eriodic recertification.

· Manage SSL/TLS certificates, ciphers, and HSTS for internet-facing services; enforce secure crypto standards.

· Build and maintain site-to-site VPNs, SD-WAN, and secure remote access solutions across hybrid networks.

· Integrate network security controls with SIEM/SOAR and network telemetry; develop actionable runbooks.