A production security operations platform for a Managed Security Service Provider, running client onboarding, incident handling, and infrastructure control for the provider's entire estate: more than 90 live tenants and over 300 users, and growing. The engagement is under NDA; the engineering below is not.
Access is governed by a fully custom identity stack. Fine-grained RBAC defines roles and permissions per tenant scope, so an analyst, a client admin, and a provider operator each see exactly what their role allows and nothing more. Two-Factor Authentication is enforced on accounts, and sensitive actions stay auditable end to end.
Tenancy is hierarchical. Parent tenants administer their sub-tenants directly, receive their notification streams, and aggregate data and reporting across the entire subtree, while isolation between branches stays strict. A parent organization sees only its own children; provider-level views roll the whole estate up.
The platform speaks the languages security teams already use: Jira for ticketing and workflow automation, IBM QRadar for SIEM-driven event correlation, and Juniper Junos for direct network infrastructure control, with a real-time notification engine propagating events to sub-tenant users, their parent tenants, and provider operators alike.
Roles and permissions are scoped per tenant: analysts, client admins, and provider operators each get precisely bounded capabilities, definable per branch of the hierarchy.
Two-Factor Authentication hardens every account against credential theft, a non-negotiable for a platform operating in the security industry.
Tenants form a parent and sub-tenant tree. Parents administer their children directly while branch-to-branch isolation stays strict.
Parent tenants aggregate data and reporting across their whole subtree, from a single sub-tenant to the provider's full estate.
Events reach the sub-tenant's own users and propagate upward, so parent tenants and provider operators see their children's incidents in real time.
Deep integrations with Jira for ticketing, IBM QRadar for SIEM event correlation, and Juniper Junos for network infrastructure management.
