Open To Work
Todd Ilk
Denver
Summary
Seasoned Information Security Architect with 27 years in IT and 8 years in cybersecurity. Specializes in enhancing security through architecture reviews, policy revisions, and incident response strategies. Develops security programs aligned with NIST and HIPAA regulations to ensure compliance and protection. Collaborates with cross-functional teams to strengthen security measures and support business objectives.
Overview
27
27
years of professional experience
1
1
Certification
Work History
Senior Security Engineer
Renown Health
Reno
11.2024 - 04.2026
- Designed, built, and implemented enterprise-class security systems to enhance protection.
- Developed security architecture elements to mitigate evolving threats.
- Identified and communicated current and emerging security threats to stakeholders.
- Developed security architecture elements to mitigate evolving threats.
- Balanced business requirements with information and cyber security needs in solutions.
- Recommended changes to address security design gaps in architectures.
- Acted as liaison between information security and IT architects for effective collaboration.
- Trained users on implementation or conversion of security systems.
- Utilized various applications including PING MFA, Silverfort, and SentinelOne to enhance security measures.
Information Security Architect
Ascend Clinical
Denver
07.2022 - 07.2024
- Oversaw day-to-day operations of all IT security-related applications and operations.
- Daily review of logs and applications including CrowdStrike MDR, Barracuda Email Protection, Palo Alto Firewall, Microsoft Security applications, and DUO MFA.
- Developed security program including phishing email campaigns as well as co-producing quarterly Cyber Security training with the Compliance Officer.
- Executed bi-monthly phishing campaigns and presented analysis of results to management to inform security strategy.
- Developed monthly metrics reports aggregating logs and insights from IT applications, enhancing departmental visibility.
- Created new IT policies and procedures and revised existing ones using NIST and ISO standards.
- Created the Information System Response and Disaster Recovery Plan and corresponding documentation.
- Worked with Compliance Officer to ensure HIPAA and other regulatory compliance.
- Respond to security incidents and events in a timely manner and minimize the network disruption or downtime.
- Oversaw incident response initiatives, documenting events and findings to strengthen organizational security posture.
- Initiated and coordinated Penetration Testing with outside 3rd party vendor to provide a current baseline for organization’s security posture.
- Worked with Microsoft 3rd party vendor to test and review the Microsoft O365 environment.
Security Engineer
Herjavec Group
Denver
06.2021 - 07.2022
- Managed MDR/XDR consoles such as SentinelOne, Carbon Black Cloud, Carbon Black EDR, CrowdStrike, and others in a global Managed Security Services platform.
- Provided leadership and guidance for managed services customers globally from a Multi-Tenant perspective or individual instances of MDR consoles.
- Led a group of two engineers and five tier 2 data analysts involved with the daily activities of MDR functions.
- Conducted investigations on events, agent updates, migrations, and customer environment assessments.
- Created and managed API keys for SIEM, SOAR, and other necessary connections for automated access.
- Coordinated project to provide reporting from Splunk, enhancing MDR customers' awareness and management of their security consoles.
- Led efforts to improve cross-department cooperation in order to increase customer satisfaction with their managed service.
Data Security Specialist
Centura Health
Englewood
04.2018 - 06.2021
- Achieve and maintain compliance with HiTrust, PCI, and other healthcare regulatory standards.
- Enforced Centura Health security policies through training, audits, and compliance checks.
- Conducted training sessions to elevate security awareness and improve operational capabilities among staff.
- Assist with creating new standard deployment methodologies for security infrastructure. Provide situational training and knowledge transfer for related security events.
- Reviewed and responded to internal security issues and change requests, ensuring timely resolution through HPSM.
- Use of Splunk and LogRhythm to evaluate Centura Health security infrastructure logs and reports for incidents.
- Use of Palo Alto and Websense for web content filtering and DLP protection.
- Use of Mimecast and Forcepoint for email content management and DLP protection.
- System Administrator for Carbon black for protection deployment strategies and whitelisting.
- System Administrator for Sentinel One for Endpoint Protection and Threat Hunting.
- System Support for Cisco Stealthwatch, and ISE integration.
- Provide direction and approval for Centura Health infrastructure network design process TEQs. Conduct security audits of infrastructure networks, servers, workstations, and other systems as well as HR directed investigations utilizing various investigatory tools.
- Provide forensic analysis and evaluation of possible incidents related to infrastructure devices. Identity Access Management for account provisioning and maintenance through SailPoint.
Regional Building IT Specialist
Comtech LLC Embedded at GSA
Denver
11.2015 - 04.2018
- Obtained HSPD12 security clearance to access secure government facilities.
- Facilitated regional projects to upgrade and install new equipment for building automation systems, enhancing system functionality.
- Planned WAN and LAN designs for fiber networks within the region.
- Troubleshot connectivity issues among LAN devices, servers, and switches to ensure reliable network performance.
- Upgraded and expanded building automation network systems and their components. Designed and implemented networks in collaboration with project engineers.
- Participate in the installation of new switches within the region.
- Reviewed logs for networking devices, identifying and resolving abnormalities to maintain operational integrity.
- Heavy use of Solar Winds tools for gathering information related to network switches.
- Create Visio Riser diagrams for buildings and included equipment.
- Manage multiple projects in several states at one time.
- Supported region includes Colorado, Utah, North Dakota, South Dakota, Wyoming, and Montana.
- Developed an understanding of the US Government network and infrastructure.
IT Support Administrator III
XO Communications
Lone Tree
04.2015 - 11.2015
- Utilized remote tools to assist users in software installation and troubleshoot issues, enhancing user support efficiency.
- Work with users based in Denver and Lone Tree offices on Desktop and Application Support
- Use SCCM remote control viewer and Dame Ware remote tools to connect to users' computers.
- Accessed multiple network servers remotely to retrieve necessary files for software installation.
- Use command line instructions to change permissions and install items via network command lines
- Identified problems and initiated service requests for maintenance on Xerox copiers and printers.
- Inspected computers and servers during McAfee malware infections to assess damage and implement recovery actions.
- Functioned as backup server administrator for McAfee EPO and SIEM systems, supporting the consistency of security management.
- Use Lync Group Chat to communicate with team members across the US
Contract Database Maintenance
American Society of Farm Managers and Rural Appraisers
Denver
10.2014 - 04.2015
- Recorded continuing education units for members in database, ensuring accurate tracking of professional development
- Cleaned database using web-based interface to verify accuracy of member and nonmember class data
- Test the new Community system in a test environment with relational data by configuring situations and running cron jobs for testing
- Resolved minor computer and copier/printer issues, maintaining operational efficiency
Network Analyst/ IT Pro II
Colorado Department of Education
Denver
06.2006 - 09.2014
- Use of VSphere/VMWare for VM server and desktop management
- Use of Microsoft SCCM, formerly SMS, (SMS SCCM 2007 and 2012) to capture WIM Images, customize OS builds, deploy the customized OS images
- Customize software deployments such as Flash, Java, Adobe Reader, and iTunes
- Use SCCM to provide remote user support
- Provided support to over 1000 endpoints with SCCM including computers, servers, iPads, iPhones, and android phones
- Upgraded servers from SCCM 2007 to 2012 for improved performance.
- Employed Orca to tailor MSI file configurations, ensuring effective deployment processes.
- Research multiple sources for solutions to OS issues and apply fix or determine if reimaging system is more effective
- Managed asset tracking and procurement of computers for employee onboarding and annual replacements, ensuring timely availability of resources.
- Oversaw software asset management and ensured accurate tracking and updates.
- Work with Network Administrators, both Windows and Red Hat (Oracle), to troubleshoot issues related to the PC's and in-house built applications
- Provide desktop support and other server related program support for over 650 users both onsite and remote following established OIT security guidelines
- Installed and configured Microsoft Azure Two Factor Authentication system for VPN access and OTP pin authentication, enhancing security protocols.
- Developed Helpdesk SLAs to streamline support processes for CDE help desk employees.
- Updated the Biscom FTP system to the newest version including working with the Linux admin to install, configure, and test the new FTP transfer system
- Managed the Lyris Listserv system including the creation of new lists and modifications of old settings and trainings for staff on using the system
- Employed Numara Footprints Helpdesk system for logging user issues, tracking resolutions, and communicating updates.
- Created the CDE Help desk Procedures Manual that provides the basics for most all functions of the Helpdesk position at CDE
- Conducted training for new Helpdesk hires and temporary staff on project-specific tasks.
- Knowledge of Microsoft Server 2003 through 2012 as CDE had a mixed environment
- Began process of upgrading the Domain structure from AD 2003 to AD 2012
- Managed a single domain structure due to CDE's unique complications.
- Developed and executed a new Active Directory structure at CDE and established Group Policies for its management.
- Experience in use of AD 2003 through 2012 to create and manage users and groups
- Use of AD to create and deploy software and group policies
- Created and maintained the Group policies for the AD structure as well as for network file and printer access
- Created and maintained security groups within AD for user access to network resources
- Responsible for the creation and configuration of user accounts based on previously established guidelines
- Experience using Windows PowerShell and Quest PowerShell tools for AD operations and data retrieval
- Worked with the Oracle Contractors and build PowerShell scripts to find users with no email, move them to new AD directory and then add email address based on AD information
- Functioned as backup administrator, ensuring proper maintenance of DNS and DHCP scopes at CDE.
- Reviewed logs for all networking devices for unresolved abnormalities and problems
- Upgraded and expanded network systems and their components
- Monitored system logs for all company computers and devices to maximize uptime
- Completed remote repairs involving software solutions and hardware repairs
- Served as a liaison between the user community and software providers
- Defined security requirements for computer systems, including mainframe, workstations and personal computers
IT Manger/ Sales
Meadowcreek Truck Supply
Denver
05.1999 - 06.2006
- Managed day-to-day operations and maintenance of networks in Denver and Salt Lake City, overseeing phone and IT systems while liaising with web design company for retail and wholesale website implementation.
- Designed computer network and phone system architecture for new location.
- Facilitated relocation of computer and phone networks to new location, ensuring minimal disruption to operations.
- Researched and setup of web hosting and online data backups with Data 393.
- Designed data architecture for new websites using Precis software.
- Transferred database and software from Windows 2000 server to 2003 server.
- Implemented change of integrated shipping software from UPS to Fed Ex.
- Continued with sales duties and provided Assistant Manager support for sales team.
- Designed original Meadow Creek website.
- Troubleshoot all technical issues with PCs, computer network, and phone system network.
- Resolve issues with software architecture and security.
- Assist end users with various problems with PC and software.
- Act as main contact for vendor issues and negotiation of contracts.
- Maintained and repaired network equipment and printers.
- Provide customer service and support for customers placing orders and conflict resolution when customer complaints escalated.
- Delivered PC tech support for Denver and Salt Lake City offices, resolving issues to maintain user productivity.
- Work with Carrera Software Company for installation and operation of integrated UPS shipping software with SBT database software.
Education
Associate of Science - Firearms Technology
Sonoran Desert Institute
Tempe, AZ02-2026
Master of Science - Information Technology
University of Denver
Denver, CO06-2021
Bachelor of Science - Information Technology
University of Phoenix Lone Tree Campus
Lone Tree, CO05-2004
Skills
- Security architecture
- Incident response management
- Incident response
- Vulnerability assessment
- Threat mitigation
- Cybersecurity compliance
- Risk assessment
- Security protocols
- Access control
- Identity management
- Endpoint security
- Intrusion detection
- Intrusion detection systems
- Two-factor authentication
- User training
- Cybersecurity training
- Security awareness training
- Project management
- Problem-solving
- Analytical skills
- Problem-solving aptitude
- Incident troubleshooting
Certification
- Internet Systems Security Certification, Denver University, 06/01/18
- Microsoft Defender XDR Ninja Training, Online @ Microsoft.com, 01/01/24
- Certification of Cloud Security Knowledge, Online @ Cloudsecurityalliance.org, 01/01/24
- Amazon Web Services (AWS) Security Certification, Online @ Amazon.com, Ongoing
Timeline
Senior Security Engineer
Renown Health
11.2024 - 04.2026
Information Security Architect
Ascend Clinical
07.2022 - 07.2024
Security Engineer
Herjavec Group
06.2021 - 07.2022
Data Security Specialist
Centura Health
04.2018 - 06.2021
Regional Building IT Specialist
Comtech LLC Embedded at GSA
11.2015 - 04.2018
IT Support Administrator III
XO Communications
04.2015 - 11.2015
Contract Database Maintenance
American Society of Farm Managers and Rural Appraisers
10.2014 - 04.2015
Network Analyst/ IT Pro II
Colorado Department of Education
06.2006 - 09.2014
IT Manger/ Sales
Meadowcreek Truck Supply
05.1999 - 06.2006
Associate of Science - Firearms Technology
Sonoran Desert Institute
Master of Science - Information Technology
University of Denver
Bachelor of Science - Information Technology
University of Phoenix Lone Tree Campus