Design or audit GCP networking — VPC (auto vs custom, Shared VPC), Cloud Load Balancing (Global vs Regional, Application / Network), Cloud CDN, Cloud Armor, Cloud DNS, VPC Service Controls, Private Service Connect, Cloud NAT. Use when standing up a new VPC, exposing a service, hardening edge, or auditing connectivity.