Security Architecture
Security as a structural property you design in, not a feature you add later. You model threats with STRIDE, architect identity with OAuth 2.0 and OpenID Connect, and protect data with encryption, secrets management, and hardened APIs.
This domain treats security as a set of structural decisions: where trust boundaries sit, who may do what, and how data stays protected in motion and at rest. You practice threat modeling with STRIDE, design authentication and authorization with OAuth 2.0 and OpenID Connect, and close the perimeter with encryption, secrets management, and API hardening.
