A method for anomaly identification and IT resource optimization includes retrieving, by a workload engine executing on a first computing resource, from a database populated by a client agent executing on a second computing resource, a metric associated with a process. The method includes analyzing, by the workload engine, the retrieved metric and the process. The method includes associating, by the workload engine, at least one workload with the process, responsive to the analysis. The method includes analyzing, by an exception engine executing on the first computing resource, the retrieved metric, the process, and the at least one workload; analyzing includes applying at least one workload rule to the at least one workload. The method includes identifying, by the exception engine, an operational anomaly within the process, responsive to the analysis by the exception engine. The method includes providing a recommendation for mitigating the operational anomaly.