FleetIQ

DevOps, Security · Fleet IoT

Four hundred vehicle gateways phoning home over mutual TLS. I rolled out a zero-trust service mesh with automated certificate rotation and fleet-wide patching in one maintenance window.

400Gateways secured

1Maintenance window

90 daysAuto cert rotation

The challenge

Four hundred edge gateways with expiring certificates, manual patching, and flat network trust — a single compromised device away from a fleet-wide incident.

How I approached it

Zero-trust service mesh with mutual TLS on every gateway
Automated 90-day certificate rotation with renewal monitoring
Fleet-wide patching staged through canary device groups
Single-window rollout with instant per-device rollback

The outcome

All 400 gateways secured in one maintenance window, with rotation and patching fully automatic ever since.

Stack: Service mesh · mTLS · OTA patching · Device canaries

Back to all work Back to home Next: EduLaunch