Start with the real risk.
Understand the business and what it needs to protect. Make the trade-offs explicit before choosing the technology.
About / Aliaksei Brusiantsou
Security is
a team sport.
I’m Aliaksei, a security architect with 15+ years in the space between enterprise risk and hands-on engineering.
I’ve worked across energy services, banking, government digital platforms and global IT services. The environments change; the work is always about helping people make good security decisions and carry them through.
That has meant designing Zero Trust for a large hybrid estate, building a vulnerability management programme, shaping a bank’s move to Azure, and leading a security R&D and deployment team of 24.
Explore the workAB / SECURITY ARCHITECTURECLARITY / CRAFT / IMPACT
How I work
A few things
I come back to.
Principles for the work.
And for the people doing it.
Make the secure path workable.
A control needs to fit the way people deliver and operate a product. Design for the team that will live with the decision.
Build shared understanding.
Good architecture gives engineers, leaders and auditors a common language. Explain the decision as carefully as the design.
Leave something that lasts.
Create repeatable workflows, clear ownership and useful evidence. Help the team keep improving after the engagement.
Professional foundation
Always learning.
- CISSP
- CCSP
- CISA
- CDPSE
- TOGAF
Architecture, information security, cloud security, assurance and privacy.
Across environments
Different contexts.
The same curiosity.
Energy, banking and public services bring different constraints. I’m interested in the decisions beneath them: what matters to the organisation, how people work, and what makes a control useful in practice.
That is the thread connecting the case studies here and the notes in my notebook.
How this site is secured
Small footprint.
Clear boundaries.
Static pages, self-hosted fonts and no executable browser JavaScript. No analytics or tracking cookies. Cloudflare serves the site over HTTPS with a strict Content Security Policy, HSTS and framing protection.
- Mozilla HTTP Observatory
- A+ Verified 17 October 2026 · 12/12 checks
Deployments run through GitHub Actions, with Cloudflare credentials held in repository secrets. Security contact information is available for responsible reports.
Read the privacy notice for details about hosting and contact information.
Get in touch
Good security starts
with a conversation.
Have a security challenge, an interesting role, or a different perspective?
I’d like to hear about it.