cybersecurity-architect

Design zero-trust security architecture for PayU microservices.

1|Updated Jan 18, 2026

Search Tags:#jwt #rbac #iam #zero-trust #oauth2 #keycloak #pci-dss

Ready to run

npx skills add https://github.com/fajjarnr/payu --skill cybersecurity-architect

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: cybersecurity-architect
Source: https://github.com/fajjarnr/payu/tree/main/.agent/skills/cybersecurity-architect
Command: npx skills add https://github.com/fajjarnr/payu --skill cybersecurity-architect

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

PayU faces complex IAM, PKI, and zero-trust security challenges across microservices, requiring a cohesive architecture to protect data, enforce access controls, and comply with PCI-DSS.

Core Features & Use Cases

Identity & Access Management: RBAC/ABAC design, OIDC/OAuth, Keycloak integration, and MFA strategies.
Secure Coding & Compliance: OWASP alignment and PCI-DSS guidance across development lifecycles.
Zero Trust Architecture Patterns: Device posture, mutual TLS, network segmentation, and key management.
Use Case Example: Implement a secure login flow for a new microservice with token validation across services.

Quick Start

Configure IdP (Keycloak or similar), enable MFA, set up RBAC, and implement mTLS with a secrets manager.

Frequently Asked Questions about cybersecurity-architect

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I implement zero-trust security architecture for cloud-native microservices?▼

Zero-trust architecture for cloud-native microservices is implemented using mutual TLS, network segmentation, device posture checks, and strict key management. This skill provides reference patterns to enforce these controls across distributed services.

How do I set up Keycloak integration for RBAC and OAuth2 token validation?▼

Keycloak integration for RBAC and OAuth2 involves configuring an Identity Provider, enabling MFA strategies, and validating OIDC/OAuth2 tokens across services. This skill guides IdP setup and role-based access design for secure authentication flows.

What is the best way to align microservice coding practices with PCI-DSS and OWASP requirements?▼

Aligning microservice coding with PCI-DSS and OWASP requires integrating secure coding patterns and compliance governance across the development lifecycle. This skill provides guidance to satisfy encryption and access control requirements for payment data.

Can I use ABAC and RBAC models together for access control in IAM?▼

Yes, you can use ABAC and RBAC models together within Identity and Access Management. This skill covers designing both role-based and attribute-based access controls to enforce granular permissions across microservices.

Do I need a secrets manager to implement mTLS across microservices?▼

Yes, a secrets manager is needed to handle certificates and keys for mutual TLS across microservices. This skill outlines configuring mTLS alongside a secrets manager to establish secure service-to-service communication.

How does JWT validation work across services in a distributed system?▼

JWT validation across services in a distributed system works by verifying token signatures and claims issued via OIDC and OAuth2 flows. This skill provides example workflows for implementing secure token validation across microservices.