This advanced-level course focuses on securing the underlying systems that power the modern enterprise. You'll learn to architect micro-segmented network zones to prevent lateral movement and contain potential breaches. You'll implement host hardening baselines at scale and design secure, scalable foundations for both on-premise fabrics and multi-cloud landing zones, using policy-as-code principles to ensure consistency and automation. You'll also assess GenAI infrastructure risks and design risk-informed architectural safeguards that extend existing enterprise security controls and governance frameworks.

This course is for security professionals with familiarity with core networking protocols, foundational cloud architecture principles, and basic experience with infrastructure automation or scripting. By the end of this course, you will be able to architect micro-segmented network zones using east-west firewall policies and TLS encryption to isolate container and Kubernetes workloads; implement host hardening baselines via configuration management to maintain compliance across on-prem hypervisors and storage fabrics; develop cloud landing zones with policy-as-code to enforce least-privilege, encryption, and logging defaults across multi-cloud environments; and assess GenAI infrastructure risks to design architectural safeguards that extend existing enterprise security controls. This course works with tools like Microsoft Defender for Cloud and Azure Firewall. Some Microsoft Defender for Cloud and Azure Firewall capabilities involve usage-based or post-trial costs.