EST Certificate Management

Overview

Production PKI infrastructure for an enterprise healthcare company: an EST (Enrollment over Secure Transport, RFC 7030) certificate-management service that automates certificate issuance and rotation across internal microservices.

What I did

• Led end-to-end development: design, implementation, deployment.
• Automated issuance, renewal, and rotation, removing manual certificate handling for service teams.
• Containerized with Docker and deployed on Kubernetes; built for enterprise security review and audit requirements.

What I'd highlight

This is regulated-industry (healthcare) production infrastructure: the constraint set (compliance, zero-downtime rotation, legacy interop) shaped the design as much as the protocol did.