About Brody Kilpatrick

Senior Architect - IT Security and Compliance at TPC Group | Automating Security & Compliance Houston, Texas, United States

Contact: brodykilpatrick@gmail.com · LinkedIn · GitHub

Primary Focus

Securely on-boarding AI. I lead the IT Technical AI Governance program at TPC Group - building the policies, lifecycle controls, risk-based assessments, and architecture reviews that let generative AI, LLMs, and AI agents get adopted without becoming the next unmanaged identity or data-exfiltration path. That covers non-human identities, service principals, OAuth and secrets management, privileged access, logging/monitoring, and keeping a human in the loop, on top of the more traditional Zero Trust, IAM, and vulnerability management work.

Top Skills

Automation · Root Cause Analysis (RCA) · Process Automation

(LinkedIn’s endorsed top skills, above. Broken out by area below, based on my actual work history.)

Security & Compliance: Enterprise Security Architecture · Zero Trust · Identity & Access Management · Vulnerability Management · Threat Hunting · Incident Response · SIEM / EDR (CrowdStrike Falcon, Microsoft Defender) · PKI · AI Security & AI Governance · IT/OT Cybersecurity · Compliance & Audit Support

Automation & Scripting: PowerShell · VBScript · System Center Orchestrator · Runbook Development

Microsoft Infrastructure: SCOM · SCCM · SCSM (Service Manager) · Active Directory · Entra ID · Exchange (Server & Online) · Group Policy · WSUS

Monitoring & Observability: SolarWinds Orion · Elastic Stack · SCOM Management Pack Development · SNMP / Syslog Monitoring · Capacity & Availability Reporting

Data & Reporting: SQL Server · SSRS · SSIS · Power BI

Cloud & Modern Workplace: Microsoft 365 · Azure · Entra ID

Certifications

• CompTIA Security+
• CompTIA Network+
• CompTIA A+
• Microsoft Certified Systems Administrator: Microsoft Windows 2000 Server (MCSA)
• Microsoft Certified Technology Specialist: Lync Server 2010, Configuring (MCTS)

Experience

TPC Group — 7 years 1 month

Security Architect - IT Security and Compliance October 2023 - Present (3 years) · Houston, TX

Senior Security Architect responsible for enterprise cybersecurity strategy, security architecture, IT security, compliance, risk management, AI security, AI governance, Zero Trust, identity and access management, vulnerability management, incident response, threat detection, security monitoring, endpoint security, vendor risk management, audit support, automation, and secure technology adoption within a critical-infrastructure environment.

Lead the IT Technical AI Governance program, developing AI policies, governance frameworks, lifecycle controls, risk-based assessments, architecture reviews, security standards, evidence requirements, approval workflows, AI inventory processes, and controls for AI systems, generative AI, Large Language Models, AI agents, non-human identities, service principals, APIs, OAuth, secrets management, privileged access, least privilege, logging, monitoring, resilience, and human oversight.

Design, implement, and support enterprise security controls across SIEM, EDR, endpoint privilege management, application control, email security, web application firewalls, host-based firewalls, PKI, secure file transfer, Active Directory, Entra ID, Microsoft 365, Azure, network security, infrastructure monitoring, alerting, and escalation. Perform security assessments, threat hunting, vulnerability remediation, exposure management, root cause analysis, incident investigation, security hardening, compliance tracking, and IT/OT cybersecurity architecture.

Technologies include Microsoft Defender, CrowdStrike Falcon, Cisco Secure Endpoint, Cisco Umbrella, Cisco Secure Email, BeyondTrust EPM, Elastic Stack, SolarWinds SEM, Serv-U, SCOM, SCCM, SCSM, Orchestrator, Exchange Online, Group Policy, AD Certificate Services, PagerDuty, Barracuda WAF, Postfix, Power BI, Copilot, ChatGPT, and enterprise AI APIs.

Senior IT Infrastructure Analyst | Systems Management, Monitoring and Automation September 2019 - October 2023 (4 years 2 months) · Houston, TX

Supported enterprise application infrastructure, systems management, IT operations, security monitoring, server monitoring, network monitoring, application performance monitoring, automation, patch management, configuration management, and operational reporting.

Administered and engineered Microsoft System Center Operations Manager (SCOM), System Center Configuration Manager (SCCM), WSUS, System Center Orchestrator, and SolarWinds Orion technologies including Network Performance Monitor, Server and Application Monitor, Virtualization Manager, Storage Resource Monitor, IP Address Manager, NetFlow Traffic Analyzer, Network Configuration Manager, and VoIP monitoring.

Designed monitoring for Windows Server, VMware, Exchange, Active Directory, DNS, DHCP, Certificate Services, SQL Server, SharePoint, Oracle, Hyperion, Essbase, IP.21, Maximo, LabWare LIMS, NetApp storage, Dell hardware, backup infrastructure, network devices, secure networks, and business-critical applications.

Developed SCOM management packs, synthetic transactions, custom monitors, alerts, dashboards, reports, notification workflows, escalation processes, capacity reporting, availability monitoring, performance monitoring, log collection, syslog integration, SNMP monitoring, ICMP monitoring, and agentless monitoring for unsupported systems.

Automated operational processes using System Center Orchestrator, PowerShell, scheduled scripts, APIs, Active Directory, and enterprise integrations.

Supported Exchange planning, PKI maintenance, Active Directory forest recovery planning, endpoint security deployments, Cisco Secure Endpoint, CrowdStrike Falcon, Windows Defender, secure FTP, ServiceNow integration, infrastructure reconciliation, root cause analysis, troubleshooting, change management, technical documentation, and ITIL processes.

Exterran — 4 years 7 months

Infrastructure Engineer, Sr. March 2015 - September 2019 · Houston, TX

• Migrated Exchange Server 2007 to 2013 and continued to provide Exchange Administrative services as the sole Exchange administrator; migrated from EoP to ProofPoint to provide malware and email protection.
• Customized and managed Forefront Identity Manager to provide automatic user provisioning, password registration/reset, and automatic synchronization between Oracle (HR) and Active Directory.
• Wrote numerous scripts and runbooks to reduce recurring manual work for employees throughout the company, both inside and outside of I.T.
• Managed and maintained Configuration Manager (SCCM) infrastructure while providing patch and compliance management.
• Created and deployed a global monitoring architecture to increase the reliability and stability of applications and services for Business Technology, Business Direct, Engineering, Financing, Inventory and Payroll.
• Implemented, customized, integrated, and maintained Service Manager (SCSM) and adjacent systems, such as Provance; developed processes around change management and IT Asset Management.
• Developed a correlation engine between SolarWinds Orion and Operations Manager that identified server and network device relationships to reduce time-worked by support personnel.
• Developed custom monitoring and automated recovery solutions to reduce time-worked by support personnel.
• Removed the need for a 24x7 NOC by automating monitoring, alerting, notifications, and incident creation through Operations Manager, Service Manager and Orchestrator.
• Gathered the proper data from the business that allowed executives to continually prove reliability and meet performance SLAs through extensive reporting metrics, historical trends, and forecasting.
• Led the Operations Engineering team, a specialized team that provides automation services, security and identity management, server/workstation monitoring and management, and data consolidation from multiple sources to provide accurate correlated data from disparate systems.

Sparkhound — 4 years 6 months

Core Infrastructure Consultant, Sr. October 2010 - March 2015 · Houston, TX

• Provided optimal solutions to IT and Business based on customer desires.
• Deployed and maintained Microsoft System Center solutions including configuration and customization of Service Manager, Operations Manager, Configuration Manager, Orchestrator, and Virtual Machine Manager.
• Created a fully automated lifecycle solution for private cloud management using Service Manager, Orchestrator, Virtual Machine Manager, Operations Manager, Configuration Manager, Hyper-V, and VMware.
• Gathered business and technical requirements from stakeholders to ensure accurate and successful solution and process implementation.
• Created extensive custom integration and customizations with System Center to automate originally-manual processes, such as user provisioning, oil rig moves, and administrative work.
• Developed SSRS Reports, SSIS packages, dashboards, and integrated SQL with various custom applications to provide data mining capabilities.
• Deployed, configured, and maintained SharePoint 2010 to provide a way for multiple business sectors to communicate and share marketing, billing, and gas flow data.
• Developed an integrated Google Maps solution that shows geographical gas flow, usage, and forecasting data.
• Provided data using SSRS that allowed a client to recover $2.1m from external customers.
• Provided extensive demonstrations and classroom training for users and administrators of System Center and other applications.

LyondellBasell — 2 years 1 month

Operations Services Enterprise System Technologist, Sr. March 2009 - October 2010 (1 year 8 months) · The Woodlands, TX

Developed enterprise monitoring and automation solutions that enabled IT support teams to maintain 24x7 availability of infrastructure and mission-critical business applications.

Translated customer requirements into monitoring configurations for servers, network devices, LAN/WAN infrastructure, and enterprise applications using Microsoft System Center Operations Manager (SCOM) 2007 R2, System Center Configuration Manager (SCCM), HP Network Node Manager (NNM), HP OpenView Performance Insight (OVPI), SolarWinds Orion Network Performance Monitor, and CiscoWorks.

Configured and supported SCOM management packs, rules, monitors, discoveries, overrides, synthetic transactions, notifications, automated tasks, and third-party integrations. Developed VBScript and PowerShell solutions for Exchange, Active Directory, SAP, SQL Server, and other enterprise applications.

Administered HP NNM, HP OVPI, SolarWinds Orion, SCCM, inventory management, patch management, agent deployment, Desired Configuration Management, MIBs, SNMP polling, network discovery, website permissions, maps, dashboards, and performance reporting.

Created custom SSRS reports, SAP BusinessObjects reports, dashboards, KPIs, capacity reports, network statistics, trend analysis, and forecasting solutions. Queried and analyzed data from SCOM, SCCM, DCM, HP NNM, HP OVPI, HP SIM, StealthAUDIT, Citrix, SharePoint, BMC Remedy, SolarWinds Orion, and internal databases.

Integrated enterprise monitoring platforms using VBScript, PowerShell, SQL Server Integration Services (SSIS), native APIs, email, and third-party connectors to provide centralized, single-console monitoring.

Delivered automation, monitoring integration, reporting, and process improvements that saved thousands of labor hours and hundreds of thousands of dollars annually.

Operations Center Analytical Engineer, Sr. October 2008 - March 2009 (6 months) · The Woodlands, TX

• Primary responsibility: maintain a robust and efficient infrastructure through constant data mining, proactive monitoring, and root-cause analysis of servers, workstations, network, and all interconnecting applications and software.
• Collaborated with worldwide engineers and technicians in order to resolve complex issues and provided proactive solutions to prevent future problems and maintain a healthy infrastructure.
• Worked under very little supervision with a team of analytical engineers and reported to management on a weekly basis with progress, number of issues found, and new tasks being pursued.
• Administered System Center Operations Manager 2007 for an environment of 1,300 servers including management pack development, rule and monitor creation, synthetic transaction creation, group and subscription management and maintenance, and created custom solutions as needed through the use of custom VBScript.
• Created custom System Center Operations Manager 2007 solutions such as automation tasks for file deletion to maintain a healthy amount of disk space, application validation, and other scenarios as needed by other teams and customers.
• Fine-tuned System Center Operations Manager 2007 by reducing the impact of rules, monitors, and discoveries through removing unnecessary items, tuning events and alerts, tuning performance sample frequency, removing unnecessary discoveries, and reducing discovery intervals.

Stewart Title — 2 years 8 months

Enterprise Management Center (EMC) Systems Analyst III August 2007 - October 2008 (1 year 3 months) · Houston, TX

Primary responsibility: deployment, configuration, and administration of enterprise monitoring applications, SSRS reporting, database solutions, automation, and new process development within a complex Microsoft-based infrastructure.

Worked with NOC engineers, systems administrators, and systems operators to support enterprise infrastructure and 24x7 operations.

Independently deployed and configured HP Business Availability Center 7.0 for website, .NET, Java application, availability, performance, load, and end-user experience monitoring. Developed synthetic business transactions using Mercury LoadRunner scripts to measure service availability, performance, business impact, and risk.

Deployed Stealthbits StealthAUDIT to support auditing and compliance across approximately 8,000 global servers. Automated data collection, scheduled queries, compliance reporting, and daily operational tasks. Designed and maintained CMDB, asset management, IP address management, availability tracking, and executive reporting applications using SQL Server 2005 and Iron Speed Designer.

Configured and supported HP OpenView Performance Insight, HP Network Node Manager, System Center Configuration Manager, MOM 2005, and System Center Operations Manager 2007. Performed management pack development, custom rule and monitor creation, database maintenance, platform migration, software deployment, patch management, Asset Intelligence, and Desired Configuration Management.

Administered SQL Server 2000/2005 databases supporting MOM, SCOM, HP SIM, HP BAC, SCCM, and Microsoft ACS. Developed SQL Server, Oracle, SOLID DB, and Sybase queries for reporting, analysis, and data manipulation.

Configured SSRS servers, websites, dashboards, and reports. Developed more than 80 production reports and 100 ad hoc reports covering performance, availability, security, compliance, historical trends, and operational analytics for engineers, managers, directors, and end users.

Enterprise Management Center Engineer March 2006 - August 2007 (1 year 6 months) · Houston, TX

• Primary responsibility: ensure the reliability and stability of 1,400 production servers and 1,100 switches, routers, and firewalls across four datacenters in more than 1,000 office locations.
• Utilized Microsoft Operations Manager to proactively monitor complex infrastructure system metrics and security events.
• Utilized Orion, VERITAS NetBackup, Mercury Change Control System, HP Systems Insight Manager, Ecora, and ERDisk to proactively monitor, troubleshoot, and resolve issues for servers, websites, applications, storage/backups, and LAN/WAN devices across a world-wide infrastructure.
• Utilized SESD Magic Service Desk and Phaseware trouble ticketing system to track ongoing reports and service requests through to completion.
• Provided input and feedback on NOC processes and tools in order to drive forward the refinement of better tools and procedures to provide world-class service to customers while maintaining company standards.
• Troubleshot, diagnosed, and repaired Windows servers and hosted applications.
• Performed enterprise patch deployment via Bigfix; quickly troubleshot and resolved patching related issues while still inside the patch window in order to allow servers to comply with security standards.
• Provided server compliance reports to all engineers in order to help keep the infrastructure intact and in line with auditing and compliance standards.

Geek Squad — 8 months

Central Intelligence Agent October 2005 - May 2006 · Lufkin, TX

• Troubleshot, diagnosed, installed, upgraded, configured, and repaired computer systems and implemented home/office network systems.
• Installed and interfaced computer hardware including multimedia, memory, and video components and systems.
• Worked with a team of 7 technicians repairing computer systems on a technical bench while maintaining a 48 hour turn-around.
• Trained new employees in a standard operation platform in order to reduce time spent on tasks and increase effectiveness and productivity.
• Worked with management to reduce turn-around and increase sales by exploiting customer bias, product type, season, and location.
• Represented Geek Squad in a professional manner; instrumental in being an effective team leader.

Education

Panola College Associate of Science (AS), Business/Managerial Economics · August 2003 - May 2005

This page mirrors my LinkedIn profile. For hands-on scripts, notes, and write-ups from across this career, see the Blog.