Hands-on experience with AWS (or an equivalent cloud) security architecture, including multi-account organization design and service control policies, VPC and Transit Gateway networking, PrivateLink, network firewall policy (SNI allowlisting and east-west inspection), ECS Fargate and EC2, KMS, Secrets Manager, and centralized logging such as flow logs, DNS query logs, and CloudWatch. Design, build, and secure AI-enabled applications and reusable platform capabilities, including Abacus Agents, agentic workflows, MCP servers and tools, SQL and RAG agents, model integrations, retrieval services, and customer-facing AI experiences.