A DevSecOps engineer or cloud security architect needs to design or audit the secrets management architecture for a cloud-native application environment — covering how secrets are stored, rotated, injected into workloads, and audited across Kubernetes, serverless functions, and CI/CD pipelines — to eliminate hardcoded credentials and meet SOC 2 or PCI DSS requirements.