Implement cloud security best practices (IAM, RBAC, WAF, Security Groups, NACLs, CloudTrail, GuardDuty, Secrets Manager, NSG, ASG, Service Principals, Managed Identities, Azure Advisor, Defender for Cloud, Key Vault, encryption, monitoring). " Strong understanding of VPC design, vNet design, Hub & Spoke, Transit Gateway, Peering, Application Load Balancers, Application Gateway, Network Load Balancers, Traffic Manager, VPNs, Direct Connect, ExpressRoute, and hybrid networking.