The Customer
Inter Pipeline Limited (IPL), a Canadian energy infrastructure company based in Calgary, Alberta, specializing in the transportation, processing, and storage of energy products across Western Canada and Europe.
The Project
SCADA (Supervisory Control and Data Acquisition) Modernization
Overview
IPL’s Operational Technology (OT) team faced significant challenges in processing and delivering SCADA data across departments, often requiring substantial time and resources to fulfill requests. This engagement's aim was to centralize data access, reduce the burden on the OT team, and enable self-service analytics for faster, data-driven decision-making. Improving led the strategic planning, architecture, and implementation of a secure, scalable solution using Microsoft Azure and Power BI.
The Business Challenge
The Improving team encountered numerous challenges with this engagement:
Disparate Azure Tenants: IPL's IT and OT departments operated under separate Azure tenants with no shared administration. IPL’s OT tenant lacked an existing Azure subscription, requiring a complete build-out from scratch to realize the project’s objectives.
Large-Scale Data Replication: The project involved replicating large volumes of historical SCADA data, comprising thousands of tags with millions of associated daily readings. The challenge was to design a scalable solution capable of efficiently processing and storing the continuously growing data set, while being flexible enough to support future integrations from other source systems.
Strict Security Requirements: SCADA data is highly sensitive, requiring IPL to adhere to stringent security protocols. The solution needed to implement a zero-trust architecture, multi-factor authentication (MFA), conditional access, and robust role-based access control (RBAC) to secure the final OT tenant.
Our Solution
Improving adopted the following strategies to address the identified challenges.
Data/AI Strategic Planning: Improving designed a custom Azure architecture based on IPL's requirements and the Microsoft Cloud Adoption Framework, including a data lake following the Medallion architecture model. This approach organized data into bronze, silver, and gold layers to ensure data integrity and quality across ingestion, transformation, and business-readiness stages. Azure Synapse Analytics pipelines and notebooks were implemented to automate data transformations, making incoming SCADA data quickly accessible for business analysis.
Scalable Data Processing: Improving developed a scalable, cloud-based system to manage the large volumes of SCADA data replication. Several layers of SQL Server replication were used to ingest data from on-premises systems into an Azure SQL Server located in the OT tenant. Azure Synapse Analytics was used in conjunction with the Azure SQL Server to incrementally ingest data into partitioned Delta Lake tables to align with industry standards and to maximize performance.
End-to-End Secure Architecture: A secure, zero-trust architecture was built into IPL’s new OT tenant. Key security measures included VNET-to-VNET routing through firewalls, ExpressRoute for secure on-premises data access, and segregated environments for development, testing, and production. Advanced security tools like Microsoft Defender for Cloud and Azure Monitor ensured continuous protection of the system.