Do you have any suggestions for the key management strategy?

For the key management strategy, you can use Tatum KMS (Key management system). KMS runs locally on your server and provides security for generating wallets, addresses, and private keys, and signing transactions securely. Tatum has separate documentation for key management. check here Tatum Key Management System (KMS).