Security Engineering Patterns

PKI, Vault, EAP-TLS, secrets management — security patterns from production deployments. Every entry has a date and context proving it works.

Domains

Domain Focus

PKI & Certificates

Certificate issuance, chain splitting, verification, OpenSSL patterns

Vault Operations

SSH certificate signing, secret access, Vault PKI workflows

EAP-TLS

802.1X certificate authentication, nmcli configuration, ISE integration

KQL & Sentinel

KQL query patterns, Microsoft Sentinel investigation workflows

Secrets Management

gocryptfs, gopass, age encryption, credential lifecycle