Designing and building not only a secure modern solution (architecture) based on microservices, rich UI web app and native mobile apps but also placing the best practices of DevSecOps which assures building processes are considering security principals and controls, such as Static Application Security Testing SAST, Dynamic Application Security Testing DAST, Software Composition Analysis SCA, containers security, Runtime Application Self Protection RASP ACL, next-generation firewall NGFW