A method and apparatus are disclosed for controlling access of a computing device to a multi-layer network implementing a zero-trust architecture, the multi-layer network including a switch and apparatus for controlling access to a plurality of hierarchical levels of the multi-layer network. The method includes receiving, at the apparatus, an access request message from the computing device, the access request message including one or more identifiers associated with the computing device for requesting access to the multi-layer network. The method further includes determining a hierarchical penetration level among the plurality of hierarchical levels of the multi-layer network to be assigned to the computing device based on the one or more identifiers within the access request message. The method further includes assigning the hierarchical penetration level to the computing device, and granting the computing device access and control privileges to the multi-layer network, based on the assigned hierarchical penetration level.