Manage Azure-native services including VMs, AKS, ACR, App Services, Storage Accounts, SQL Database, Cosmos DB, Azure AD, Front Door, Application Gateway, Azure Monitor/Log Analytics . Design multi-subscription and hub-and-spoke networking topologies using Azure Management Groups, Virtual WAN, Private Link, and RBAC .