Zero-trust identity architecture & unified access control for 180+ agencies
Granular least-privilege security replacing perimeter VPNs and legacy flat networks.
- Client
- Municipal Smart City Governance
- Urban Municipal Authority & Smart City SPV
- Location
- Western India
- Timeline
- 18 weeks across audit, pilot deployment, and municipal rollout
- Headline result
- 100%
- Access requests continuously verified & logged
Overview
A municipal smart city authority connecting over 180 department agencies, contractors, and public works vendors operated on vulnerable flat networks and shared credentials. Nexasoft architected a modern Zero-Trust Network Access (ZTNA) framework with strict identity verification, micro-segmentation, and continuous device posture checks.
The challenge
- Over 4,500 government employees and third-party contractors using shared passwords.
- Traditional perimeter firewalls left internal municipal databases vulnerable to lateral movement.
- Lack of centralized audit logs for who accessed citizen records or traffic control systems.
- Requirement to comply with national cybersecurity agency (CERT-In) guidelines.
What we built
- Implemented central Single Sign-On (SSO) with mandatory phishing-resistant FIDO2 hardware MFA.
- Enacted contextual least-privilege access rules evaluated on device health, IP location, and time.
- Architected application micro-segmentation replacing vulnerable internal VPNs.
- Built centralized SIEM event streaming for instant anomaly and unauthorized access detection.
Results
- Administrative access requests verified with contextual MFA
- 100%
- Security breaches or lateral intrusions since platform commissioning
- 0
- Government department systems brought under single identity governance
- 180+
- Full compliance with CERT-In directives and ISO 27001 standards
- 100%
Architecture
- OpenID Connect / SAML identity provider federation with granular policy evaluation.
- Envoy-based reverse proxy enforcing TLS 1.3 mutual authentication (mTLS).
- Elastic SIEM and Wazuh agent monitoring across 320 server nodes.
- Terraform policies version-controlled in Git for immutable infrastructure security.
“Securing hundreds of municipal systems used by thousands of staff was an enormous undertaking. Nexasoft established a zero-trust model without disrupting citizen service delivery.”
Have a challenge like this?
Tell us about it. We'll reply within one working day and can usually start with a short discovery sprint.