Creating internal RPM build environment?

I'd like to create an internal RPM build standard. I'm hesitant to just create RPMs and throw them out there and I don't want others in my org doing that either.

Can anyone provide a resource for setting up and maintaining such an environment? I would like to, eventually, leverage some continuous integration to ensure that RPMs are built properly and tested before release, too. But that is down the road.

So, I guess, package signing and maintaining keys. How to create (and recreate) a clean RPM build environment. Things like that.

Thanks.