Managing credentials in one place
The client wanted to manage sensitive credentials centrally across development, staging and production. The setup needed to work with both on-premises infrastructure and cloud environments.
I designed and implemented the secrets management system, working with the teams responsible for the applications and deployment pipelines.
Integrating Infisical with the existing setup
I used Infisical to manage, supply and rotate secrets. Docker, Terraform and AWS CDK supported deployment and infrastructure automation.
I also developed deployment pipelines for Kubernetes and OpenShift and implemented security policies for Linux and containers.
Storage, backups and documentation
The project included persistent storage and backup capabilities using Ceph. I tested and documented the implementation and agreed the operating procedures with the teams responsible for it.
The client’s name remains confidential.