Skill UI

A comprehensive workflow bundle covering the entire cloud-native development lifecycle. It guides users through critical phases, including cloud infrastructure setup (AWS, Azure, GCP, Terraform IaC), container orchestration with Kubernetes, robust CI/CD pipeline automation, observability implementation, security hardening, cost optimization, and disaster recovery planning. This ensures best practices across all stages of modern application deployment.

A comprehensive skill for conducting offensive security assessments across major cloud providers, including Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP). It guides users through reconnaissance, authentication testing, resource enumeration, privilege escalation, and persistence techniques, strictly for authorized security engagements.

A comprehensive guide detailing systematic strategies and patterns for optimizing cloud spending across major platforms including AWS, Azure, and GCP. It covers best practices for rightsizing resources, leveraging reserved instances, implementing lifecycle policies, and setting up robust cost governance, ensuring cost efficiency without sacrificing performance or reliability.

Expert in designing, building, and optimizing scalable data pipelines, modern data warehouses, and real-time streaming architectures. Mastery covers the complete modern data stack, including Spark, dbt, Airflow, and cloud services (AWS, Azure, GCP). Focuses on ELT/ETL, data lakehouse implementation (Delta Lake, Iceberg), data governance, and ensuring high data quality and operational reliability.

An expert architect specializing in designing, implementing, and managing complex hybrid and multi-cloud environments. Expertise spans major public clouds (AWS, Azure, GCP), private clouds (OpenStack, VMware), and container platforms (Kubernetes). Focus areas include cross-cloud networking, Infrastructure as Code (IaC) using Terraform, workload optimization, zero-trust security implementation, and FinOps cost management.

This skill provides comprehensive guidance on establishing secure, high-performance connectivity between on-premises data centers and major public cloud providers (AWS, Azure, GCP). It covers various connection options, including Site-to-Site VPN, AWS Direct Connect, Azure ExpressRoute, and GCP Cloud Interconnect. Use this skill to design and implement complex hybrid network patterns (e.g., Hub-and-Spoke, Multi-Cloud), ensuring high availability, proper routing (BGP), and adherence to security best practices.

This comprehensive skill profile models an expert network engineer specializing in modern cloud networking, security architectures, and performance optimization. It covers multi-cloud environments (AWS, Azure, GCP), advanced concepts like Zero Trust, Service Mesh (Istio), and high-availability design. Key capabilities include implementing IaC (Terraform), load balancing, DNS management, and deep network troubleshooting. Ideal for complex DevOps, SRE, or infrastructure design roles.

Expert in implementing Infrastructure as Code (IaC) using Terraform across multi-cloud environments, including AWS, Azure, and GCP. Specializes in creating reusable, modular components, advanced state management (backends, locking, migrations), ensuring security best practices, and developing robust, production-grade cloud infrastructure pipelines.

A comprehensive guide to deploying Microsoft Sentinel as a cloud-native SIEM/SOAR solution. Covers multi-cloud data connector setup (AWS, Azure, GCP), writing advanced KQL queries for threat detection and hunting, and building automated response playbooks using Logic Apps. Ideal for establishing centralized SOCs in complex, multi-cloud environments.

This skill provides a comprehensive guide to establishing SAML 2.0 identity federation between on-premises Active Directory and Microsoft Entra ID (Azure AD). It covers the architecture, prerequisites, and practical steps (including PowerShell scripting) required to achieve seamless Single Sign-On (SSO) and centralized authentication authority for hybrid environments and third-party SaaS applications.

Establishes a repeatable, structured operational process for managing Microsoft Patch Tuesday security updates. The workflow guides users through advisory review, vulnerability triaging (including zero-days), phased testing, and deployment across major platforms (Windows, Azure, Office). Ideal for maturing patch management programs and defining risk-based remediation SLAs.

A comprehensive guide on deploying Cloudflare Access and Tunnel to establish a Zero Trust Network Access (ZTNA) solution. This method replaces traditional VPNs by securely exposing self-hosted internal applications (web, SSH, RDP) without opening inbound ports. It integrates identity-aware policies, device posture checks, and robust identity providers (Okta, Azure AD) for highly secure, least-privilege access.