Michael Kehoe, Confluent
Making secrets both available and secure in a hybrid or multi-cloud environment is a challenging endeavor. How should you balance the security of the system that stores your secrets? What system(s) should you even choose?
Confluent is a multicloud SaaS provider that needs to secure hundreds of credentials across multiple clouds. This talk will detail how we created a strategy to store and serve these secrets securely and how we keep the auditors happy. The session outlines the process we took to understand our the needs of our engineers, what options we made available to our team, what controls did we put in place and how did we keep the auditors at bay.
Michael Kehoe, Confluent
![](https://www.usenix.org/sites/default/files/styles/speaker_photo/public/kehoe_michael_200x230_1.jpg?itok=vs3QWYke)
Michael Kehoe is an author, speaker and Sr Staff Cloud and Reliability Architect at Confluent, leading a whole organization initiative to redesign the company’s cloud platform. Previously, he was a Sr Staff Site Reliability Engineer (SRE) at LinkedIn, architecting LinkedIn’s move to Microsoft Azure. Before graduating with a Bachelor of Electrical Engineering from the University of Queensland (Australia), Michael interned at NASA Ames Research Center building small-satellites known as Phonesats.
While working at LinkedIn, Michael led the companies work on Incident Response, Disaster Recovery, Visibility Engineering & Reliability Principles. He has also been embedded with the profile, traffic, espresso (KV Store) teams. After leading LinkedIn’s last physical data-center build, he was the architect for how LinkedIn builds its infrastructure in Azure.
Michael has spoken at numerous events all over the world is the co-author of the book “Cloud Native Infrastructure with Azure” and “Reducing MTTD for High Severity Incidents”.
![](https://www.usenix.org/sites/all/modules/usenix/usenix_files/images/usenix-locked.png)
author = {Michael Kehoe},
title = {Multicloud and the Chamber of Secrets},
year = {2023},
address = {Singapore},
publisher = {USENIX Association},
month = jun
}