Skill UI

Guides implementing secure JWT signing and verification with HS256, RS256, ES256, and EdDSA, covering claims validation, expiration control, key rotation, and protections against common attacks for authentication layers.

Guides OT teams through designing and deploying Purdue-based network segmentation, covering VLANs, OT-aware firewalls, DMZs, and migration plans so critical infrastructure stays isolated yet operationally connected.

Guides administrators through designing and implementing Privileged Access Workstations (PAWs) with hardened devices, just-in-time access, Intune/GPO compliance, and CyberArk or BeyondTrust integration for secure sensitive operations.

Guides teams through tightening Kubernetes RBAC by removing excess ClusterRoleBindings, favoring namespace-scoped permissions, assigning dedicated service accounts, blocking elevated verbs, and integrating OIDC to enforce least privilege and auditability.

Implements RSA key pair lifecycle tasks—generation, serialization (PEM/DER/PKCS#8), passphrase encryption, rotation, fingerprinting, and RSA-PSS signing—so cryptographic teams can enforce NIST SP 800-57 controls and secure deployments.

Guide for integrating Hardware Security Modules via PKCS#11—covering slot/token discovery, key creation, signing, verification, and compliance reporting with python-pkcs11, AWS CloudHSM, and YubiHSM2 in security assessments or audits.

Guides teams through designing, implementing, and evidencing SOC 2 Type II controls aligned with the AICPA Trust Services Criteria, covering scoping, control mapping, evidence collection, remediation, and audit collaboration for a six- to twelve-month examination.

Defines workflows for scanning container registry images via Trivy and Grype, generating SBOMs, signing artifacts with Cosign/Sigstore, and configuring registry policies plus CI/CD gates to block unscanned or unsigned images.

This guide details the comprehensive process of securing a container registry using Harbor. Learn how to implement advanced security features such as integrated vulnerability scanning (Trivy), image signing (Cosign/Notary), Role-Based Access Control (RBAC), and content trust policies. The workflow covers deployment, policy enforcement, and integrating external authentication like OIDC, ensuring compliant and secure image provenance for Kubernetes environments.

A comprehensive guide and set of scripts to bootstrap, build, package, sign, and notarize SwiftPM-based macOS applications without requiring Xcode projects. It provides a complete end-to-end workflow for managing app releases, including generating AppCasts and handling complex code signing and notarization steps.

A comprehensive guide to designing scalable, cost-effective, and compliant architectures on Microsoft Azure. This skill covers the entire lifecycle, from gathering detailed business requirements (SLA, RPO/RTO) and selecting appropriate service patterns (AKS, Serverless, Data Factory), to generating Infrastructure as Code (IaC) using Bicep. It also includes steps for cost optimization, reserved instance planning, and setting up robust CI/CD pipelines via Azure DevOps or GitHub Actions.

Guides developers through designing SaaS multi-tenant stacks: tenant models, RLS policies, tenant-aware middleware, ORM/migration hygiene, and admin bypass flows in PostgreSQL and TypeScript.