Engineering workstation ecosystem

An engineering workstation ecosystem: a hardened workstation in a secure engineering zone with no internet access, application allowlisting, endpoint protection and disk encryption, a version-controlled engineering repository, a controlled file transfer server in the IDMZ, blocked internet and email paths, and an approved vendor maintenance route through a VPN with MFA and a jump host.