Swetha Srinivasan, Google
Modern key management is a core SRE challenge, demanding verifiable control, continuous compliance, and a ready pipeline for emergency key rotations. Most large-scale systems fail to meet the strict SLOs and non-repudiable audit trails required by regulators and incident response teams.
Drawing from experience in the world’s most stringent regulatory environments, this talk presents an SRE framework for building and operating "compliance-native" cryptographic systems. We deconstruct common failure modes in high-stakes operations like root key rotation, especially when driven by external triggers.
Attendees will learn generalizable architectural patterns, including public key distribution and monitoring for identity keys. Discover how infrastructure built for deliberate compliance becomes your fastest tool in a security incident. This is for SREs and security architects moving beyond simply using cryptographic tools to guaranteeing the reliability and compliance of critical key management workflows.
Swetha Srinivasan is a Staff software engineer at Google with over a decade of experience in computer software, specializing in Cloud Infrastructure Security and Cybersecurity, with expertise spanning cryptography, secure coding, and systems design. She holds a Master's degree in Electrical and Computer Engineering from the University of Wisconsin-Madison and a Stanford Advanced Computer Security Certificate. At Google, she led critical projects such as Key Rotation for Google Sovereign Cloud and ensuring reliability while enforcing Boot Integrity on Google Production machines. Prior roles included contributing to security features like TPM attestation and key management at VMWare, and optimizing OS capabilities at Intel.
author = {Swetha Srinivasan},
title = {Operationalizing Key Management for Regulatory Compliance and Emergency Response},
year = {2026},
address = {Seattle, WA},
publisher = {USENIX Association},
month = mar
}
