Using certificates for SSH authentication

Indeed Vault does - https://developer.hashicorp.com/vault/docs/secrets/ssh/si.... I've never used that engine, but we use it for lots of other things. Since it also has a wide variety of authentication methods, you can configure it in a way that fits your organization.