Architect advanced Azure networking across Virtual Networks, NSGs, UDRs, Private Endpoints, Load Balancer, Application Gateway, Azure Firewall, Front Door, Virtual WAN, ExpressRoute and VPN Gateway, including hub and spoke topologies and enterprise DNS strategy. Implement security, compliance and governance using Microsoft Defender for Cloud, Microsoft Sentinel and Key Vault with secret rotation, together with Azure Policy, Management Groups and Blueprints, applying Zero Trust principles across identity, network and data layers.