Worked on security hardening for the dell/cert-csi repository, focusing on translating security requirements into enforceable changes that reduce risk in Kubernetes environments. Implemented stricter pod security contexts by disallowing privilege escalation, enforcing non-root execution, dropping unnecessary capabilities, and applying a runtime default seccomp profile. These updates, developed in Go and leveraging Kubernetes security primitives, mitigate vulnerabilities related to container misconfiguration and privilege escalation. Established a baseline security profile and integrated CI validation to ensure ongoing compliance with new standards. Documented the changes and aligned testing procedures, supporting consistent enforcement and operational clarity for future deployments of the certificate service.