Case Study: Paddy Power Betfair automates PKI and cuts certificate deployment time with HashiCorp Vault

Automating PKI Paddy Power Betfair's Journey with Vault

Paddy Power Betfair, part of Flutter, operates a hybrid cloud environment with roughly 20,000 on-prem VMs and a growing AWS footprint, supporting about 1,200 applications and around 4,000 TLS certificates. Their previous certificate process was highly manual, error-prone, and time-consuming, requiring DevOps, networking, and validation teams to coordinate certificate issuance, deployment, and renewal.

To solve this, Paddy Power Betfair used HashiCorp Vault, specifically its PKI backend, to automate both internal and public certificate management through version-controlled roles, pipelines, and custom automation for keystores, truststores, load balancers, and cloud environments. With HashiCorp Vault, certificate deployment dropped from about a week and multiple teams’ effort to roughly an hour for first-time setup, with subsequent renewals becoming mostly a button click, while also reducing security risks tied to manual handling and long-lived certificates.

Paddy Power Betfair

Cristian Iaroi

Principal DevOps Engineer