• Architect secure multi-account AWS and multi-project GCP landing zones using Infrastructure-as-Code (Terraform, CloudFormation, Ansible, Helm, Packer). • Design compliant cloud platforms supporting EC2, RDS, EKS, ECS, Docker (AWS) and GCE, GKE, Cloud SQL, and containerized workloads (GCP). • Automate hardened deployments aligned with DISA STIG, CIS Benchmarks, and security best practices. • Integrate AWS security services including GuardDuty, Security Hub, AWS Config, CloudTrail, and CloudWatch. • Lead DevSecOps initiatives using CI/CD pipelines (CodePipeline, CodeBuild, GitHub, GitLab). • Integrate Container image Vulnerability and Compliance Scanning tooling into CI/CD tooling (Trivy, Grype, OpenSCAP, or equivalent) • Integrate native security services in GCP including Security Command Center, Cloud Logging, Cloud Monitoring, IAM, Organization Policies • Conduct compliance gap assessments and produce security architecture documentation and diagrams for authorization efforts. • Design secure IAM, SAML SSO (Okta, ADFS), and hybrid networking architectures (Transit Gateway, AWS Network Firewall). • Serve as a trusted advisor to clients, translating compliance and security requirements into scalable technical solutions.