Federal Tech Podcast: for innovators, entrepreneurs, and CEOs who want to increase reach and improve brand awareness
The federal government spends $90 billion on technology every year. If you are a tech innovator and want to expand your share of the market, this is the podcast for you to find new opportunities for growth. Every week, Federal Tech Podcast sits down with successful innovators who have solved complex computer system problems for federal agencies. They cover topics like Artificial Intelligence, Zero Trust, and the Hybrid Cloud. You can listen to the technical issues that concern federal agencies to see if you company’s capabilities can fit. The moderator, John Gilroy, is an award-winning lecturer at Georgetown University and has recorded over 1,000 interviews. His interviews are humorous and entertaining despite handing a serious topic. The podcast answers questions like . . . How can software companies work with the federal government? What are federal business opportunities? Who are the cloud providers who work with the federal government? Should I partner with a federal technology contractor? What is a federal reseller? Connect to John Gilroy on LinkedIn https://www.linkedin.com/in/john-gilroy/ Want to listen to other episodes? www.Federaltechpodcast.com
info_outline
Ep. 254 How QTS Is Powering Digital Transformation for Federal Data Centers
07/01/2025
Ep. 254 How QTS Is Powering Digital Transformation for Federal Data Centers
Seventy percent of the world's internet traffic goes through Ashburn, Virginia. That fact has led to the growth of over five hundred data centers in Northern Virginia. Today, we sat down with one of those companies to examine its data centers and its relationship with the federal government. John Reynolds is the Director of QTS Federal. He has decades of experience in federal technology and provides the listener with an overview of QTS's origins, its values, and recent growth. He views the data center business as a real estate endeavor. Land is acquired, a facility is constructed, and it has occupants. A company like Amazon Web Services have their dedicated data centers; QTS can house several different customers. We do not know the specific names; we can assume they are as large as Facebook and encompass federal agencies of all types. Facebook may require one set of standards when it comes to security, and the NIST provides guidelines for federal data protection, which QTS includes as part of its compliance. The company participates in the community and understands the impact of energy requirements and cooling for local communities. John Reynolds highlights the importance of resilience with multi-layered power redundancy and advanced energy contracts. QTS is also expanding into Europe and exploring alternative power sources due to grid limitations.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/37069070
info_outline
Ep. 253 Managing Staff Cuts Without Compromising Code Security in Federal IT
06/25/2025
Ep. 253 Managing Staff Cuts Without Compromising Code Security in Federal IT
Connect to John Gilroy on LinkedIn Want to listen to other episodes? There is a whirlwind of change in federal technology. For example, Federal News Network has reported that 25% of the IRS technology staff have left. Additionally, funding has been reduced, data stores are increasing, and we are all trying to understand the impact of Artificial Intelligence. Today, we sat down with Phoebe Nerdahl and Sayed Said from SNYK. They offer solutions to address the challenges of changing technology in this environment. The approach from SNYK is to start at the beginning of the code development process, what is called a shift left. They discussed the need for a secure framework for AI adoption, leveraging Snyk's proprietary database and security research team to enhance code security. The conversation also touches on the evolving definition of AI and its integration into various applications. Snyk's AI Trust Platform aims to protect against insecure AI-generated code, emphasizing continuous security monitoring and automation. They have a vulnerability database, which enables them to review code for potential issues. Further, their platform can automate this needed remediation.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/37023655
info_outline
Ep. 252 From Legacy to Lean: Innovative Ways to Lower Costs in Federal IT Projects
06/24/2025
Ep. 252 From Legacy to Lean: Innovative Ways to Lower Costs in Federal IT Projects
Connect to John Gilroy on LinkedIn Want to listen to other episodes? Gregory Garrett, Chief Operating Officer at REI Systems, discussed digital transformation and innovation at the AWS summit in Washington, DC. He has a fascinating background that includes a career as a fighter pilot, the publication of twenty-four books, and guest lecturing at Georgetown University. The stated goal of today's administration is to reduce costs and eliminate waste. Today's aging systems are prime candidates for innovation. Unfortunately, there is no "innovation" button that a federal leader can press to have a variety of suggestions at their fingertips, allowing them to choose the best alternatives for improvement. He has applied all this experience in dealing with talented software developers by organizing a competition for new ideas. It is REI's "REI Innovation Competition," which generated over 100 white papers and led to a proof of concept for government agencies. From REI's perspective, digital modernization must address issues such as legacy systems, code revision, and improved code documentation. As a case in point, Gregory Garrett reviews the success REI has had in the federal grants management program. During the interview, he delves into topics such as quantum computing and interoperability. Listen to the perspective of a digital leader who can extract innovation and leadership out of highly skilled software professionals.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/37023515
info_outline
Ep. 251 Breaking Through Bureaucracy: Modernizing Federal Systems in an Era of Digital Urgency
06/19/2025
Ep. 251 Breaking Through Bureaucracy: Modernizing Federal Systems in an Era of Digital Urgency
Connect to John Gilroy on LinkedIn Want to listen to other episodes? Many of today’s archaic federal systems have been built over decades. As a result, they are perfected but also fragile. One obvious source of vulnerability is the workforce that created it. It is hard to believe that COBOL was released in 1960 and is still active in some federal systems. The individuals who developed the code for these systems are now long past retirement age. Some code was accurately documented, and some were not. As a result, the process of transferring to a newer environment is fraught with concern. Until AI, the only way to understand the underlying code was for a human being to review it line by line. Everyone realized that this process was so tedious and time-consuming that an informal policy emerged, essentially patching the system. They kicked the can down the road for the next generation. Well, AI is her. It has the unique ability to review code, identify problems, and provide solutions quickly. This will drastically reduce the risk of moving antiquated systems from aging code systems. Today, we sat down with Kartik Mecheri from Karsun Solutions and Alan Thomas, former Commissioner of GSA FAS. During the interview, they offered suggestions on how best to accomplish the challenging task of digital modernization. Kartik emphasizes the value of a platform like ReDuX. Utilizing Amazon’s Bedrock, ReDuX allows system developers to create a blueprint for the existing system. When combined with humans, this platform will save money on maintaining older systems and bring much-needed flexibility to new applications. Listen to learn how Karsun Solutions can reduce costs, increase flexibility, and improve efficiency in the process of digital modernization. The conversation also touched on the challenges of mission-critical systems, the role of AI in reducing risk, and the evolving job market, suggesting a shift towards strategic and innovative roles.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/37023210
info_outline
Ep. 250 Can Your Agency Withstand a DDoS Attack? How Radware is Raising the Bar
06/18/2025
Ep. 250 Can Your Agency Withstand a DDoS Attack? How Radware is Raising the Bar
Connect to John Gilroy on LinkedIn Want to listen to other episodes? How do you defend your website against an attack that can reach one hundred million requests a second? The federal government is in an unusual position: in addition to the "garden variety" attacks, such as phishing and ransomware, it is also subject to political attacks with a specific agenda. Ostensibly, they do not have financial motivation; their motivation is a political statement. Welcome to hacktivism. The tool they use is a tried-and-true, good, old-fashioned Distributed Denial of Service (DDoS) attack. If you consult your history books and shake off the dust, you will find that the first DDoS attack was recognized in 1996. Advances in cloud computing and AI have been a force multiplier for malicious actors to shut down websites. In the past, the attacker would remain anonymous; not today. Today's hacktivist often claims responsibility for the attack and publicize their demands. It has gotten to the point where DDoS attacks are available to consumers as DDoS-as-a-service. Pascal Geenes has authored an article about a particularly nasty DDoS attack, appropriately called "DieNet." It attempts to instill doubt and chaos in a federal site. What is the defense? Pascal Geenes has identified vulnerabilities in APIs as a key attack vector. Many federal agencies are not aware of their API inventory. It is possible to scan a federal site, identify a flaw in an unused API, and leverage that knowledge to launch a DDoS attack. Radware's solutions, including AI-driven security, help mitigate these attacks quickly, reducing the mean time to resolution (MTTR). Heenan emphasizes the importance of being initiative-taking in cybersecurity. = = =
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36889465
info_outline
Ep. 249 Securing Endpoints in Federal Systems Amid Constant Change
06/17/2025
Ep. 249 Securing Endpoints in Federal Systems Amid Constant Change
Connect to John Gilroy on LinkedIn Want to listen to other episodes? Sometimes, one plus one is three. Back in 2021, McAfee’s Enterprise business merged with FireEye to form Trellix. Today, the net result is a company that generates $1.2 billion globally and $400 million in the public sector. In today’s interview, Ken Karsten details how federal leaders can use Trellix to improve cybersecurity in a federal world with rapidly increasing end points. Setting the stage, Ken Karsten reviews an Executive Order 14028 from 2021 that encouraged federal agencies to aggressively protect endpoints, sometimes called Endpoint Detection and Response. In four short years, AI has transformed the way malicious actors attack end points and the defense had to be improved. Enter, Extended Detection and response. During the interview, Ken Karsten gives listeners an overview of XDR’s continuous monitoring, advanced analytics, and rapid threat assessment and response capabilities. Advances in AI have allowed Trellix to deliver EDR and XDR capabilities at a drastically reduced cost. Topics in the discussion include Operational Technology, 5G, and Trellix’s recent DoD IL5 authorization. Provide a link to download the Trellix Cyber Threat Report.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36889610
info_outline
Ep. 248 Federal Efficiency Starts with Talent: What HR Experts Know
06/12/2025
Ep. 248 Federal Efficiency Starts with Talent: What HR Experts Know
Connect to John Gilroy on LinkedIn Want to listen to other episodes? If you are a regular listener, you know that I interview tech companies to have them elucidate the ways they can help federal agencies reach goals. Today, I will pull back the curtain and sit down with an HR professional from a successful company to understand his business and how he is hiring technical staff. First, Kentro has been in business for over twenty years and has a formidable reputation for ethical and responsible assistance in federal projects. Jun Choi is the Senior Vice President of Human Capital Services at Kentro. His company focuses on digital modernization, cybersecurity, and data and AI services. During the interview, Jun Choi highlights the importance of a growth mindset, adaptability, and practical experience over formal education. The focus is on growth because nobody has a crystal ball to divine what will happen in the next five years. If the past is prologue, Kentro will expand, but where? Procurement methods are rapidly changing along with technology itself. Many of the skills needed today were not taught in universities in the past. As a result, Jun Choi likes to discover whether a candidate has been in situations where a flexible mindset has been the key to success. He has seen college graduates with simply basic skills. Unfortunately, today’s AI can do all the basics easily. Humans need critical thinking when they understand the implications of a large language model. Choi remains optimistic about the future, predicting stabilization and innovation driven by AI.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36744280
info_outline
Ep. 247 Winning Federal Contracts: Smarter Proposal Writing for Tech Leaders in a Shifting Landscape
06/10/2025
Ep. 247 Winning Federal Contracts: Smarter Proposal Writing for Tech Leaders in a Shifting Landscape
In this episode of the Federal Tech Podcast, host John Gilroy sits down with Vishwas Lele, CEO and co-founder of pWin.ai, and Larry Katzman, President and CEO of Applied Information Sciences (AIS), to explore how technology leaders can write smarter proposals in an increasingly complex federal landscape. The conversation dives into the current state of the government contracting industry, including how shifting policy initiatives are shaping new opportunities—and new challenges—for contractors. Larry shares firsthand insights on how AIS is adapting to these changes, the role of pWin.ai RFP tool in improving proposal efficiency and win rates, and what lessons they've learned along the way.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36888665
info_outline
Ep. 246 Thales Powers Federal Data Security Against Quantum-Era Threats
06/10/2025
Ep. 246 Thales Powers Federal Data Security Against Quantum-Era Threats
Connect to John Gilroy on LinkedIn Want to listen to other episodes? Years ago, the headline “Data Breach” was shocking; today, it is common. That may not be a problem for some, but the federal government maintains data stores that contain information about finances, health, and military matters. A recent report has shown that 50% of federal agencies have reported data breaches. It appears that it's time to find a solution. Today, we sat down with Blain Canavan from Thales Group to examine the usual suspects and the potential threats ahead. THE USUAL SUSPECTS: MFA: Protecting data can be accomplished with something as basic as phishing-resistant Multi-Factor Authentication. The first step in identity management can significantly reduce threats. Encryption: Deploying encryption can protect data at rest, in transit, and memory. Keys to the Kingdom: Little-known methods of managing the PKI system can help reduce risk in protecting data. THEAT DOWN THE ROAD: QUANTUM Now that you have checked the boxes for basic data protection, it is time to get a grasp on what lies ahead. We have read about quantum cryptography for twenty years. Today, we have pre-standardized quantum-resistant cryptographic algorithms available. One needs to take action a little sooner. During the interview, Blair Canavan highlights the proactive measures taken by the US federal government, including the implementation of PQC-safe digital signatures by 2025. The “down the road” also has a delimitation -- Blair emphasizes the urgency of replacing outdated cryptographic methods, such as RSA and ECC, by 2030 and 2035, respectively. Include the 2024 data threat report. = ==
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36934265
info_outline
Ep. 245 Women in Technology Leadership Awards for 2025
06/05/2025
Ep. 245 Women in Technology Leadership Awards for 2025
Today, we have a pattern interrupt. Instead of a standard 25 minute interview, we will sit down with five nominees for a leadership award from Women in Technology. Each candidate sits for a "lightning" round of eight minutes where they answer three questions about leadership and give their reason for participating in Women In Technology. In order to see who won, you will have to visit .
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36668505
info_outline
Ep. 244 Unlocking Federal Efficiency: Cutting Costs and Boosting Security in LLM Development
06/04/2025
Ep. 244 Unlocking Federal Efficiency: Cutting Costs and Boosting Security in LLM Development
Connect to John Gilroy on LinkedIn Want to listen to other episodes? Everyone is trying to figure out how to apply AI to federal problems—essentially, building large language models and trying to wring value from them. Inevitably, many are jumping into creating LLMs from various data stores. We are right at the point where consideration is given to managing enormous data sets in the federal government, emphasizing the need for operational efficiency and security. The hard lesson learned is data in transit, which means expense. Today, we will sit down with Dr. Ellison Anne Willimas to explore the potential of privacy-enhancing technologies to enable secure and efficient data use across classification boundaries and data silos. Dr. Ellison Anne Williams suggests a solution called Privacy Enhancing Technology (PET). It is applied to data as it sits in a silo, a data lake, or whatever nomenclature is used to describe large data sets these days. PETs allow the secure and private use of data across boundaries and classifications. She explains how PETs enable AI and machine learning models to be trained and used without compromising sensitive data. The conversation also touches on the cost savings from avoiding data replication and the potential for significant operational efficiencies. Explore the potential of privacy-enhancing technologies to enable secure and efficient data use across classification boundaries and data silos.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36744320
info_outline
Ep. 243 From Bottlenecks to Breakthroughs: Boosting Federal Efficiency with Automation
06/03/2025
Ep. 243 From Bottlenecks to Breakthroughs: Boosting Federal Efficiency with Automation
Connect to John Gilroy on LinkedIn Want to listen to other episodes? Automation is a two-edged sword. On the one hand, it promises greater efficiency; on the other hand, it can pose inherent risks, such as maliciously modified data, bias, and even data poisoning. During today’s interview, Mia Jordan from Salesforce offers a solution. She is an experienced federal executive with a long-standing involvement in the federal technology community. She has identified bottlenecks that can be solved with a structured approach that offers flexibility. Rather than grabbing any data set off the shelf, when the data has been curated, it can avoid many of the issues with creating specialized data sets. Secondly, a company like Salesforce may have seen similar processes and have a store of code that can solve an agency’s problem. Re-purposing code that has worked before in a secure environment is a way to accelerate solving vexing federal issues. The conversation also highlights the importance of collaboration and community within the federal government in enhancing efficiency and service delivery. During the interview, Mia Jordan reviewed Agentforce and gave guidance on deploying a process called Role, Knowledge, Action, and Guardrails.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36823660
info_outline
Ep. 242 Inside the SANS Institute’s Mission to Fortify Federal Cyber Defenses
06/02/2025
Ep. 242 Inside the SANS Institute’s Mission to Fortify Federal Cyber Defenses
Here we are in the spring of 2025, and the headline news is that the federal government is removing tech staff; at the same time, reports are coming in of thousands of unfilled cybersecurity positions across the government. Today, we sit down with a self-proclaimed “Cybersecurity Lifer” who will give the perspective of the SANS Institute on this dilemma. John Pescatore has been involved in federal cybersecurity since 1978. When he examines our current situation, he gives his opinion on training, skill level, and legislation that is being considered to address many of these issues. He mentions recent SANS studies that have suggested the issue is less about the number of openings than about finding individuals with a specific skill set required for a federal role. He discusses the evolution of cybersecurity training from hands-on courses to community college programs and the importance of practical experience. Pescatore also discusses AI's role in cybersecurity, noting its limitations and the need for domain expertise. He emphasizes the importance of rotating staff roles and providing continuous training to retain talent in federal agencies.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36669355
info_outline
Ep. 241 The Role of Augmented AI in Modernizing Federal Agencies
05/29/2025
Ep. 241 The Role of Augmented AI in Modernizing Federal Agencies
Connect to John Gilroy on LinkedIn Want to listen to other episodes? GitLab has been around for ten years and has garnered a reputation for helping federal agencies ensure compliance with stringent government standards. Today, we sat down with Joel Krooswick from GitLab to discuss some top-of-mind topics for the software development community: Agentic AI and the implications of applying AI to software development. Joel Krooswick explains that Agentic AI acts as unit taskers, managing specific tasks exceptionally well, such as code creation and refactoring. He emphasizes the importance of contextual awareness and security protocols to prevent malicious attacks. In a play of words, it was suggested that "artificial" Intelligence may be replaced by "augmented" Intelligence—GitLab's role in augmenting, not replacing, developers, and the need for real-time compliance checks. They also touch on the cultural shift required to adapt to AI's advancements, ensuring human value remains central in the workforce. Joel will speak at the Gartner Security & Risk Management and AWS Public Sector Summit in the Washington, DC, area on June 10-11.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36669290
info_outline
Ep. 240 Unlocking Federal Efficiency: How Process Intelligence Drives Faster, Smarter Government
05/22/2025
Ep. 240 Unlocking Federal Efficiency: How Process Intelligence Drives Faster, Smarter Government
Connect to John Gilroy on LinkedIn Want to listen to other episodes? Everyone who has listened to a podcast about technology has heard the phrase, “People, Process, Technology.” This is a model derived from a management consultant in the 1960’s. We have seen a lot of focus on technology, a smattering of attention given to people, almost no concern with the process itself. Today’s interview with Aubrey Vaughn, Vice President of Strategy and Business Development at Celonis, to discuss process intelligence over artificial intelligence. Instead of a technical description, Aubrey shares a story about saving $10 billion in improper payments and emphasizes the importance of understanding why processes fail. Aubrey explains that process intelligence is the backbone of business operations, simplifying and improving efficiency. One approach to evaluating a process is to make a duplicate of it and analyze the processes apart from the operation. Some call this making “digital twins.” He highlights the role of digital twins in creating a complete blueprint of organizational processes. During the interview, Aubery Vaughn provides information about the "Process Intelligence Day" event in September 2025 to the audience, including details on the location, agenda, and how to register. events in September will offer educational sessions and CPE credits on process intelligence.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36669150
info_outline
Ep. 239 Boosting Federal Cybersecurity with Agentless Observability
05/20/2025
Ep. 239 Boosting Federal Cybersecurity with Agentless Observability
Connect to John Gilroy on LinkedIn Want to listen to other episodes? AFCEA’S TechNet Cyber conference held in Baltimore, Maryland was the perfect opportunity to sit down with Bryan Rosensteel, Head of Public Sector Marketing at Wiz. Wiz is the “new kid on the block,” and it has had tremendous growth. During the interview, Bryan Rosensteel shows how agentless approaches can improve visibility and assist with compliance. We all know how complexity has infiltrated federal technology. We have the usual suspect of Cloud Service Providers, hybrid clouds, private clouds, and, if that was not complicated enough, alt-clouds. As a result, it is almost impossible to get a “bird’s eye” visibility to provide cyber security. Two main ways have been proposed to secure this much-desired system’s view. Agent. One approach is to put a bit of code on each device, called an “agent” method. It is good for granular control, but can slow down a scan and must be maintained Agentless. Bryan Rosensteel from Wiz describes something called a “agentless” method to gain visibility into complex systems. This method leverages infrastructure and protocols to accomplish the scanning objective much faster. Bryan Rosensteel states that in a world of constant attacks, this faster method allows for rapid updates to threats. Beyond better observation, an agentless method, like the one provided by Wiz, allows for compliance automation, continuous monitoring, and sets the groundwork for effective Zero Trust implementation.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36623770
info_outline
Ep. 238 How Federal Agencies Can Achieve Cyber-Resilient Data Protection and Recovery
05/15/2025
Ep. 238 How Federal Agencies Can Achieve Cyber-Resilient Data Protection and Recovery
AFCEA’S TechNet Cyber conference held in Baltimore, Maryland was the perfect opportunity to sit down with Greg Carl, Principal Technologist from Pure Storage. Pure Storage is used by 175 federal agencies. Time to sit down from a subject matter expert and explain their value proposition. Today’s federal government is attempting to accomplish digital modernization through a move to the cloud and, at the same time, reduce staff. To multiply the risk associated with this endeavor, we see an increase in cyber attacks on data at rest, in transit, and while in use. Greg Carl drills down on how Pure Storage can help federal leaders in several areas, he begins with Retrieval Augmented Generation, RAG. People have jumped into AI without knowing how to structure a large language model, the popular LLM. RAG focuses on text generation and tries to make sure the data collected is accurate, relevant, and contextually aware. Pure Storage asks, if RAG protects the results of a query, what protects the “Retrieval” part of RAG. We know LLMs are being attacked every day. Malicious code could be placed in a LLM, and the RAG system might not know. A decade ago, backups were child’s play. A server down the hall, a backup appliance. Today, one needs an agile cloud solution to perform continuous backups in a hybrid world. One way to gain resilience is to use immutable backups where the attacked system can be restored and not lose valuable time. Speed and security handling important data activities can reduce costs for federal leaders by improving accuracy of LLMs and speed the time to recover after an attack. Connect to John Gilroy on LinkedIn Want to listen to other episodes?
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36563395
info_outline
Ep. 237 How Contract Lifecycle Management Can Streamline Federal Software Projects
05/13/2025
Ep. 237 How Contract Lifecycle Management Can Streamline Federal Software Projects
Connect to John Gilroy on LinkedIn Want to listen to other episodes? When most of us hear the word “lifecycle,” we normally assume they are talking about the Software Development Lifecycle. Today, we are going to vary that concept and discuss the Contract Lifecycle and its management. It has been recognized as a part of systems management, so it has developed its own abbreviation: Contract Lifecycle Management, or CLM. Our guest is Ryan Donley from Icertis. He highlights the shift from traditional methods like Excel spreadsheets to modern digital platforms. Much like software, the CLM can be divided into pre-award, post-award, compliance, and closeout areas. Every agency oversees this sequence in a unique manner. Ryan Donley points out that some organizations still use Excel spreadsheets for this task. He recommends that people realize that antiquated processes can limit your ability to have accurate information and can cause reporting to be delayed. Further, when a system is automated, coordination between departments is accelerated, and issues like compliance can be acted upon quickly. Icertis operates on a single-tenant GCC high cloud with Microsoft, ensuring security and compliance.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36435585
info_outline
Ep. 236 Driving Efficiency in Federal Tech Amid Rapid Disruption
05/06/2025
Ep. 236 Driving Efficiency in Federal Tech Amid Rapid Disruption
Connect to John Gilroy on LinkedIn Want to listen to other episodes? Brian Funk from Metaphase summarizes his company in one sentence, “It’s all about meeting – meeting the mission with the technology.” What makes his company unique is the focus on drawing down costs in an efficient way. That is a great concept and has worked for Metaphase since its founding in 2013, but today we are uncertainly living in a world of policy. The question to ask, how does Metaphase operate in a world where the next six months are almost impossible to predict. Brian Funk’s response is that they support over twenty agencies, it has given them a range of experience so they can select from a wide range of solutions. One example he gives includes a rapid response to a DHS RFI. Instead of sketching a possible solution, Metaphase delivered a fully functional application. That in and of itself, is a demonstration of being able to rapidly adapt to unpredictable situations. Funk also discusses the need for guardrails in AI usage and the potential for AI to enhance both efficiency and security in federal IT.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36425035
info_outline
Ep. 235 How Tech Leaders Can Streamline Federal Contracting for Real Efficiency Gains
04/29/2025
Ep. 235 How Tech Leaders Can Streamline Federal Contracting for Real Efficiency Gains
Connect to John Gilroy on LinkedIn Want to listen to other episodes? The federal government is releasing so many RFIs and RFQs that it is increasingly challenging to select which ones to respond to. For example, let us say you get 60 requests. You do not have an equal chance to win any of the sixty messages. Do you assign the same amount of time to each one? Do you review each and rank the chances of success? What about the time you used in the ranking process? Remember, you could jeopardize your chances of winning if you do not respond promptly. Deep Water Point & Associates offers one solution to this dilemma. During the interview, Brian Seagraves describes a system called “North Star” that leverages AI to look at an opportunity and give it a grade for your specific company. A ranking of 0—100 means you will not waste time or effort on a proposal that will go nowhere. As a “proof of concept,” John Milward from Axxa painted a picture of a solution. In 2023, he was drowning in responding to opportunities. He started using the North Star system and has experienced drastic improvement. Brian Seagraves reminds the audience that the federal government still awards contracts and sends out RFPs. During stressful times, it is always best to keep a cheerful outlook and increase the number of opportunities for your company.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36321485
info_outline
Ep. 234 Generative AI and the Federal Cybersecurity Challenge
04/24/2025
Ep. 234 Generative AI and the Federal Cybersecurity Challenge
Connect to John Gilroy on LinkedIn Want to listen to other episodes? Artificial Intelligence can be applied to code generation, predictive analytics, and what is called “generative” AI. " Generative means the AI can look at a library of information (Large Language Model) and create text or images that provide some value. Because the results can be so dazzling, many forget to be concerned about some of the ways the starting point, the LLM, can be compromised. Just because LLMs are relatively new does not mean they are not being attacked. Generative AI expands the federal government's attack surface. Malicious actors are trying to poison data, leak data, and even exfiltrate secure information. Today, we sit down with Elad Schulman from Lasso Security to examine ways to ensure the origin of your AI is secure. He begins the interview by outlining the challenges federal agencies face in locking down LLMs. For example, a Generative AI system can produce results, but you may not know their origin. It's like a black box that produces a list, but you have no idea where the list came from. Elad Shulman suggests that observability should be a key element when using Generative AI. In more detail, Elad Shulman details observability from a week ago vs. observability in real-time. What good is a security alert if a federal leader cannot react promptly? Understanding the provenance of data and how Generative AI will be infused into future federal systems means you should realize LLM security practices.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36292735
info_outline
Ep. 233 Boosting Federal Cyber Resilience Through Cross-Domain Solutions
04/22/2025
Ep. 233 Boosting Federal Cyber Resilience Through Cross-Domain Solutions
Connect to John Gilroy on LinkedIn Want to listen to other episodes? The federal government needs to share information on a wide variety of platforms and must provide methods to ensure this transmission is secure. Of course, the hard part is the “how” part of this data transfer. Tim Fuhl from Owl Cyber Defense gives the listener an overview of how Owl Cyber Defense can help federal agencies share information securely. To accomplish this task, he discusses two fundamental concepts: diodes and Cross Domain Solutions. Diodes. This is a mysterious word that was liberated from electrical engineers. When designing a semiconductor, one may need to create a one-way path to prevent a signal from returning. The solution in electronic design is a “diode.” Owl Cyber Defense took an electrical concept called a diode, which provided “one-way” data transfer. When they combined this one-way street with a data path, they developed a “data diode,” a device that limits data transfer to one direction, protecting the system from a reverse movement. When it comes to securing federal systems, a “data” diode is a device that restricts data transfer one way, essentially creating a one-way street. Cross Domain Solutions. One of the newest abbreviations in the world of security is Cross Domain Solution (CDS). The federal technical world is comprised of levels of protection. As a result, what is needed is a way for communication between varying security levels. During the interview, Tim Fuhl defines both terms and gives examples of where this innovation can be applied to federal systems.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36236695
info_outline
Ep. 232 Unlocking SBIR: A Powerful Tool for Boosting Federal Tech Efficiency
04/17/2025
Ep. 232 Unlocking SBIR: A Powerful Tool for Boosting Federal Tech Efficiency
Connect to John Gilroy on LinkedIn Want to listen to other episodes? In traditional commercial selling, a company seeks to understand its business problems and then presents a solution that would save time and money. Understanding federal requirements has a few more barriers than scheduling a meeting with the CIO. The federal government has security requirements and considerations few commercial companies can even consider. There are no effortless ways to understand system requirements for a company trying to break into the federal marketplace. This has been understood for decades. In fact, Ron Reagan decided to help small businesses understand their needs and provide some assistance. The Small Business Innovation Research (SBIR) program was established in 1982. The concept was simple: an agency would post requirements and look for a small company to get a response. If the proposal was favorable, some steps allowed further development and funding. During today’s interview, Tom Ruff updated us on the three phases of SBIR and provided specific examples of companies that have successfully navigated the process.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36185550
info_outline
Ep. 231 The Role of Quantum Computing in a More Efficient Federal Government
04/15/2025
Ep. 231 The Role of Quantum Computing in a More Efficient Federal Government
Connect to John Gilroy on LinkedIn Want to listen to other episodes? Most people are so overwhelmed with the dazzle of Artificial Intelligence that they dismiss the power of quantum computing. Reality is the optimized solution for solving some federal problems involving artificial intelligence; other issues need to consider quantum. Today, Murray Thom puts the ability of quantum computing in a better perspective. For example, when it comes to aerospace maintenance, there are so many variables that classical computing is challenged to provide an answer. We all know that a traditional computer would use bits (0s and 1s). Quantum allows an approach that is not as linear and can provide faster answers to many questions. The crus of the interview was not a debate on the origins of quantum and Einstein’s remark about God not throwing dice. The debate is over—quantum work. Quantum computing can help the federal government find solutions to public sector challenges like optimizing public services, transportation networks, and defense. The core of this interview is whether your federal agency is looking for a problem that is too expensive or too time-consuming to solve using classical computing. It is possible to use quantum innovation to solve the problem more economically. Look at some success stories from D-Wave; they may provide an economic option for you. Download the D-Wave e-book “Transforming the Public Sector: Quantum-Powered Optimization” on the Carahsoft website.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36127360
info_outline
Ep. 230 How Senzing Strengthens Federal Cybersecurity with Smarter Entity Resolution
04/10/2025
Ep. 230 How Senzing Strengthens Federal Cybersecurity with Smarter Entity Resolution
Connect to John Gilroy on LinkedIn Want to listen to other episodes? It is a challenge for most technology companies to give a three-word summary of what they do, especially with the complexity implied with the phrase “entity resolution.” The CEO of Senzing, Jeff Jonas, gives a three-word summary of the complex issues they manage -- “bad guy hunting.” OK, what does this mean to federal tech leaders? Today, we sit down with Will Layton to learn how a topic like “entity resolution” can improve federal cybersecurity. During the interview, he gives an overview of how federal systems have evolved over the years and the need to understand the implications of automation. We know federal systems are, in general, moving to the cloud. This may be a private cloud, a public cloud, or even a hybrid cloud. Second, data ingestion has overwhelmed most agencies. As a result, many large-scale organizations are implementing automated tools, some call “agents” to become more efficient. Will Layton describes how humans need to be identified an automated tool, or entities, need to establish credentials as well. When a malicious actor tries to present like an entity in a complex automated system, Senzing can identify it and save federal leaders from unwanted actio
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36081290
info_outline
Ep. 229 How Identity Proofing Can Help Federal Agencies Combat Fraud and Cut Waste
04/08/2025
Ep. 229 How Identity Proofing Can Help Federal Agencies Combat Fraud and Cut Waste
Connect to John Gilroy on LinkedIn Want to listen to other episodes? For many, IDEMIA is a relatively unknown company that was recently awarded a 10-year Blanket Purchase Agreement from GSA. The focus is on next-generation identity proofing for login.gov. At first glance, you might say “IDEMIA” is an overnight success. Upon further examination, you will discover that IDEMIA has served federal agencies for over 60 years. During the interview, Donnie Scott gives listeners a complete rundown on the variations on identity, identity proofing, identity management, and identity access management. He reinforces that rigorous identity-proofing can reduce waste, fraud, and abuse of federal systems. This is becoming a more complex problem. For example, technology enthusiasts are experimenting with so-called “agents” to access data, assemble it, and then attempt to draw conclusions. At each step along the way, there are gateways to verify the validity of the person (or non-human entity) requesting data. This interview offers a great perspective from a well-respected company that provides identity proofing to the federal government.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/36024075
info_outline
Ep. 228 How Agentic AI Can Revolutionize Federal IT Efficiency
04/03/2025
Ep. 228 How Agentic AI Can Revolutionize Federal IT Efficiency
Connect to John Gilroy on LinkedIn Want to listen to other episodes? Walking around the Salesforce World Tour DC can make you dizzy with use cases. Let’s step back and look at underlying principles. To boil down the massive information overflow, we sat down with Nasi Jazayeri from Salesforce to focus on improving efficiency by taking advantage of Salesforce agents. Automation. Federal employees will obviously be asked to do more with less. One way to accomplish this task is to structure a system where tedious decisions do not have to be made by humans. Tasks can be designed without human oversight to a specific level. Workflows. Salesforce is increasingly becoming a hub for data amalgamation. Integrating API into workflow can improve how systems can manage various dependencies. Compliance. This is one of Salesforce's superpowers. Everyone is trying to figure out where the best application of agents would be. Inevitably, mistakes will be made. Compliance is built into a system like Salesforce. You can evaluate several options without reinventing the wheel for each instance. Salesforce has many use cases for agentic applications, such as citizen service automation, healthcare administration, and interagency collaboration. Sometimes, general value principles can reinforce decisions made regarding agents and Salesforce.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/35935200
info_outline
Ep. 228 Building Trust in Agents: How Salesforce Powers Secure AI
04/01/2025
Ep. 228 Building Trust in Agents: How Salesforce Powers Secure AI
Connect to John Gilroy on LinkedIn Want to listen to other episodes? Federal leaders are walking a tightrope. They want to leverage the promise of AI; however, they are responsible for making federal data secure. Beyond that, these AI “experiments” should not negatively impact the larger systems and must have a detached view of practical applications. During today’s conversation, Paul Tatum gives his view on accomplishing this balance. He illustrates the idea of experimenting with AI through, of all things, avocados. For example, he acts as if he must document the process behind importing avocados. He shows how an AI agent can be used safely and provides practical information. The key here is “safely.” People working on federal systems are jumping into AI agents without concern for compliance or security. They run into the phrase “unintended consequences” when they access data sloppily, which can lead to sensitive information leaks. Rather than detailing potential abuse, Paul Tatum outlines the Salesforce approach. This allows experimentation with specific guidelines as well as for compliance and controls for autonomous agents. This way, the data to be accessed will be cleaned and not subject to misinformation and duplication problems. Further, because you are acting in the functional equivalent of a “sandbox,” you can be assured that information assembled from AI experiments will be placed in areas where they are safe and secure. Learn how to leverage AI, but learn in an environment where mistakes will not come back to haunt you.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/35933920
info_outline
Ep. 225 How Cloudflare is Transforming Federal Security Through Interconnected Networks
03/27/2025
Ep. 225 How Cloudflare is Transforming Federal Security Through Interconnected Networks
Connect to John Gilroy on LinkedIn Want to listen to other episodes? Most people know Cloudflare from federal or commercial experience. They have been around since 2009, and some will estimate that around 20% of all websites use Cloudflare for web security services. The listener's question is simple: can one apply this commercial success to improving federal network security? During today’s interview, Anish Patel from Cloudflare answered that question by directing his comments to Zero Trust, User experience, and automation. Zero Trust is a federal initiative that cuts across civilian and military agencies. Cloudflare can assist by providing access to applications and data by verifying every user and device before granting access. Because of their commercial success, Cloudflare realizes that an end-user experience can impact security at many levels. Simplifying the remote user experience will bolster security for everyone. With today’s massive data increase and constant attacks, users can get alert fatigue and not be as responsive to threats as in an earlier age. During the interview, Anish Patel details how automation from Cloudflare can reduce the amount of vigilance needed by end users to accomplish network security goals.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/35885600
info_outline
Ep. 225 Why Identity is the First Pillar of Federal Security in the Digital Age
03/25/2025
Ep. 225 Why Identity is the First Pillar of Federal Security in the Digital Age
Connect to John Gilroy on LinkedIn Want to listen to other episodes? Once the transition to the cloud became dominant, the importance of identity was placed ahead of permission to access apps and data. When data centers were down the hall, one could have physical access to a room and sign-on permission. The hybrid cloud, private clouds, and an interest in “alternative clouds” make identity the keystone of modern computing. Companies like Okta, Ping, and SailPoint work with identity and access management but rely on services that can provide a federated identity service. Today, we sit down with Dr. John Pritchard, the CEO of Radiant Logic, and learn that Radiant does not compete with these well-known vendors but provides the backbone for their service. Dr. Pritchard uses an interesting phrase: “continuous identity hygiene.” This means that although a person’s biology will not change, he can compromise essential elements of his identity. This must be a continuous process. This fact has been recognized by CISA and DoD’s 2027 Zero Trust Goals and can be identified as Identity Security Posture Management. In this thorough discussion, Dr. Pritchard presents a 30-year framework for network identity and includes comments on a unified data layer, data staging, and how to select a reference architecture for using a federated identity service.
/episode/index/show/86da2e04-6de5-40f5-9fe5-ff006b5de38d/id/35852055