Designs and automates resource groups, virtual networks, subnets, network security groups, application security groups, route tables, Azure Firewall policies, private endpoints, Private DNS zones, load balancers, and application gateways. The role builds and maintains Azure landing zones, management group and subscription structures, resource groups, network security groups, routing, connectivity, identity and policy guardrails, monitoring, and shared platform services across hybrid environments.