Security System Designs
Worked Security system design walkthroughs: the requirements, the trade-offs, real numbers and the component choices behind each design.
Audit Logging and Compliance: Tamper-Evident Trails for SOC 2 and GDPR
Design a tamper-evident audit logging pipeline that satisfies SOC 2 Type II and GDPR requirements, covering ingestion, cryptographic chaining, storage, and query at scale.
Security · intermediate · 12 min read
Authentication and Authorisation System: Sessions, JWT, OAuth, and SSO
A deep-dive into designing a production-grade authn/authz system covering session management, JWT, OAuth 2.0, and SSO, with real trade-offs and scaling strategies.
Security · intermediate · 12 min read
Certificate Management, PKI and Automated TLS Rotation
End-to-end design of a PKI and automated TLS certificate lifecycle system: issuance, storage, rotation, and revocation at scale with zero-downtime delivery.
Security · intermediate · 12 min read
Cloud IAM Design: Roles, Least Privilege, Federation and Privilege Escalation Paths
A deep-dive into designing IAM systems for cloud environments covering role hierarchies, least-privilege enforcement, identity federation, and detecting privilege escalation paths.
Security · intermediate · 12 min read
Container and Kubernetes Security: Image Scanning, Admission Control and Runtime Defence
A deep-dive into securing containerised workloads end-to-end: from build-time image scanning through policy-based admission control to kernel-level runtime defence.
Security · advanced · 12 min read
DDoS Protection and Web Application Firewalls at the Edge
How to design a multi-layer edge security system combining DDoS mitigation and WAF inspection to protect web applications at scale with sub-10ms latency overhead.
Security · intermediate · 12 min read
Security Fundamentals for System Design: Encryption, Input Sanitisation, and Least Privilege
A practical reference covering the three pillars of secure system design—encryption in transit and at rest, input sanitisation, and least-privilege access—with real component choices and trade-offs.
Security · beginner · 12 min read
Software Supply Chain Security: SBOM, Signing, Provenance and SLSA
End-to-end design for securing the software supply chain using SBOMs, artifact signing, build provenance, and SLSA frameworks — from commit to production deployment.
Security · advanced · 12 min read
Zero-Trust Network Architecture: Identity-Aware Proxies and Microsegmentation
A deep dive into zero-trust principles, identity-aware proxies, and microsegmentation—covering real components, data models, failure modes, and trade-offs for production deployments.
Security · advanced · 12 min read