Security & Identity Architecture
Controls built into the platform rather than added after it.
Book an architecture reviewWhat the work covers
Identity, least privilege, zero-trust networking, secrets and audit designed for regulated workloads and the evidence auditors ask for.
- Identity and access management design
- Workload identity and least privilege
- Zero-trust network controls and segmentation
- Secrets management and rotation
- Audit logging and compliance evidence
What you receive
- 01Identity and access model with role catalogue
- 02Network and secrets controls as code
- 03Audit evidence map against your framework (SOC 2, ISO 27001, local regulator)
- 04Security operations runbook
How to buy this
Typical engagement models
Latest from the blog
Related writing from the blog.
6 Oct 2026 · 7 min read
OpenShift Pod Stuck in Pending: How to Debug Taints, Tolerations, Affinity and Topology Spread
A Pod stays Pending when no node passes every required rule, and often no single rule is wrong. How the scheduler filters nodes, what taints, affinity and topology spread each guarantee, a worked example where correct rules combine badly, and a six-step workflow to find the blocking rule.
6 Oct 2026 · 9 min read
OpenShift Networking Deep Dive: OVN-Kubernetes Architecture and Traffic Flow
Follow one request through an OpenShift cluster: how OVN-Kubernetes turns Kubernetes objects into a logical network, how OVS and Geneve move the packets, where Services, NetworkPolicy, the router and egress fit, and how to trace a failing connection layer by layer.
4 Oct 2026 · 9 min read
Sitecore on Azure PaaS: How We Moved a National Tourism Platform Off VM Scale Sets
How a national tourism platform moved Sitecore, .NET and a React front end from VM Scale Sets to Azure PaaS behind Cloudflare. In one 24-hour window, Cloudflare served 99.2% of 55.8 million requests without reaching the origin.
Next step
Bring me the platform decision you have to get right.
A 30-minute architecture review call. You leave with a written view of the risk and the next step, whether or not we work together.