Worked on security-focused improvements for entitlement key management in CI/CD pipelines, delivering two features across the ibm-mas/python-devops and ibm-mas/cli repositories. Refactored Python-based DevOps tooling and CLI workflows to migrate entitlement key handling from Tekton pipeline parameters to Kubernetes secrets, leveraging Infrastructure as Code and YAML for configuration. This approach reduced the risk of secret exposure, improved auditability, and enabled more robust secret rotation. The changes involved updating pipeline and task definitions, as well as CLI modules, to securely inject sensitive data, thereby enhancing the overall security posture and maintainability of secret management within the deployment process.