Own the enterprise security posture on GCP — Workload Identity Federation, Binary Authorization, Secret Manager, IAM least-privilege design, and SIEM/CSPM integration (Security Command Center, Prisma Cloud, or Wiz). Architect/Engineer GCP networking: Shared VPC, VPC Service Controls, Private Service Connect, NCC, Cloud NAT, and hybrid connectivity via Cloud Interconnect and HA VPN.