Fresh off his induction into the 2024 class of Cyber Defenders, we were delighted to sit down for a half hour with Gary Barlet – the public sector chief technology officer at Illumio – for a wide-ranging talk about government cybersecurity needs, the criticality of the current zero trust security transition, and the multiple facets of artificial intelligence (AI) technology in the hands of both adversaries and network defenders.

MeriTalk: Gary, congrats on the Cyber Defender award! Can you share a bit about your role and the security initiatives at Illumio?

Barlet: As the public sector chief technology officer, I focus on outreach and helping people understand Illumio’s role in the public sector and the problems we can solve. I also act as a translator, bridging the gap between public sector language and our company’s understanding. My experience in the Federal government, including 20 years in the military, allows me to interpret the needs of the public sector effectively.

Additionally, I engage with Federal executives, ensuring that technical discussions are elevated to a level that executives can understand. My goal is to identify pain points and communicate how we can address them.

MeriTalk: What recent trends in policy and technology do you see improving security?

Barlet: The adoption of zero trust security is promising. It emphasizes interoperability among tools, as no single vendor can provide complete zero trust. It also shifts focus from merely identifying users to understanding their context and continuously validating their identity. Importantly, it introduces the concept of assuming a breach, acknowledging that we may not always keep adversaries out and must plan for when they do get in.

MeriTalk: Are there any other hopeful trends you’ve noticed?

Barlet: AI presents a double-edged sword. While adversaries may leverage it to enhance their tactics, it also holds potential for defending against cyberattacks. We are moving towards practical applications of AI that could bolster cyber defenses without overwhelming reliance on human resources.

MeriTalk: Does AI pose security challenges as well?

Barlet: Yes, AI can produce unexpected results, similar to how it might generate an image with errors. If we depend on AI for security, we must remain vigilant about its limitations. The principle of ‘trust but verify’ is crucial, as the technology isn’t mature enough for complete autonomy.

MeriTalk: What challenges do you foresee?

Barlet: The public sector faces a shortage of skilled professionals, which AI cannot fully address. There’s a risk of losing expertise as we automate processes, and the competition for talent with the commercial sector exacerbates this issue.

MeriTalk: How did you end up in tech security?

Barlet: My journey began with a passion for technology, which shifted towards aerospace engineering before I returned to IT. After joining the military, I initially worked outside of IT but eventually found my way back, leading to my current role.

Public service, both military and civilian, is vital, and those who serve deserve recognition for their contributions.

MeriTalk: What do you enjoy outside of technology?

Barlet: I love reading, watching historical documentaries, and engaging with murder mysteries and political thrillers. I’m also a Netflix enthusiast.