Cloud Security / Zero Trust Architecture Consultant
Zero Trust Perimeter & DDoS-Resilient Ingress Design
Externally-facing services are high-value targets. Perimeter design has to combine resilience, DDoS mitigation, WAF policy, segmentation, and zero-trust access control from the start, with assurance and penetration-test scope understood before the platform is exposed.
Ingress architecture that can be tested honestly.
Azure Front Door and WAF
Design global front-door, WAF policy, routing, TLS, origin protection, and operational controls for public services.
Segmentation and resilience
Shape Application Gateway, VNet and VLAN segmentation, DR/BC patterns, and production workload resilience across environments.
ITHC scoping support
Work with customers and their testing suppliers to define IT Health Check scope so penetration testing covers the real attack surface.
Anonymised delivery evidence.
On a nationally significant public-sector programme, implemented a global front-door service with WAF policy and an application gateway for externally-facing services, providing resilient ingress with DDoS mitigation and zero-trust access controls. The work included full network segmentation across development, staging, and production cloud environments, plus DR/BC architecture across production workloads.
Best fit.
This service fits organisations exposing citizen-facing or customer-facing services that need to withstand attack, pass assurance review, and enter testing with a properly scoped ITHC. It links closely with Cloud & Infrastructure and Security & Compliance.