Design and Implement a Zero-Trust Network Architecture for Financial Institution with Multi-Factor Authentication

We are seeking an expert consultant to design and implement a robust Zero-Trust Network Architecture (ZTNA) for our financial institution. This project encompasses a comprehensive assessment of our current network infrastructure, identifying vulnerabilities and outlining a detailed plan for ZTNA implementation. The scope includes integrating multi-factor authentication (MFA) across all access points, segmenting the network to minimize lateral movement, implementing micro-segmentation strategies based on application criticality and user roles, establishing continuous monitoring and threat detection capabilities using Security Information and Event Management (SIEM) tools like Splunk or ELK Stack, and defining clear policies and procedures for access control. The consultant will be responsible for documenting the architecture design, providing training to our IT staff on ZTNA principles and operational procedures, conducting thorough testing and validation of the implemented solution, and ensuring compliance with relevant regulatory requirements such as PCI DSS. Experience with Next-Generation Firewalls (NGFWs) like Palo Alto or Fortinet is crucial. The ideal candidate should possess a proven track record of successfully implementing ZTNA solutions in similar environments and be capable of working independently with minimal supervision. A phased approach is preferred, starting with a pilot implementation in a limited scope before full-scale deployment. Strong communication skills are essential for effectively conveying technical concepts to both technical and non-technical stakeholders. We anticipate a need for ongoing support after implementation to address any issues or fine-tune the system as needed. This is a critical project aimed at significantly enhancing our organization’s security posture against evolving cyber threats.