500+ Users, Zero Major Downtime: A Payments Technology Leader’s Move to Amazon WorkSpaces
How IQZ replaced a legacy VMware Horizon environment with secure, persona-based cloud desktops built on Terraform.
Project Overview
Industry
Finance
Capability
Modern Workplace
Business Challenge
Analog legacy processes & siloed data systems
CHALLENGE
Legacy VMware Horizon VDI hardware was reaching end of life under strict PCI-DSS requirements, with rigid configurations that could not keep up with departmental needs.
SOLUTION
A Terraform-governed AWS WorkSpaces environment with CIS-hardened images, 21 role-based personas, and automated patching, security, and monitoring.
519
WorkSpaces provisioned
500+
users migrated
21
personas deployed
85
developer WorkSpaces in two days
Client Overview
A leading payments technology company serving businesses across a range of industries. Its teams span operations, client services, finance, data science, engineering, and cloud, each with distinct tools and access needs.
With its VMware Horizon VDI hardware nearing end of life and PCI-DSS audits ahead, the company needed a scalable cloud desktop platform. It engaged IQZ to plan and deliver the migration to AWS WorkSpaces without disrupting the business.
The Challenge
The company’s VMware Horizon VDI environment was approaching hardware end of life. Keeping it running meant high maintenance costs and complex refresh cycles. The business needed a cloud-first desktop platform that could support hundreds of users across very different roles while meeting strict compliance rules.
Hardware End of Life
Aging VDI hosting hardware needed replacing, with audit deadlines adding pressure to the timeline.
High Maintenance Overhead
The legacy platform required ongoing upkeep and complex hardware refresh cycles that drained IT time.
Rigid User Configurations
Desktop setups could not adapt easily to the needs of different departments and technical teams.
PCI-DSS Compliance
Strict audit mandates required strong data controls, multi-factor authentication, and centralized monitoring.
Scale Across Specialized Roles
The new platform had to support hundreds of concurrent users in operations, finance, engineering, and data roles.
Our Solution
IQZ designed and delivered a cloud-native desktop environment on AWS WorkSpaces. Every part of the environment is defined in Terraform, so desktops, networks, and security settings are built the same way every time. Role-based personas give each team the tools it needs without bloating the core desktop image.
Technology Architecture
↓Data Flows Bottom→Up↑
Explore Layers
Hover over any layer to see how each stage processes and transforms claims data in real-time.
Smooth Handover to the IQZ Run Team
After migration, IQZ handed the new environment to its Run Team for ongoing 24/5 support, giving the client continuity from build to daily operations.
Terraform Infrastructure as Code
Modular Terraform repositories automate the full WorkSpace lifecycle, including subnets, AD Connectors, and security groups, cutting onboarding from days to hours.
Multi-Persona Architecture
CIS-hardened Windows 11 and Ubuntu golden images give every user a secure baseline, with 21 personas adding role-specific apps and access.
Deployment and Governance Strategy
Terraform modules governing the full WorkSpace lifecycle
21 role-based personas layered on lean golden images
RADIUS MFA and AWS Secrets Manager securing credentials
SSM Patch Manager and State Manager for continuous compliance
CloudWatch logging and real-time monitoring across all desktops
Results and Operational Impact
From aging hardware to cloud desktops, with every user moved and nothing lost along the way.
Migration at Scale
500 +Users
More than 500 users moved from legacy VMware Horizon VDI to AWS WorkSpaces with zero major downtime, more than double the original target of 200.
Users migrated
lignment with PCI-DSS compliance requirements
0
Major Downtime Incidents
Rapid Developer Provisioning
85 developer WorkSpaces provisioned in just two days during the peak migration phase.
Scalable Foundation
Modular Terraform code and 21 personas let new users and teams onboard quickly without adding new desktop images.
Onboarding in Hours
Automated Infrastructure as Code workflows cut workstation onboarding from days to hours.
Target More Than Doubled
500+ users migrated against an initial target of 200+, with minimal user escalation.
Seamless Run Team Handover
he new environment moved smoothly to the IQZ Run Team for ongoing 24/5 support.
Legacy Hardware Retired
The company is positioned to decommission legacy VDI hardware ahead of critical audit deadlines.
Technology Excellence
Why AWS WorkSpaces and Infrastructure as Code
Terraform-governed WorkSpace lifecycle
21 role-based user personas
CIS-hardened Windows 11 and Ubuntu images
PCI-DSS aligned security controls
Automated patching and software delivery
Integration Architecture
AWS WorkSpaces
Terraform (Infrastructure as Code)
AWS Directory Service AD Connector
RADIUS multi-factor authentication
AWS Secrets Manager
AWS Systems Manager Patch Manager and State Manager
AWS CloudWatch
Industry Impact
This project shows that a regulated company can leave legacy VDI behind on its own timeline, with compliance controls intact. It also shows how code-based governance turns desktop management into a repeatable process.
500+ Users. Zero Major Downtime.
Large VDI migrations can run without stopping the business when planning and automation come first.
Compliance Built In, Not Bolted On
MFA, clipboard restrictions, and managed secrets were part of the design from the start, aligned to PCI-DSS.
One Image, 21 Personas
Role-based layers replace one-size-fits-all desktops without multiplying the images IT has to maintain. Onboarding in Hours
Onboarding in Hours
Infrastructure as Code turns new workstation setup from a multi-day task into an automated workflow.
Looking Forward
Complete decommissioning of legacy VDI ESX hardware ahead of audit deadlines
Ongoing 24/5 support from the IQZ Run Team
Faster onboarding for new hires and new teams through existing personas
Continuous patch compliance across all WorkSpaces
A repeatable Terraform foundation for future cloud workloads
Partnering with IQZ Systems
This case study demonstrates IQZ Systems’ expertise in delivering secure, automated cloud desktop migrations that keep regulated businesses running without disruption.
Automation First
Every desktop, network, and security control is defined in code, so environments are consistent and auditable.
Cloud Migration Expertise
IQZ moved 500+ users off legacy VDI with zero major downtime and minimal disruption to daily work.
Support After Go-Live
The IQZ Run Team took over operations after migration, providing 24/5 support for the new environment
Ready to move your desktops to the cloud?
Talk to IQZ about a secure, automated path off legacy VDI.