Design, deploy, and manage secure Azure and Microsoft 365 cloud and hybrid infrastructure (including GCC High). Administer Intune, AVD, identity (Entra ID), Windows Server, and enterprise networking. Implement security, compliance, monitoring, troubleshoot complex issues, and produce operational documentation and runbooks.