something that, you know, we have a hard key, we have, like, username and password, things like that, and then, you know, they just basically are able to connect where they are, they connect to the closest Cloudflare access pop that may serve them, and they, basically, they have access to the tooling that we have. I know, for me, it's felt just like working in the office. I think we might have David back with audio on phone. David, are you there? I think you have to take your phone off mute. Live TV. Okay, can you hear me now? We can. Isn't that amazing? Juan, great to see you again. Thanks for answering my question. Thanks, Sam, for jumping in to save the day. So, I didn't have to interview myself. Yes, I know. Thank you, Sam. Thank you very much, Sam. So, Juan, I'm thinking you can hear me now. Yes, sir, I can. Okay, that's great. That's excellent. And I was listening in on your, you talking about Zero Trust and I thought that was all great. So, thank you for continuing going. My computer just stopped working, and I had a lot of really nice support people trying to help get it to work in the background, but it just didn't work. Yeah, it wasn't cooperating today. We'll have to call IT on that. Yes, we will. Who is the CIO of this company? No, he must not be doing a great job today. I know, exactly. It's like a student sessions. Exactly. So, where did we get to on our journey with Teams, Juan? And then I have a few more questions that I'd like to ask you about where do we still need to go, but where did we get to on our journey? Yeah, so right now, we have access deployed for the vast majority of applications that we have internally. And in fact, we don't install our VPN client or anything like that in our computers by default. It's more of an exception basis. Most web applications that we have internally and services that people use on a day-to-day basis, they basically don't use VPN. They just leverage access to connect to those. We still have a few use cases that we're working with your team and the access engineering team to basically cover from a more hardcore engineering perspective. So, we have certain things that we've been working on around access to Kubernetes control. It's something very specific that probably you're not going to run into many customers, but it's an important use case for us that we're in some cases, we still cannot leverage something like access. And then, all the things that are more specific are around accessing some of our calls directly. But I believe that probably over the next three months, probably like 80% of basically Cloudera will not have a need to use the VPN anymore. And the idea is that we try to basically maybe leave it for something that is very specific or potentially break glass and just kill it completely on a day -to-day basis. That's great. That's great. I'm still thinking it's hilarious that Sam, who's in Lisbon, Portugal, hops on to save the day. So, that's excellent. Thank you for doing that, Sam. That was a good idea to just connect in. Yes. Yeah. Eight hours ahead, middle of the night, but he still jumps in. So, Juan, let's talk a little bit about... And actually, one thing I wanted to say when I was on mute there was you remind us as first customer, but also as an advisor for us in the Teams organization about customer experience. So, a lot of people, when they look at Cloudflare for Teams, whether it's access or whether it's gateway, they think security. And you always think security, speed of connection, what the people think about using the experience, as well as security. And it seems to be a theme that you carry through in your product jobs and your IT job. Can you tell us a little bit more about that- Yeah. ... for the future? A hundred percent. So, my view as having worked as an IT consumer and also as an IT provider is, if you make the experience poor for people, and this is even more blatant on technology organizations, people will not use the services that you're providing. Yeah. And I always say that for the most part, I mean, my default approach when I see a team, there's this term that I don't like called shadow IT. Normally, what I try to think is when I see a team basically that is using something, it's because normally we're not providing something that they need. I mean, people don't go and think, it's like, hey, I'm going to start my IT department tomorrow, right? It's normally... So, one of the things that also can happen is, to your point, when you're providing a really poor experience, right? People today use home, their devices, and things like that to have an incredible experience from access to applications. And the expectation in many cases inside of the corporate environment is that at least needs to be as good as that. So, one of the things that I love about access is that every single time that we put a service behind access, the experience is incredibly improved. I mean, immediately the feedback that we get internally from employees is like, wow, and there's no going back. Once you go on there and just want to use to the level of experience. And I think that from one of the things that I always try to advise all the CIOs, it's very important that you never lose sight of basically that experience that you are providing. And again, the thing with access is that you can have your cake around security, compliance, validation, and all those things, but at the same time, also being able to provide an incredible experience from a performance, usability, reliability, and things like that. So, it clicks a lot of boxes for me. That's great. That's great. Thank you for that. Okay. So, we've got about three minutes left and we've spoken about this before offline, Juan, but your vision for the future as the CIO of Cloudflare and how Teams, as it evolves, and you have the inside scoop on where we're going because we're always, like I said earlier, trying not to surprise you and get your input on all our new products as first customer, but your vision for the future and how Teams fits in. Yeah. So, my partner in crime, which is like Joe Sullivan, our CISO and myself, we're always thinking about what is the next thing that we need to do basically to improve our posture and continue leveraging as much access from a centralized management and logging and visibility. So, things that we want to continue to do is leverage more hard key access everywhere for internal applications and services and things like that. So, obviously, we're working with your team on things like that. And then, also, we want to, the same way that we try to build a lot of, as I said, from a centralized perspective, a lot of that identity perspective inside of access, one of the problems that we're trying to solve also as well is role-based access controls. And so, one of the things that we're working on is see how we can leverage also access basically from a centralized role-based perspective, your base access control engine, where we can define rules in there, groups, all those things, and leverage it across a set of internal applications or external applications. So, that's one of the things that we're very excited about working with your team, and we're looking forward to building all those capabilities together. That's great. Well, Juan, thank you very much for being the star of episode two of Cloud Therapy Teams, our story. Sorry to everybody for the little snafu we had, but looking forward to our journey ahead. And good luck to you for the rest of your day. I know that you did another Cloudflare TV episode earlier, and you also hosted our weekly beer meeting. So, you've had a lot of air time today, but thank you very much to everybody, and thank you, Juan. Thank you, David. Thank you, everyone, for watching. Bye.