PUBLIC SECTOR · Zero-Trust · Security · Accessibility

    A nation's digital front door

    Zero-trust portal serving five million citizens.

    NATIONAL GOVERNMENT AGENCY // 32 WEEKS // BOLT GROUP

    5MCitizens served
    Built with
    Next.js
    Node.js
    PostgreSQL
    Redis
    Keycloak
    Kong
    Kubernetes
    Microsoft Azure
    Terraform
    The situation

    Two hundred citizen services. Fourteen departments. Inconsistent interfaces, outdated authentication, zero data sovereignty. Digital government fails when security gets in the way of service — or when service gets in the way of security. The mandate: both, without compromise.

    Why it mattered
    200+Disparate citizen services
    LegacyAuth vulnerable to modern attacks
    SovereignFull data residency required
    UniversalMultilingual, accessible, low-bandwidth
    client
    National Government Agency
    duration
    32 weeks
    services
    Security, Cloud, UX Design
    sector
    Public Sector
    The approach

    Four moves, built to compound.

    1. 01

      Zero-trust architecture

      End-to-end encryption, biometric auth, device attestation, per-request authorization. No implicit trust at any layer.

    2. 02

      Unified service layer

      Two hundred services consolidated behind a single API gateway with consistent UX patterns and workflow standards.

    3. 03

      Accessibility-first UX

      WCAG 2.1 AA compliant. Multilingual. Voice-enabled. Designed with low-bandwidth rural access as a first-class constraint.

    4. 04

      Sovereign cloud

      In-country deployment with full data residency, automated audit trails, and citizen consent management built into the stack.

    Delivery discipline
    • Principal-ledSenior engineers and architects on the keyboard from week one. No staffing pyramid, no handoffs to juniors mid-engagement.
    • Production-firstEvery artefact ships behind a load balancer. We measure success in throughput, latency, and uptime — not slides.
    • Outcome-boundScope, milestones, and acceptance criteria locked at kickoff. We commit to the metric that moves your P&L.
    Technology
    1. 01Next.js
    2. 02Node.js
    3. 03PostgreSQL
    4. 04Redis
    5. 05Keycloak
    6. 06Kong
    7. 07Kubernetes
    8. 08Azure
    9. 09Terraform
    32 WEEKS · SECURITY · CLOUD · UX DESIGN · SHIPPED
    The outcome

    What shipped. In production.

    0M
    Active citizens
    Onboarded and serving
    0
    Security breaches
    Since production launch
    0+
    Services unified
    One portal, one experience
    0%
    Satisfaction
    Citizen rating
    WCAG 2.1 AA
    Accessibility
    Fully compliant
    32wk
    Delivery
    End-to-end build
    The insight
    "Digital government works when security disappears into the experience. Zero-trust plus frictionless UX is the rarest pairing in public sector — and the most valuable."
    BOLT GROUP // PARTNER'S NOTE // BOLT GROUP // PARTNER'S NOTE // PUBLIC SECTOR
    How we engage

    Three shapes. One delivery standard.

    A / Fixed-scope build

    Defined outcome. Fixed price.

    We scope, build, and ship a discrete production system end-to-end. Best when the brief is sharp and the deadline is real.

    B / Retained capacity

    Embedded pod. Monthly cadence.

    A senior pod plugs into your team for a multi-quarter horizon. Roadmap evolves; the engineers stay constant.

    C / Advisory & audit

    Senior eyes. Surgical scope.

    Architecture review, model audit, or technical due diligence. Days to weeks. Written recommendations, not slideware.

    Start the conversation

    Let's build what's next.

    No SDR queue. No discovery deck. Pick a slot or send a note — Dean replies within four business hours.