Network Security
Secure Network Design
A documented target architecture for the merged environment: hardened paths, cloud placement, and compliance-mapped controls within budget.
- Zero Trust
- Azure
- Fortinet
- PCI-DSS
- HIPAA
- Defense-in-Depth
Context
The brief was a merged network for a financial-medical company acquisition. Three regulatory regimes applied at once — PCI-DSS, HIPAA, and GLBA — and the design had to fit a $50K budget rather than a greenfield spend.
Approach
I started with vulnerability assessment of the as-is estate, then replaced end-of-life infrastructure instead of wrapping it. Servers moved to Microsoft Azure. The target state used Zero Trust and defense-in-depth, with Fortinet in the control path, so no single perimeter device was the whole story.
Outcome
The deliverable is a secure merged-network design: assessed gaps, cloud migration path, and overlapping controls mapped to the three frameworks, kept inside the stated budget.
Scope and caveats
- Client and system names are omitted; the write-up covers method and control categories.
- Budget and framework names are part of the academic brief, not a production invoice.