• Define Azure landing zones, reference architectures, and guardrails aligned with Microsoft Cloud Adoption Framework (CAF) and the Well-Architected Framework • Lead migrations and application modernization (IaaS → PaaS), including AKS, App Services, Functions, serverless data, and event-driven architectures • Establish governance frameworks for security, compliance, cost (FinOps), and operational best practices across subscriptions and tenants • Drive Infrastructure-as-Code (IaC) delivery using Bicep or Terraform; automate CI/CD pipelines with GitHub Actions or Azure DevOps • Architect secure network topologies including vWAN, hub-and-spoke, private endpoints, Private DNS, and ExpressRoute/VPN • Implement identity, access, and Zero Trust patterns using Entra ID, PIM, and conditional access • Ensure reliability through HA/DR, backup, monitoring, and observability using Azure Monitor, Log Analytics, and Defender for Cloud • Provide technical leadership, mentor engineers, and collaborate with squads, pre-sales teams, and executives through workshops and RFP responses