Designs cloud platform architecture (AWS/Azure/GCP) when a system is being designed for cloud, migrated to it, or connected to on-premises networks: landing zones/accounts, networking, hybrid on-prem connectivity, identity/IAM boundaries, service selection, reliability/DR, and multi-region strategy. Produces architecture diagrams + risk/rollback plans. Does not own CI/CD or deep FinOps tactics.
