Securing Microservices with Zero Trust

Speaker: William Brander

Abstract:

This hands-on workshop focuses on applying Zero-Trust principles to microservices. You’ll learn how to design systems where every service, request, and interaction must be authenticated, authorized, and auditable.

Through real-world examples and practical exercises, you’ll gain the tools to recognize security blind spots in distributed systems and apply patterns that harden your architecture without sacrificing developer productivity.

## What you’ll learn:

– Why traditional perimeter-based security fails in microservices
– Core principles of Zero Trust
– Designing clear service boundaries for least-privilege communication
– Securing message brokers and asynchronous communication patterns
– Identity propagation, impersonation protection, and access control
– Techniques for dealing with token expiration
– Partial security for message personalization
– Implementing certificate rotation
– Logging, audit trails, and anomaly detection in a Zero-Trust environment

## Who this workshop is for:

Software engineers, architects, DevOps, and platform teams building or maintaining microservices-based systems.

This workshop is ideal for those seeking to implement modern security models like Zero Trust while maintaining flexibility and performance across distributed architectures.

## What should you bring?

This is a Bring Your Own Device (BYOD) workshop. Attendees must bring their own device with the latest .NET SDK installed. You’re free to use any IDE of your choice.