Experience with network security across on-prem and cloud environments, including segmentation strategies, next-generation firewalls, Azure networking (Virtual Networks, private endpoints, firewalls), and Conditional Access policies; able to work with network teams to implement solutions. Nice to have: Experience in one or more specialized security domains is a plus – for example, DevSecOps pipeline security, cloud security architecture (Azure/AWS), network segmentation, AI governance, advanced identity management, red-team/pentesting, or enterprise vulnerability management tools.