Design or audit Azure networking — VNet, subnets, NSGs, peering, hub-spoke, Application Gateway, Azure Front Door, API Management, Private Link, Azure Firewall, ExpressRoute. Use when standing up a new VNet, exposing a service to the internet, or hardening the network perimeter.