Design and run our AKS clusters and Istio service mesh: node pools, autoscaling, tenant isolation, upgrades, mTLS, and traffic policy. These run in customer-managed Azure environments.
Provision Azure infrastructure with Terraform and Bicep, including ACR, Key Vault, Entra ID, VNets, NSGs, Private Link, workload identity, and storage. Deploy into environments with private registries, restricted outbound access, proxies, VPNs, and bastion hosts.
