Securing infrastructure starts with design decisions about where and how devices are placed, how data flows, and where trust boundaries begin and end. In this episode, we focus on device placement and network zoning, exploring how separating front-end, back-end, and management traffic can prevent attackers from using one compromised segment to access others. Concepts like jump servers, demilitarized zones (DMZs), and out-of-band management networks help isolate critical systems and limit exposure. We also discuss attack surface reduction by minimizing the number of internet-facing devices and placing high-risk assets behind additional layers of access control. Proper placement of firewalls, intrusion detection systems (IDS), and routers isn't just about connectivity—it defines how effectively threats can be contained and how quickly anomalies can be detected. Infrastructure security isn’t just about plugging holes—it’s about building a structure that anticipates where cracks might form.