Securing Apache Kafka® & Architecting a Kafka Streams Topology

Join us for an Apache Kafka® meetup on Thursday, July 10th from 5:00pm in Zurich hosted by mesoneer!

📍Venue:
mesoneer AG, Richtistrasse 17, 8304 Wallisellen, Switzerland

🗓 Agenda:

• 5:00pm: Doors open
• 5:00pm – 5:30pm: Snacks, Drinks and Networking
• 5:30pm – 6:00pm: Hartmut Armbruster - Freelance Software Architect,
  Developer. Distributed & Event-Driven Systems
• 6:00pm - 6:30pm: Anatoly Zelenin, Founder of Zelenin Academy, and Kafka book author
• 6:30pm - 7:00pm: Additional Q&A, Networking and Pizza

💡 Talk 1:
Hartmut Armbruster - Freelance Software Architect, Developer. Distributed & Event-Driven Systems

Title of Talk:
How Do You Architect a Kafka Streams Topology?

Abstract:
Struggled with the complexity of designing Kafka Streams applications? Without sufficient up-front architecture work, it’s all too easy to stumble into misunderstandings, rework, or outright failure. Although standards like UML and C4 model have guided software designs for years, stream processing has lacked its own visual framework—until now.

KSTD (Kafka Streams Topology Design) introduces an open standard and component library for describing and visualising Kafka Stream Topologies with Excalidraw. Simple design principles ensure teams can keep diagrams simple yet include important details, build trust in their designs, and streamline the development lifecycle.

You will learn how standardised diagrams support team alignment, and how KSTD fosters consistent and clear communication for Kafka Streams. Design up-front, avoid mistakes, save time, and build trust.

Bio:
Hartmut Armbruster is a software engineer passionate about elevating engineering practices - blending technical depth with a focus on clarity, communication, and impact. He has worked on real-time data processing at HSBC, NEX Group plc, eu-LISA, Raiffeisen Switzerland, and Deutsche Bahn, focusing on mission-critical platforms.

💡 Talk 2:
Anatoly Zelenin - DataFlow Academy - Founder and Chief Trainer, Kafka book author

Title of Talk:
Securing Apache Kafka: A Practical Framework for Meeting Compliance Requirements

Abstract:
Kafka deployments must satisfy diverse compliance requirements while maintaining business objectives and performance targets. Security needs vary dramatically—from simple development environments to strictly regulated production systems operating under GDPR, SOX, or industry-specific mandates.

This talk presents a battle-tested tiered security model for appropriately securing Kafka environments based on actual compliance requirements rather than one-size-fits-all approaches. We'll analyze Kafka's native security mechanisms (transport encryption, authentication, authorization) and their limitations: missing data-at-rest encryption, lack of
schema enforcement, and challenges with multi-tenancy isolation. Securing Apache Kafka: A Practical Framework for Meeting Compliance Requirements Kafka deployments must satisfy diverse compliance requirements while maintaining business objectives and performance targets. Security needs vary dramatically—from simple development environments to strictly regulated production systems operating under GDPR, SOX, or industry-specific mandates.

This talk presents a battle-tested tiered security model for appropriately securing Kafka environments based on actual compliance requirements rather than one-size-fits-all approaches. We'll analyze Kafka's native security mechanisms (transport encryption, authentication, authorization) and their limitations: missing data-at-rest encryption, lack of schema enforcement, and challenges with multi-tenancy isolation.

Bio:
Anatoly Zelenin is a renowned author of the German-language reference book on Apache Kafka and a leading trainer and expert on Kafka solutions in the DACH region (Germany, Austria, Switzerland). His deep technical knowledge, combined with his ability to convey complex concepts clearly, has made him a sought-after speaker, trainer, and trusted consultant in the field of distributed data systems and stream processing.

***
DISCLAIMER
We are unable to cater for any attendees under the age of 18.
If you would like to speak or host our next event please let us know! [community@confluent.io](http://community@confluent.io/)