You'll ensure on-prem nodes mirror cloud architecture at small scale, keep operating through Degraded, Disconnected, Intermittent, and Limited (DDIL) conditions, and reconcile cleanly with the hub on reconnect - owning everything from identity federation and degraded auth to data reconciliation, config-drift automation, and DDIL reliability testing. Identity federation & degraded auth - extend centralized Keycloak/LDAP identity to disconnected edge; cached-credential authentication when the hub is unreachable; propagate RBAC-by-operation/group to spokes.