HashiCorp Vault for Centralized Secrets Management

Challenge

Secrets were scattered across AWS Secrets Manager, GCP Secret Manager, and Kubernetes Secrets, with no consistent rotation policy and limited audit visibility.

Solution

I engineered a HashiCorp Vault deployment that became the single source of truth for application and infrastructure secrets, with automated rotation and audit logging.

What I Built

• A highly available Vault cluster on Kubernetes with auto-unseal via AWS KMS.
• Terraform-managed policies for AWS, GCP, and Kubernetes secret backends.
• Rotation policies tied to the workloads that consumed each secret.

Outcome

A unified secrets platform with consistent rotation, stronger audit trails, and a clean path for new services to onboard.