Secret management
Securely store and distribute API keys, database passwords, certificates — and rotate them regularly.
Tools: HashiCorp Vault, AWS Secrets Manager, Doppler, 1Password Secrets Automation, Kubernetes Secrets. Never hardcode secrets in code or .env files that get committed. Audit log of who read what.