Designing and implementing cloud security architecture, managing IAM policies and least-privilege access, deploying and tuning cloud security posture management (CSPM) tools, building infrastructure security guardrails as code, responding to cloud security incidents, and conducting cloud-native penetration assessments.