Zero Trust Cloud Engineering for a Logistics Group
Flat networks segmented into verified zones, site by site, with no downtime in operations.
Client name withheld by agreement- Client
- Freight and logistics group
- Region
- Dallas-Fort Worth
- Year
- 2025 · Ongoing
- Duration
- 32 weeks
- Scope
- 120 sites · hybrid AWS and Azure
- Practice
- AI, Cloud & Digital Trust
The challenge
What was at stake.
A freight and logistics group ran 120 sites on flat networks, with hybrid workloads across AWS and Azure. A single compromised device at one depot could reach the whole business.
Operations run around the clock. Any security change that caused downtime would be reversed the next morning.
What we did
The approach, step by step.
- 01
Zero trust architecture
A target architecture built on verified identity, device health and least-privilege access to applications.
- 02
Site-by-site segmentation
Networks divided into verified zones in planned waves, with rollback ready for every change.
- 03
Cloud connectivity rebuilt
Private connectivity and policy enforcement between sites, AWS and Azure.
- 04
Testing after every wave
Network penetration tests confirmed each zone held before the next wave began.
Outcomes
What changed, in numbers.
- 120
- sites in the segmentation program
- 0
- hours of operational downtime
- 2
- clouds under one access policy
- 100%
- of completed waves verified by testing
They changed the foundations of our network while the trucks kept rolling.
Services delivered
Related engagements
More work in AI, Cloud & Digital Trust.
-
Austin, Texas · 14 weeks
AI, Cloud & Digital Trust · 2024SOC 2 Type II Readiness for an HR PlatformA clean Type II report on the first audit window, and enterprise deals unblocked the same quarter.
-
U.S. and EU · 20 weeks
AI, Cloud & Digital Trust · 2025 · OngoingAI Governance and Red Teaming for a GenAI PlatformAn AI management system built for certification, and 31 jailbreak paths closed before launch.
-
Texas and Oklahoma · 26 weeks
AI, Cloud & Digital Trust · 2024Secure Cloud Landing Zone for a Health NetworkGuardrails in code across every account, with critical misconfigurations down 92% in two quarters.
Let’s talk about your version of this.
Share what you are up against. A senior practitioner who has delivered this kind of work will reply within one business day.