Sarpedon Quality Lab LLC, Data Architect Security, CEO
Andreas Wolter is a leading data security expert and founder of Sarpedon Quality Lab. Previously, as a Program Manager for Azure SQL and SQL Server at Microsoft, he led the revamp of SQL Server’s permission system and designed the external authorization framework for Microsoft Purview—now also used by Azure databases in Microsoft Fabric. Andreas served on Microsoft’s security review board, where he analyzed threat models for SQL Server and Azure SQL features, drove changes to ensure other features complied with the Principle of Least Privilege (PoLP) and also led the last major overhaul of SQL vulnerability assessment in Microsoft Defender for SQL. One of only seven Microsoft Certified Solutions Masters (MCSM) for the Data Platform worldwide, and a former Microsoft MVP, Andreas brings over 25 years of experience. He has spoken at international conferences for more than 15 years and helps customers improve performance, availability, and security while reducing costs through optimized licensing and resource usage across SQL Server deployments on-premises, in Azure, Google Cloud, and AWS.
SQL Server Security vs. Security Theater: Build a Defensible Data Estate
Stop the "Security Theater" and build a truly defensible data platform. This full-day workshop on security for SQL databases (on-prem/Azure/Fabric) is driven by real-world assessments and breach scenarios in the field.
Common security recommendations often focus on features like TDE and flagging sysadmin membership, which creates a false sense of security or unnecessary alarmism while leaving actual attack paths ignored.
This PreCon focuses on what moves the needle. You will learn how to make the work of an attacker harder, limit the blast radius, and detect attacks earlier – using practical approaches grounded in Zero Trust and operability.
Drawing on 25+ years in the field – including leading security feature development for SQL Server and Azure SQL at Microsoft, contributing to the SQL Server 2022 permission model, and advancing vulnerability assessment and Microsoft Purview-based governance capabilities – you’ll get an inside-out view of the built-in security features, how to use them effectively and where there are gaps to consider.
Topics include:
NTLM deprecation and Kerberos readiness / SQL Server 2025 updates / Applying Least Privilege / Encryption techniques, tamper evidence with Database Ledger / Building a minimal viable security audit, Extended Events vs Auditing / Network- and system security configuration / Fabric OneLake security implications / Microsoft Purview (intro)
..and of course, demos of security bypasses and how to prevent them.
Hydrate Consulting LLC, Owner and Principal Consultant
Chris Hyde (he/him) is a Microsoft Data Platform MVP based in Albuquerque, New Mexico. He works as an independent analytics consultant focusing on small and medium businesses, and is the leader of the Albuquerque local Azure Data Technologies group. He loves loud music and cricket, but not usually at the same time.
Modern Data Warehousing with Microsoft Fabric
Learn how to design and manage data warehouses in Microsoft Fabric by exploring proven patterns, practical techniques, and common pitfalls to avoid. Topics include dimensional modeling, data warehousing fundamentals, ingestion strategies, medallion architecture, change detection, lifecycle management with CI/CD, monitoring, administration, and migrations.
Erik has been working with SQL Server just about forever – Really challenging DBA/Developer/Architect roles – Started consulting for Brent Ozar Unlimited in 2015 Started Darling Data in 2019 – Worked with over 600 very happy clients – Lots of free community activity like blogging, training, open-source projects – Speaking about SQL Server at conferences all over the world.
T-SQL That Doesn't Suck: Solving Performance and Concurrency Problems
You know how to write T-SQL that works. It compiles, it returns rows, nobody's filed an incident yet. But "works" is doing a lot of heavy lifting in that sentence, and production has a way of finding out what you got away with in dev.
In this full-day, demo-packed session, Erik Darling walks you through the T-SQL that silently bleeds your servers dry and shows you how to fix it without rewriting the whole app. You'll tackle the performance killers that don't show up until scale does: implicit conversions, non-sargable predicates, parameter sniffing traps, and joins that look fine in an execution plan until they absolutely aren't. You'll learn when temp tables beat table variables, when CTEs help versus when they just make you feel organized, and how to write window functions that don't spill to tempdb.
But performance is only half the fight. We'll dig into concurrency problems that turn a Tuesday into a war room: blocking chains, isolation level surprises, and data modifications that hold locks like they're paying rent. You'll learn DML patterns that play well with others.
Along the way, we'll put AI-generated T-SQL on the table. Not to dunk on it, but because it's showing up in pull requests and you need to know where it falls apart and where it saves you time.
If you've ever inherited a stored procedure that made you question your career choices, this is your day. Come write T-SQL you'd be proud to put your name on.
Grant Fritchey is a Data Platform MVP and AWS Community Builder with over 30 years' experience in IT, including time spent in support and development. He works with multiple data platforms including SQL Server and PostgreSQL, as well as multiple cloud platforms. He has also developed in VB, VB.NET, C#, and Java.
Adding PostgreSQL to your SQL Server Skill Set
More organizations are adding PostgreSQL to their technology stack than ever before. The challenge is that they are not immediately replacing their existing technology, which means more and more people need to understand both SQL Server and PostgreSQL. This session is explicitly designed to support people who already know SQL Server in their journey to add PostgreSQL to their skill set. The session covers the areas of overlap between the two platforms, as well as all the differences that can make learning PostgreSQL a challenge. Not only does this all-day session teach PostgreSQL, but it also explores tooling, documentation, the cloud, and other resources to help on the journey of adding PostgreSQL to an existing SQL Server skill set.
Kristyna Ferris is a solution architect at P3 Adaptive. Her experience includes implementing and managing enterprise-level Power BI instance, training teams on reporting best practices, and building templates for scalable analytics. Passionate about participating and growing the data community, she enjoys co-writing on Data on Wheels (dataonwheels.com). She also a co-organizer for Lexington Data Technology Group.
Modern Data Warehousing with Microsoft Fabric
Learn how to design and manage data warehouses in Microsoft Fabric by exploring proven patterns, practical techniques, and common pitfalls to avoid. Topics include dimensional modeling, data warehousing fundamentals, ingestion strategies, medallion architecture, change detection, lifecycle management with CI/CD, monitoring, administration, and migrations.
Pat Wright is an Advocate with Redgate Software. He has been a database professional for 25 years, specializing in PostgreSQL for the past 10 years, after a long career with SQL Server. He has worked across large-scale SaaS platforms, early-stage startups, and a wide range of consulting engagements over the past decade. Pat currently serves as the Sponsor Coordinator for PGUS and as President of Utah Geek Events, and is a frequent speaker in both the PostgreSQL and SQL Server communities. His sessions draw on deep real-world experience with performance, automation, and operational best practices. Outside of tech, he enjoys photography, classic cars, and cycling.
Adding PostgreSQL to your SQL Server Skill Set
More organizations are adding PostgreSQL to their technology stack than ever before. The challenge is that they are not immediately replacing their existing technology, which means more and more people need to understand both SQL Server and PostgreSQL. This session is explicitly designed to support people who already know SQL Server in their journey to add PostgreSQL to their skill set. The session covers the areas of overlap between the two platforms, as well as all the differences that can make learning PostgreSQL a challenge. Not only does this all-day session teach PostgreSQL, but it also explores tooling, documentation, the cloud, and other resources to help on the journey of adding PostgreSQL to an existing SQL Server skill set.
T-SQL That Doesn't Suck: Solving Performance and Concurrency Problems
Erik Darling
Darling Data
Track: Development
Level: Level 300
Day 1
9:00 AM-5:00 PM
Room: Jackson Park B
You know how to write T-SQL that works. It compiles, it returns rows, nobody's filed an incident yet. But "works" is doing a lot of heavy lifting in that sentence, and production has a way of finding out what you got away with in dev.
In this full-day, demo-packed session, Erik Darling walks you through the T-SQL that silently bleeds your servers dry and shows you how to fix it without rewriting the whole app. You'll tackle the performance killers that don't show up until scale does: implicit conversions, non-sargable predicates, parameter sniffing traps, and joins that look fine in an execution plan until they absolutely aren't. You'll learn when temp tables beat table variables, when CTEs help versus when they just make you feel organized, and how to write window functions that don't spill to tempdb.
But performance is only half the fight. We'll dig into concurrency problems that turn a Tuesday into a war room: blocking chains, isolation level surprises, and data modifications that hold locks like they're paying rent. You'll learn DML patterns that play well with others.
Along the way, we'll put AI-generated T-SQL on the table. Not to dunk on it, but because it's showing up in pull requests and you need to know where it falls apart and where it saves you time.
If you've ever inherited a stored procedure that made you question your career choices, this is your day. Come write T-SQL you'd be proud to put your name on.
SQL Server Security vs. Security Theater: Build a Defensible Data Estate
Andreas Wolter
Sarpedon Quality Lab LLC
Track: Database Management
Level: Level 200
Day 1
9:00 AM-5:00 PM
Room: Jackson Park C
Stop the "Security Theater" and build a truly defensible data platform. This full-day workshop on security for SQL databases (on-prem/Azure/Fabric) is driven by real-world assessments and breach scenarios in the field.
Common security recommendations often focus on features like TDE and flagging sysadmin membership, which creates a false sense of security or unnecessary alarmism while leaving actual attack paths ignored.
This PreCon focuses on what moves the needle. You will learn how to make the work of an attacker harder, limit the blast radius, and detect attacks earlier – using practical approaches grounded in Zero Trust and operability.
Drawing on 25+ years in the field – including leading security feature development for SQL Server and Azure SQL at Microsoft, contributing to the SQL Server 2022 permission model, and advancing vulnerability assessment and Microsoft Purview-based governance capabilities – you’ll get an inside-out view of the built-in security features, how to use them effectively and where there are gaps to consider.
Topics include:
NTLM deprecation and Kerberos readiness / SQL Server 2025 updates / Applying Least Privilege / Encryption techniques, tamper evidence with Database Ledger / Building a minimal viable security audit, Extended Events vs Auditing / Network- and system security configuration / Fabric OneLake security implications / Microsoft Purview (intro)
..and of course, demos of security bypasses and how to prevent them.
More organizations are adding PostgreSQL to their technology stack than ever before. The challenge is that they are not immediately replacing their existing technology, which means more and more people need to understand both SQL Server and PostgreSQL. This session is explicitly designed to support people who already know SQL Server in their journey to add PostgreSQL to their skill set. The session covers the areas of overlap between the two platforms, as well as all the differences that can make learning PostgreSQL a challenge. Not only does this all-day session teach PostgreSQL, but it also explores tooling, documentation, the cloud, and other resources to help on the journey of adding PostgreSQL to an existing SQL Server skill set.
Learn how to design and manage data warehouses in Microsoft Fabric by exploring proven patterns, practical techniques, and common pitfalls to avoid. Topics include dimensional modeling, data warehousing fundamentals, ingestion strategies, medallion architecture, change detection, lifecycle management with CI/CD, monitoring, administration, and migrations.
Day 1 
9:00 AM-5:00 PM 
Room: Jackson Park B