Overview

Enterprise architecture direction across the IT portfolio, 30+ concurrent projects and initiatives from early outlines and intake through delivery, supporting 8+ delivery teams on Azure. Production in West US 3 runs across three availability zones. End-of-life NGINX ingress was replaced with Istio Gateway API and a sidecarless ambient service mesh, ahead of the November 2026 support cutoff. Zero-trust identity covers employees, partners, and customers (Entra ID, Entra B2B, Azure AD B2C / Entra External ID, passwordless Microsoft Authenticator), federated workload credentials with no stored secrets, and privileged access management with CyberArk PAM and Entra PIM. A shared CI/CD orchestrator on GitHub Actions provides versioned, reusable workflows with build, security-scanning, and deployment gates. Traced and eliminated a Log Analytics cost leak, cutting log-ingestion costs by about 90%. Microsoft Fabric is connected privately. Architecture decisions go through an Architecture Review Board (ARB), using RFC 2119 standards.