Designs and improves secure-by-default cloud infrastructure across Azure and Kubernetes. Responsibilities include infrastructure hardening, vulnerability management, detection engineering, SIEM and logging coverage, alert investigation, audit evidence automation, credential security, and security guardrails. The role partners closely with security, DevOps, platform engineering, and IT teams while owning infrastructure security projects end to end.