• Define the BYOC strategy, positioning, and multi-cloud roadmap; translate customer and market needs into crisp PRDs for day 0/1/2 operations; align with next-gen architecture and enterprise requirements (sovereignty, isolation, control); shape pricing, packaging, and FinOps guardrails with business partners. • Own end-to-end requirements for secure networking and compliance (VPC/VNet topologies, PrivateLink/Private Endpoint, IAM/RBAC, KMS, audit logging, least-privilege) aligned to SOC 2/ISO 27001; deliver a remotely managed, upgrade-safe control/management/data-plane model with first-class telemetry and diagnostics (CloudWatch, Azure Monitor, Prometheus, Grafana); productize repeatable IaC patterns and "golden" blueprints (Terraform/CloudFormation/Bicep), enable SSO (SAML/OIDC), and integrate with customer key, networking, and logging stacks. • Run private previews/EAPs with lighthouse customers; equip field teams with solution guides, runbooks, and migration playbooks; drive ICP, messaging, and competitive differentiation across launches; define and iterate on KPIs (time-to-provision, time-to-first-value, SLO attainment, upgrade success, cost accuracy, NRR, NPS) to steer continuous improvement. • Partner closely with engineering, security, solutions, and GTM teams to take BYOC from 0 to 1 and scale it globally across AWS, Azure, and other clouds. • Deliver a secure, compliant, and highly automated deployment model that runs TiDB in customers' cloud accounts while being managed from TiDB Cloud.