Knowledge of cloud network security, including VPC/VNet architecture, routing, private endpoints, peering, load balancers, API gateways, WAFs, and cloud-native firewalls. Continuously improve the organization's security posture through configuration hardening, patch alignment, and reducing attack surface in servers, endpoints, OT devices, and cloud workloads.