Sarah Formwalt is an Associate Principal IT Security Engineer and Information System Security Manager for the Dragos Public Sector, where she is responsible for managing cybersecurity and compliance for systems supporting Dragos’s federal government operations. In this role, she advances security architecture and risk management aligned to federal regulatory frameworks, ensuring the protection of systems that support critical infrastructure.
Sarah brings over 18 years of experience in federal cybersecurity, with a focus on Industrial Control Systems (ICS) and Operational Technology (OT). She has supported mission-critical environments across agencies including the U.S. Army Medical Command, U.S. Army Corps of Engineers Critical Infrastructure Cybersecurity Mandatory Center of Expertise, Bureau of Reclamation, Department of Energy, and the U.S. Mint. Her work has centered on securing high-value national infrastructure through the implementation of the NIST Risk Management Framework, FISMA compliance, and ICS/OT-specific security programs.
Sarah is a U.S. Army veteran and holds a Bachelor of Science in Information Systems Security. She maintains multiple industry certifications, including CISSP, CISM, GICSP, and GCIP.