7 projects. A production portfolio, not just notes.
This is a practice-first program. Every project is built live during a session, so you finish with 7 production-style deliverables and an end-to-end capstone you can showcase.
Everything you build
1. Enterprise landing zone
Hub-Spoke architecture with Azure Firewall and Bastion, remote Terraform state and a modular structure. Troubleshooting drill: fix a broken User-Defined Route that is black-holing spoke traffic.
2. Secure data tier
Key Vault and hardened Storage Account, managed identity and least-privilege RBAC. Troubleshooting drill: diagnose a Private DNS resolution failure preventing private-endpoint connectivity.
3. Public web tier
Application Gateway with WAF, VM Scale Set with autoscaling and HTTPS termination. Troubleshooting drill: trace and resolve an unhealthy backend pool behind the Application Gateway.
4. Zero Trust administration
Microsoft Defender for Cloud, Just-In-Time VM access and Azure Monitor. Troubleshooting drill: track down why expected monitoring data is missing from Log Analytics.
5. End-to-end encryption
Customer-Managed Keys, disk encryption and key rotation, end-to-end TLS. Troubleshooting drill: resolve a certificate validation error breaking the end-to-end TLS chain.
6. Governance as code
Azure Policy and initiatives, compliance reporting and mandatory tagging standards. Troubleshooting drill: debug a Terraform apply that is being denied by an Azure Policy assignment.
7. Event-driven layer
Azure Functions with Blob trigger, managed identity integration and Application Insights telemetry. Troubleshooting drill: fix a Functions networking issue blocking the blob-triggered execution.
Capstone Assessment: Enterprise Azure Platform
Independently design and implement a complete enterprise Azure platform for a regulated organisation, applying every concept from the seven days: landing zone, secure data, edge, zero-trust, encryption, governance and event-driven automation.
- Enterprise architecture and capability mapping across the full platform
- Terraform and Ansible automation with reusable modules and roles
- Zero Trust security, encryption and least-privilege RBAC
- Governance, mandatory tagging and cost optimisation as code
- End-to-end monitoring, troubleshooting and continuous validation
- A complete GitHub repository and reusable modules
Ship a documented, tested enterprise Azure platform built entirely as code, and defend your architecture decisions, security posture and governance approach, resembling a real architect assessment.