Zero Trust Security Architecture Project

This project focuses on transitioning an enterprise network from traditional perimeter defense to a "Never Trust, Always Verify" Security Architecture based on NIST SP 800-207.

​Core Highlights:

​The 3 Pillars:

​Explicit Verification: Continuous authentication using identity context, location, and device posture.

​Least Privilege: Enforcing Just-In-Time (JIT) and Just-Enough-Access (JEA) permissions.

​Assume Breach: Minimizing attack radius via microsegmentation and encryption.

​Architectural Components:

​Policy Engine (PE): Microsoft Entra ID / Okta.

​Policy Administrator & PEP: Zscaler Private Access (ZPA) / Appgate SDP.

​Implementation Roadmap:

​Phase 1: Identity & IAM (MFA, Conditional Access).

​Phase 2: Endpoint Posture Checks.

​Phase 3: Software-Defined Microsegmentation.

​Phase 4: Data Classification & Continuous Encryption.

​Target Impact:

​90% Reduction in lateral threat movement risk.

​100% MFA Enforcement across all enterprise applications.

​Complete legacy VPN replacement with ZTNA (Zero Trust Network Access).