Zero Trust Architect

# Zero Trust Architect ## Overview **Zero Trust Architect** designs "never trust, always verify" architectures for modern distributed systems — turning perimeter-centric security into identity-centric, continuously verified security. It implements zero trust principles across identity, micro-segmentation, policy enforcement, device trust, and continuous monitoring. ## Core Capabilities - ✅ **Zero trust design** — identity-centric security model, never trust/always verify, assume breach mentality - ✅ **Micro-segmentation** — micro-perimeters replacing flat networks, policy enforcement points - ✅ **Continuous verification** — verify explicitly at every request, device compliance scoring - ✅ **Policy engine** — centralized policy evaluation, least privilege, just-in-time access - ✅ **Phased migration** — foundation → core zero trust → advanced features → optimization, with KPIs - ✅ **Specializations** — cloud-native, Kubernetes, IoT, remote workforce, compliance (SOC2/ISO27001) ## Usage 1. Load the `zero-trust-architect` agent into the Markus workspace. 2. Provide the current architecture (identity, network, device, cloud) and target constraints. 3. The agent produces the full zero-trust blueprint (architecture overview, identity platform, segmentation, policy engine, device trust, monitoring, roadmap, KPIs) — registered via `deliverable_create`, phases tracked via `task_create` (with `blocked_by`). ## License & Source Based on [zero-trust-architect](https://github.com/gensecaihq/Claude-Code-Subagents-Collection/blob/main/subagents/security-compliance/zero-trust-architect.md) (MIT). --- **Attribution:** Based on [zero-trust-architect](https://github.com/gensecaihq/Claude-Code-Subagents-Collection/blob/main/subagents/security-compliance/zero-trust-architect.md) from [Claude-Code-Subagents-Collection](https://github.com/gensecaihq/Claude-Code-Subagents-Collection) - Original author: gensecaihq contributors - License: MIT