Design and implement secure multi-cloud architectures (GCP primary; AWS/Azure supported). Build landing zones, IAM, encryption, and guardrails; integrate security into CI/CD and DevSecOps; support detection/response, vulnerability management, SaaS reviews, and audit evidence for healthcare payment compliance (PCI, HIPAA, HITRUST, SOC2, SOX). Partner with engineering, platform, and GRC teams to operationalize cloud security standards and remediation.