What you'll learn:
- Turn business needs into measurable security requirements, architecture decisions, acceptance criteria, and evidence.
- Apply threat modeling, abuse cases, attack-path analysis, STRIDE, PASTA, and MITRE ATT&CK to real architecture decisions.
- Design practical Zero Trust architectures using identity, device, context, policy enforcement, telemetry, and revocation.
- Architect enterprise identity for employees, partners, customers, workloads, automation, federation, and privileged access.
- Design secure hybrid connectivity, segmentation, cloud edge controls, landing zones, guardrails, and cloud-native workloads.
- Secure applications, APIs, DevSecOps pipelines, Infrastructure as Code, software dependencies, and release processes.
- Engineer data protection and privacy across collection, use, sharing, encryption, retention, deletion, and recovery.
- Secure generative AI and agentic applications against prompt injection, unsafe tool use, excessive agency, and data exposure.
- Apply risk-based exposure management, detection engineering, threat hunting, incident readiness, forensics, and resilience.
- Evaluate compliance, OT and IoT security, third-party risk, and integrated architectures using evidence and residual-risk decisions.
Modern security architecture becomes difficult when identity, cloud, applications, data, software delivery, AI, suppliers, and operations all intersect within the same business service.
Cybersecurity Solution Architecture 201: Applied Cloud, Identity, Software, Data, and AI Design moves beyond foundational concepts and into practical, integrated architecture work.
You will learn how to turn broad security objectives into measurable requirements, architecture decisions, implementation controls, transition plans, acceptance tests, and operating evidence.
The course focuses on the real challenge facing cybersecurity architects: designing security across connected systems where individually strong controls can still fail when trust, ownership, data, or responsibility changes between teams and technologies.
You will explore applied architecture across:
• Security requirements and architecture decisions
• Threat modeling, abuse cases, and attack paths
• Zero Trust architecture and policy enforcement
• Enterprise identity and non-human identity
• Secure access, segmentation, and cloud edge architecture
• Cloud landing zones and hybrid security guardrails
• Containers, Kubernetes, serverless, and workload identity
• Secure applications and APIs
• DevSecOps, Infrastructure as Code, and software supply chains
• Data protection and privacy engineering
• Generative AI and agentic application security
• Risk-based exposure management and security validation
• Detection engineering, threat intelligence, and threat hunting
• Incident readiness, forensics, recovery, and resilience
• Continuous compliance, controls, and evidence
• OT, IoT, and cyber-physical architecture
• Third-party architecture and supplier risk
Throughout the course, you will continue working with the HarborPoint enterprise case study and follow architecture decisions across complete transactions, trust boundaries, platforms, operating teams, and suppliers.
You will learn to build context and data-flow models, write measurable requirements, analyze credible threats, compare design options, document trade-offs, assign control ownership, and define the evidence needed to demonstrate that a design works in practice.
By the end of the course, you will have a repeatable method for developing architecture that engineers can build, operators can support, security teams can validate, and risk owners can evaluate.
This course is ideal for cybersecurity professionals, security engineers, cloud and application security practitioners, consultants, and architects who already understand security fundamentals and want to develop stronger practical architecture skills.
Cybersecurity Solution Architecture 201 builds on the foundations established in Course 101 and prepares you for enterprise-scale architecture, portfolio governance, investment, and leadership in Course 301.
