Tarandeep Singh focused on security hardening within the dell/cert-csi repository, delivering a feature that enforces stricter pod security contexts for Kubernetes workloads. He translated security requirements into concrete Go code, disallowing privilege escalation, enforcing non-root execution, and dropping unnecessary Linux capabilities to mitigate container vulnerabilities. By applying a runtime default seccomp profile, Tarandeep reduced the risk of misconfiguration and privilege escalation across deployment environments. He established a baseline security profile and integrated CI validation to ensure ongoing compliance. His work included thorough documentation and alignment of testing procedures, providing a robust foundation for secure, consistent certificate service operations.