Hi everyone,

I’m a Cyber Security student looking for some unfiltered industry feedback. I just completed a project called SafeNet, a decoupled Zero-Trust Network Access framework aimed at SOHO environments.

The Tech Stack: I used a Python/FastAPI Control Plane to orchestrate a WireGuardNT Data Plane on a Windows Server. It enforces strict /32 micro-segmentation to mathematically prevent lateral movement.

I need to decide if I should expand this for my Final Year Main Project, or drop it and build something else. I have a few specific doubts I'm hoping you can clear up:

1. Feasibility & Market Need: Is a lightweight ZTNA solution actually needed in the SOHO market, or do modern consumer routers/VPNs solve this pain point well enough? Are there critical bottlenecks in relying on dynamic Windows kernel routing like this?
2. Worth Enhancing?: Currently, the system authenticates the device, not the user. If I stay with this project, are adding things like a Layer 7 MFA Captive Portal and Continuous Behavioral Analytics (CARTA) the right moves to impress a DevSecOps hiring manager?
3. Alternative "Hire Me" Projects: If you think a custom VPN/ZTNA project is too "legacy" or reinventing the wheel, what should I build instead? What specific project domains will actually land a junior engineer a job in 2026?

I want to build something that solves a real industry pain point. I'd appreciate any roasts of my architecture or guidance on what to build next!