Joshua M. Berk

ENTERPRISE SECURITY ARCHITECTURE CLOUD GOVERNANCE DEVOPS

Indianapolis, IN berk.josh@gmail.com joshberk.com

Professional Summary

Security architecture leader with ~20 years of experience across enterprise security, DevOps, automation, and infrastructure. Chief Information Security Architect at Elanco and former Lilly Associate Director, combining architecture governance with hands-on platform engineering. Experience managing security of enterprise workloads in the cloud and on premise across identity, networking, and operational technology. Proficiency leading executive risk evaluations aligned to ISO 27001/27005 and providing cross-functional technical leadership and mentorship with security telemetry design overhaul and optimization delivering more than $500,000 in annual savings.

Core Expertise

Architecture & risk: Enterprise security architecture; risk evaluations; ISO 27001/27005; OT security; technical mentorship.

Data & Governance: Data Loss Prevention implementation; Purview configuration and SIEM integration; Data Collection Strategy

Cloud & identity: Azure Policy; Microsoft Defender for Cloud; Azure Arc; GCP governance; Identity and Access Mgmt; passkeys.

Platforms & engineering: GitHub; CI/CD; OpenShift; ServiceNow; REST APIs; Microsoft Sentinel; Cribl; Azure Data Explorer (ADX).

Professional Experience

Elanco Animal Health

September 2022 – Present

Chief Information Security Architect

  • Define and govern enterprise security architecture across Azure Cloud, Google Cloud, Enterprise Identity, global networking, compute, and core infrastructure domains.
  • Lead security risk evaluations for new platforms and architectural changes, informing executive risk-acceptance and mitigation decisions aligned with ISO 27001 and ISO 27005.
  • Established a unified security governance approach using Azure Policy, Microsoft Defender for Cloud, and Azure Arc across Azure, GCP, GitHub, and on-premises workloads.
  • Architected OT security controls for manufacturing and laboratory environments, balancing operational uptime, regulatory requirements, and enterprise risk.
  • Provided security architecture design for SAP workloads in Google Cloud, aligning secure external access with enterprise risk requirements.
  • Developed strategy and championed enterprise-wide passkey adoption in partnership with Identity and IAM teams to reduce phishing and adversary in the middle exposure.
  • Architected an ADX-based telemetry tier and reduced Conditional Access log ingestion, saving more than $40,000 per month. Implemented Cribl-based pipelines to reduce Microsoft Sentinel ingestion while preserving alert fidelity.
  • Designed the strategy and built a custom security risk and posture management platform integrating third-party risk, ISO 27005 security issues, and ISO 27001 risk registers using LLMs and ServiceNow integrations.
  • Mentor engineers and architects across teams, advancing security maturity and secure-by-design adoption.

Apparatus / Virtusa

November 2012 – June 2016

Technology Specialist

2014 – 2016
  • Led enterprise migration to ServiceNow as Product Owner, Scrum Master, and Lead Administrator.
  • Designed and implemented solutions across networking, firewalls, wireless, SANs, and virtualization platforms.

Senior Technology Analyst

2012 – 2014
  • Managed Microsoft Server environments, backups, and out-of-band management; built and administered Citrix environments for published applications and virtual desktops.

Education

B.S. Computer & Information Technology

December 2013

Purdue School of Engineering and Technology, IUPUI

B.S. Organizational Leadership & Supervision

May 2007

Purdue University College of Technology