Methods and systems for cryptographic identity based network microsegmentation

A network interface device comprising:

• a memory for storing a set of instructions and one or more processors configured to execute the set of instructions to perform at least the following:
• a) receive, from a requesting entity, a destination IP address and a first certificate that is used to establish a secure network connection, wherein the first certificate comprises a first security attribute associated with a source IP address, wherein the first certificate is a trusted certificate issued by a certificate authority, and wherein the first security attribute in the first certificate comprises a security group associated with the source IP address, the security group including multiple endpoints identified to share a security attribute;
• b) identify a stored second security attribute associated with the destination IP address;
• and
• c) determine a policy action based at least in part on the first security attribute and the second security attribute.