The situation
In a regulated, government context, “trust the network” is no longer good enough. Zero trust means every request proves who it is, every time. The challenge was to design that for a complex microservices platform.
What makes this hard
I started with zero context. The design touched multiple Amazon Web Services, Kubernetes and API integrations, and it had to make sense to technical and non-technical stakeholders before anyone would build it.
What I did
- Designed and prototyped a zero-trust architecture, based on business requirements, integration patterns and security principles.
- Closed knowledge gaps fast: sought stakeholder input and checked my understanding through documentation and targeted questions.
- Implemented FIDO authentication as part of the solution.
- Translated complex technical concepts into documentation and visual models that different audiences could follow.
The result
The design was accepted for development.
“His methodical problem-solving approach, ability to navigate complex technical landscapes, and determination stood out from the start.” Aster, my supervisor at Visma Connect