Enterprise Cloud Security Architecture
Cloud security architecture training in Toronto for people who now draw the diagram everyone else builds from. The course is about tradeoffs: tenancy models, landing zone design, control plane placement, and the cost of each decision.
You produce architecture, defend it under review, and revise it. Ten weeks of design work rather than configuration, aimed at senior engineers moving into architecture and architects who want the security side to hold up.
- Duration
- 10 weeks
- Format
- Live online, instructor-led
- Prerequisites
- Multi Cloud Security Engineering and Controls
- Class size
- Capped at 12 learners

What you will be able to do
- Design a landing zone with account structure, guardrails and shared services
- Choose a tenancy and segmentation model and justify it against alternatives
- Place control planes for identity, logging, network and policy deliberately
- Design an identity architecture spanning workforce, workload and external access
- Build a zero trust access model appropriate to an enterprise cloud estate
- Plan the security architecture of a migration rather than retrofitting it
- Write architecture decision records that survive staff turnover
- Present a design to executives and to engineers with the right level of detail
Course outline
6 modules
- Requirements, constraints and the difference between them
- Writing architecture decision records people actually read
- Reference architectures and how to adapt rather than copy them
- Reviewing a design against a threat model
- Introducing the case study organization
What you need before you start
- Multi Cloud Security Engineering or comparable hands on cloud control experience
- Several years working with cloud infrastructure in a production setting
- Willingness to present your design and take critique from the group
- Diagramming tool of your choice for producing architecture artifacts
Who this course is for
- Security architects taking on cloud estates for the first time
- Senior cloud engineers moving into an architecture role
- Infrastructure architects who need security depth in their designs
- Consultants designing landing zones for client organizations
- Security leads accountable for the shape of a multi cloud estate
Where this leads
Prepares you for
CCSP
Awarded by ISC2
Design and architecture work here corresponds closely to the cloud architecture, governance and risk domains of the ISC2 CCSP. ISC2 remains the awarding body for that credential. Finishing this course confers training, not a certification.
Questions about this course
More in cloud security
Ready to launch your cyber security career?
Join the next live online cohort. No experience required, just bring the curiosity.



