Skill UI

Cloud Architect Blueprint provides guidance for designing resilient AWS, Azure, and GCP topologies, planning secure migrations, tightening zero-trust controls, optimizing costs, and orchestrating disaster recovery across multi-region deployments.

An expert architect specializing in designing, implementing, and managing complex hybrid and multi-cloud environments. Expertise spans major public clouds (AWS, Azure, GCP), private clouds (OpenStack, VMware), and container platforms (Kubernetes). Focus areas include cross-cloud networking, Infrastructure as Code (IaC) using Terraform, workload optimization, zero-trust security implementation, and FinOps cost management.

A comprehensive guide to implementing Mutual TLS (mTLS) for achieving zero-trust, secure service-to-service communication within a service mesh. This skill provides templates and concepts for configuring mTLS using industry standards like Istio, Cert-Manager, and SPIFFE/SPIRE, ensuring robust certificate management and encrypted internal communication.

This comprehensive skill profile models an expert network engineer specializing in modern cloud networking, security architectures, and performance optimization. It covers multi-cloud environments (AWS, Azure, GCP), advanced concepts like Zero Trust, Service Mesh (Istio), and high-availability design. Key capabilities include implementing IaC (Terraform), load balancing, DNS management, and deep network troubleshooting. Ideal for complex DevOps, SRE, or infrastructure design roles.

This skill simulates an expert cybersecurity auditor specializing in DevSecOps methodologies and comprehensive security assurance. It guides users through running detailed security audits, performing threat modeling, and assessing vulnerabilities (e.g., IDOR). Capabilities cover SAST, DAST, cloud security posture, zero-trust architectures, and compliance adherence to major frameworks like GDPR, HIPAA, and PCI-DSS, ensuring security is integrated throughout the entire SDLC.

A comprehensive toolkit for professional security engineers. It covers the entire security lifecycle, including systematic threat modeling using STRIDE, designing secure architectures based on Zero Trust and Defense-in-Depth, conducting detailed vulnerability assessments (SAST/DAST), and implementing secure coding practices. Ideal for security audits, compliance reviews, and building resilient systems.

An expert architect specializing in designing and optimizing service mesh using industry leaders like Istio and Linkerd. This skill provides deep knowledge of cloud-native networking patterns, enabling secure, reliable microservices communication. It covers advanced topics including zero-trust networking, mTLS configuration, sophisticated traffic management (e.g., canary and blue-green deployments), observability integration, and multi-cluster federation.

Automates zero trust configuration support for advanced security operations, offering guidance, code/config generation, and validation whenever zero trust config helper topics arise during penetration testing, compliance, or threat modeling workflows.

Guides growth-stage companies through CISO-level security programs by quantifying risks in dollars, sequencing compliance (SOC 2/ISO 27001/HIPAA/GDPR), architecting zero-trust defenses, leading incident response, and translating budgets for boards or sales conversations.

AWS Verified Access is a Zero Trust Network Access (ZTNA) service that provides secure, VPN-less connectivity to corporate applications hosted in AWS. It enforces granular, conditional access control using the Cedar policy language, verifying both user identity and device security posture in real-time before granting access to specific resources. Ideal for modernizing security architecture and meeting strict compliance requirements.

This guide outlines how to implement Google Cloud Identity-Aware Proxy (IAP) to enforce zero-trust, identity-based access control across various Google Cloud services (App Engine, Cloud Run, GKE, Compute Engine). It details configuring per-request authentication, context-aware policies (like device posture and location), and programmatic access management for highly secure internal applications.

This guide details the process of configuring microsegmentation policies to enforce least-privilege access between workloads. It covers the entire workflow, from application dependency mapping and discovery (Phase 1) to defining label-based, default-deny security zones (Phase 2). It is crucial for preventing lateral movement in highly secure, zero-trust architectures using tools like VMware NSX, Illumio, and Calico.