All case studies
Government2021
Zero-Trust Architecture for Citizen Services
Designing a national-scale services platform that met a strict security audit on the first attempt.
2M+
Citizens served
99.95%
Availability
First attempt
Audit pass rate
Challenge
Citizen services lived across 30+ ministry systems with inconsistent identity, weak audit trails, and uneven security posture. A single high-profile incident would have stopped the program.
Architecture
Federated identity with hardware-backed credentials, per-service mTLS, policy-driven authorization at the edge, immutable audit log, and a unified consent ledger. Observability is standardized so any ministry can plug in and inherit the security baseline.
┌──────────┐ ┌──────────────┐ ┌────────────────┐
│ Citizen │────▶│ Edge GW │────▶│ Policy Engine │
└──────────┘ │ + mTLS │ └──────┬─────────┘
└──────┬───────┘ │
│ signed JWT │ allow/deny
▼ ▼
┌──────────────────────────────┐
│ Ministry Service Mesh │
│ (per-service mTLS + OTel) │
└──────────┬───────────────────┘
▼
┌───────────────┐
│ Audit Ledger │
└───────────────┘Implementation
- 01
Threat modelled with STRIDE; mitigations tracked to architecture decisions.
- 02
Defined SLOs and security KPIs adopted by participating ministries.
- 03
Authored architecture document used in subsequent procurement.
Results
2M+
Citizens served
99.95%
Availability
First attempt
Audit pass rate
Stack
PythonPostgreSQLKubernetesIstioOpenTelemetryELK
Have a similar problem?