diff --git a/.config/dotnet-tools.json b/.config/dotnet-tools.json
new file mode 100644
index 00000000000..bb75cfd04e7
--- /dev/null
+++ b/.config/dotnet-tools.json
@@ -0,0 +1,12 @@
+{
+  "version": 1,
+  "isRoot": true,
+  "tools": {
+    "microsoft.dnceng.secretmanager": {
+      "version": "1.1.0-beta.21380.2",
+      "commands": [
+        "secret-manager"
+      ]
+    }
+  }
+}
\ No newline at end of file
diff --git a/azure-pipelines-weekly.yaml b/azure-pipelines-weekly.yaml
new file mode 100644
index 00000000000..d12432a1580
--- /dev/null
+++ b/azure-pipelines-weekly.yaml
@@ -0,0 +1,36 @@
+schedules:
+- cron: 0 12 * * 1
+  displayName: Weekly Monday build
+  branches:
+    include:
+    - main
+  always: true
+
+name: $(Date:yyyMMdd)$(Rev:rr)
+stages:
+  - stage: SynchronizeSecrets
+    jobs:
+    - job: Synchronize
+      pool:
+        vmImage: windows-2019
+      steps:
+      - task: UseDotNet@2
+        displayName: Install Correct .NET Version
+        inputs:
+          useGlobalJson: true
+
+      - task: UseDotNet@2
+        displayName: Install .NET 3.1 runtime
+        inputs:
+          packageType: runtime
+          version: 3.1.x
+
+      - script: dotnet tool restore
+
+      - task: AzureCLI@2
+        inputs:
+          azureSubscription: DotNet Eng Services Secret Manager
+          scriptType: ps
+          scriptLocation: inlineScript
+          inlineScript: |
+            Get-ChildItem .vault-config/*.yaml |% { dotnet secret-manager synchronize $_}