V1I5P14

Engineering Secure and Resilient Cloud-Native Architectures for Critical Digital Infrastructure

Abolaji Taoheed Oyerinde^1,2*

Abstract

Cloud-native technologies have transformed the delivery of mission-critical digital services, offering unprecedented agility, elasticity, and operational efficiency. Transitioning from monolithic to distributed systems, however, introduces security and resilience challenges that affect availability, trustworthiness, and continuity of critical digital infrastructure. This study systematically engineers secure and resilient cloud-native architectures capable of continuously delivering critical services while minimizing security threats and operational disruptions. It synthesizes research on microservices, containerization, orchestration platforms, Zero Trust security, and resilience design patterns and proposes a novel integrated framework that combines secure-by-design principles, automated DevSecOps, continuous threat exposure management, and fault-tolerant mechanisms. A thematic qualitative analysis of secondary data from peer-reviewed literature, industry frameworks, and regulatory standards identifies major architectural enablers, repeated vulnerabilities, and gaps in current practice. Findings demonstrate that embedding security and resilience across the system lifecycle—through identity-centric controls, adaptive resilience mechanisms, and automatic policy enforcement—enhances reliability and survivability of cloud-native systems underpinning healthcare, finance, energy, and government sectors, thereby supporting national security, public safety, economic stability, and digital sovereignty. The study concludes with practical recommendations for practitioners and policymakers to scale secure-by-design and resilience-by-design strategies in protecting critical digital infrastructure against emerging cyber threats.

Keywords:

: Cloud-Native Architecture, Critical Digital Infrastructure, Security, Resilience Engineering, Zero Trust, DevSecOps, Fault Tolerance, Microservices, Threat Management.