Designed and rolled out a multi-subscription Azure landing zone with policy-as-code, network segmentation, and a self-service onboarding flow for product teams.

Highlights

  • Hub-and-spoke topology with private endpoints and Azure Firewall
  • Policy-as-code with Bicep + GitHub Actions
  • Self-service team onboarding via a custom portal
  • Cost guardrails and FinOps dashboards out of the box

← Back to Projects