• Architect, deploy, and operate enterprise-grade OCI landing zones, compartments, and tenancy structures aligned with internal governance and compliance standards • Design and implement OCI networking topologies, including VCNs, subnets, gateways, FastConnect, IPSec VPN, and DRG-based hub-and-spoke architectures • Build and maintain OCI infrastructure-as-code using Terraform and OCI Resource Manager, with version control, peer review, and automated validation • Implement IAM policies, federation with corporate identity providers, and strong RBAC patterns using OCI Identity Domains • Design and operate OCI compute (VMs, bare-metal, OKE for Kubernetes) and storage services (Object, Block, File, Archive) optimized for workload patterns • Operate OCI database services, including Autonomous Database, Exadata Cloud, MySQL HeatWave, and Base Database, in close partnership with DBA teams • Build CI/CD pipelines on OCI DevOps service or external platforms (Jenkins, GitHub Actions) for both infrastructure and applications • Implement observability using OCI Monitoring, Logging, APM, and integrations with third-party observability stacks • Drive ongoing cost optimization through right-sizing, lifecycle management, and architectural simplification • Design disaster-recovery and business-continuity solutions across OCI regions and availability domains • Strengthen security posture using OCI Cloud Guard, Security Zones, Vault, and Data Safe, and lead remediation of findings • Advise application development teams on OCI-native design patterns and best practices • Develop automation tooling in Python, Bash, and Terraform to reduce operational toil • Mentor junior engineers and contribute to internal cloud communities of practice.

• Design, build, and operate large-scale, secure, and highly available cloud platforms on Amazon Web Services • Architect, deploy, and operate enterprise-grade AWS environments across compute, networking, storage, identity, and managed data services • Author and maintain production-quality infrastructure-as-code using Terraform, AWS CloudFormation, or AWS CDK • Design multi-account AWS organizations and build secure VPC topologies • Implement strong IAM strategies and design, deploy, and operate Amazon EKS clusters • Operate AWS managed data and analytics services such as RDS, Aurora, and DynamoDB • Build and maintain robust CI/CD pipelines using AWS tools • Implement comprehensive observability and drive ongoing cost optimization • Implement disaster-recovery and business-continuity capabilities • Strengthen security posture using AWS security tools • Advise application development teams on AWS-native design patterns • Develop automation scripts and mentor junior engineers.

• Design and implement enterprise-grade Azure cloud architectures spanning compute, networking, storage, identity, and data services, with explicit attention to scalability, security, and total cost of ownership. • Develop, maintain, and continuously improve infrastructure-as-code using Terraform, Bicep, or ARM templates, treating infrastructure changes with the same rigor as application code through version control and peer review. • Configure and manage Azure landing zones, virtual networks, subnets, route tables, and network security groups to enforce strong segmentation and least-privilege connectivity between workloads. • Implement secure identity, access management, and governance controls using Azure Active Directory, conditional access, role-based access control, and Azure Policy to ensure compliance with internal and regulatory standards. • Architect and operate Azure Kubernetes Service (AKS) clusters, including node pool design, auto-scaling, network policy, and integration with container registries and service meshes. • Deploy, scale, and tune Azure data and analytics platforms such as Azure SQL, Cosmos DB, Synapse Analytics, Data Factory, and Event Hubs to meet specific workload patterns and SLAs. • Build and operate comprehensive CI/CD pipelines using Azure DevOps or GitHub Actions, enabling fast, automated, and auditable releases of both infrastructure and application code. • Design and implement robust observability practices using Azure Monitor, Log Analytics, Application Insights, and third-party tooling, with thoughtful dashboards, alerting, and SLO tracking. • Drive Azure cost optimization initiatives, including right-sizing, reserved-instance planning, lifecycle policies, and architectural changes that meaningfully reduce monthly cloud spend. • Implement disaster-recovery and business-continuity strategies, including backup, geo-replication, failover testing, and documented runbooks that have been validated through regular drills. • Strengthen security posture by integrating Microsoft Defender for Cloud, Sentinel, key vault, and managed identities, and by routinely remediating findings from compliance scans. • Collaborate closely with application teams to architect cloud-native solutions, advising on patterns, anti-patterns, and Azure-native services that best fit each problem domain. • Develop automation scripts and tooling in PowerShell, Bash, and Python to streamline repetitive operational work and reduce time-to-resolution for common incidents. • Mentor junior engineers, lead architecture reviews, and contribute actively to internal communities of practice around Azure and DevOps.

• Design and operate cloud networking architectures including VPC/VNet, subnets, routing, and security groups. • Build transit hub topologies using AWS Transit Gateway, Azure Virtual WAN, or GCP Network Connectivity Center. • Design and implement hybrid connectivity using Direct Connect, ExpressRoute, Cloud Interconnect, and VPN. • Architect edge networking including CDN, global load balancing, and WAF integration. • Implement DNS strategies including Route 53, Azure DNS, or Cloud DNS with hybrid resolution. • Design private connectivity to managed services using PrivateLink, Private Endpoints, or Private Service Connect. • Automate cloud networking with Terraform, providing infrastructure-as-code coverage across the network estate. • Implement network security controls including firewalls, NACLs, security groups, and DDoS protection. • Operate Kubernetes networking including CNI selection, ingress strategies, and service exposure patterns. • Build observability for cloud networking including flow logs, traffic insights, and packet capture. • Drive cost optimization including data transfer reduction and right-sizing of network resources. • Partner with security teams to harden the network perimeter and enforce zero-trust principles. • Troubleshoot complex cloud networking issues across cloud and hybrid environments. • Stay current with cloud networking platform updates and emerging patterns.