Design and operate secure Azure infrastructure, infrastructure-as-code modules, CI/CD security controls, vulnerability management, and penetration testing programs. Deploy and monitor internal security, IT, and AI tools using containers, identity, secrets management, telemetry, dashboards, and alerts. Partner with engineering, DevOps, IT, security teams, and external vendors while documenting procedures and producing SOC 2 evidence.