Design, implement, and maintain secure, scalable, and highly available AWS cloud infrastructure, including VPC, EC2, EKS, ALB, Route 53, CloudFront, RDS, IAM, S3, KMS, and Secrets Manager, following AWS Well-Architected best practices. Implement cloud security best practices, including IAM, least-privilege access controls, Secrets Manager, KMS, WAF, GuardDuty, Security Hub, vulnerability remediation, and platform hardening in partnership with Information Security teams.