301 Labs Overview

Overview

These advanced labs cover enterprise security architecture and zero-trust patterns: governance, GitOps policy, multi-tenant networking, runtime detection, forensics, supply chain integrity, remediation automation, culture, cryptography, and workload identity.

Topics covered:

  • Platform-wide security governance

  • GitOps-driven policy and compliance pipelines

  • Multi-tenant zero-trust network and service segmentation

  • Runtime threat detection pipelines and response integration

  • Coordinated incident response and forensics

  • End-to-end supply chain integrity and provenance

  • Automated remediation and policy enforcement

  • Security culture and maturity

  • Advanced cryptography and encryption strategies

  • Zero-trust workload identity and confidential computing

Application Developer has no Advanced labs in the framework—complete Intermediate, then continue with DevSecOps or Architect.

Audience and prerequisites:

  • OpenShift cluster with cluster-admin (or delegated) access for most labs

  • Deep OpenShift networking, security, and architecture familiarity

  • Follow a role track for the labs your role owns

Advanced Labs Index

Lab Title Roles

301-01

Platform-Wide Security Governance & Policy as Code

Platform, Architect

301-02

GitOps-Driven Policy and Compliance Pipelines

DevSecOps, Architect

301-03

Multi-Tenant Zero-Trust Network Segmentation

Architect, Network

301-04

Runtime Threat Detection with ACS Deep Dive

DevSecOps

301-05

Incident Response, Forensics & ACS Integration

Architect

301-06

Supply Chain Integrity, Provenance & Trusted Artifact Signer

DevSecOps, Architect

301-07

Automated Remediation, Policy Enforcement & ACS Response

Platform, DevSecOps, Architect

301-08

Building Security Culture & Maturity Models

Platform, Architect

301-09

Advanced Cryptography: Post-Quantum mTLS, Encryption Strategies

DevSecOps, Architect, Network

301-10

Zero-Trust Workload Identity, Federation & SPIFFE/SPIRE

DevSecOps, Architect, Network

301-11

Confidential Containers & Secure Enclaves

DevSecOps, Architect, Network

Related advanced labs

Lab Title Roles Notes

301-12

Sovereign Cloud & Digital Sovereignty Controls

Architect

Governance / residency adjacency

301-13

Advanced Runtime Threat Hunting & ACS Automation

DevSecOps

Extends runtime hunting and response automation

Role abbreviations: App Dev = Application Developer; Platform = Platform Operator; DevSecOps = DevSecOps Engineer; Architect = Security Architect; Network = Network & Infrastructure Engineer.