Aaron Walters Email & Phone Number

Silverthorne, Co, Us

Silverthorne, Co, Us

Greenwood Village, Colorado, Us

• Established and maintained the TTEC FedRAMP CONMON (Continuous Monitoring) process; vulnerability scanning, asset management, POAM (Plan of Action and Milestones) tracking, Risk Acceptance process.• Lead the vulnerability management process for tracking and remediating findings/weakness; vulnerability tracking, root cause analysis, ticket assignment, remediation validation.• Developed System Security Plans, Configuration Management Plans, Contingency Plans, and Incident Response Plans in accordance with NIST 800-53, FedRAMP and Agency ATO requirements.• Successfully lead NIST 800-53 and FedRAMP security audits with Federal client side assessors and 3PAOs (Third Party Assessment Organization) with multiple authorizations granted.• Consulting with Key Stake Holders to provide IT security guidance for application implementation.• Interfaced with Federal client side security teams and the FedRAMP JAB (Joint Advisory Board) to ensure compliance with all NIST 800-53 and Federal Requirements.• Technical capabilities used in this position include; updating RHEL based security tools, windows configuration, standalone test VMs, PowerShell scripts for data gathering, Cisco, Verint, ScienceLogic, etc.

Hanover, Md, Us

(Supporting Jeppesen)• Created a corporate security control baseline using ISO27001, NIST 800-53 and NIST 800-171 security standards to meet ISO27001 certification requirements and Defense Federal Acquisition Regulation compliance.• Developed a corporate Business Continuity and Disaster Recovery strategy which included policy guidance and disaster recovery plans.• Lead Business Continuity and Disaster Recovery Planning (BCDRP) team and risk management meetings• Developed recovery and validation procedures for 50+ applications• Developed Business Continuity Plans for 20+ Departments and 20+ Facilities

Englewood, Co, Us

(Supporting DHA)• Functioned as the Information System Security Officer (ISSO), also known as Information Assurance Officer (IAO).• Lead the IA team to achieve and maintain IA compliance such as developing Plan of Actions and Milestones (POA&M), risk analysis of open vulnerabilities, and documentation of remediation activities or mitigation strategies.• Developed and implemented DoD NIST 800-53 Certification and Accreditation (C&A) processes and documentation, including contingency planning, auditing, vulnerability management and configuration management.• Monitored web applications, databases and infrastructure for DOD NIST 800-53 compliance and coordinated with supporting program managers, engineers, systems administrators and other stakeholders to resolve non-compliance issues.

Herndon, Va, Us

(Supporting USCG)• Supervised the Vulnerability Assessment Team, Security Assessment Team, IV&V Coordination & Reporting Team, Database Development Team and Web Administration Team for the Information Assurance Division (IAD) of the United States Coast Guard (USCG).• Lead the IV&V Coordination and Reporting Team which is responsible for DHS Continuous Monitoring, Vulnerability Management, DoD Directives, Privileged User Management and ad hoc requests to assist with resolving IA issues and providing guidance on DOD NIST 800-53 requirements.• Coordinated vulnerability scanning activities and issue resolution with the Vulnerability Assessment Team.• Drove Blue Team implementation by coordinating planning efforts between Security Assessment Team and government leads.• Directed development of SQL database driven data parsing tool for reporting and implementation of SharePoint sites for collaboration.• Created vulnerability assessments for emerging technologies by conducted analysis of current DoD, DHS and USCG policies.• Collected and correlated data elements from different data sources to meet DHS Continuous Monitoring reporting metrics for FISMA compliance.

Minneapolis, Mn, Us

• Established the process for documenting security vulnerabilities and mitigation activities in a POA&M, compliant with DOD NIST 800-53 standards. • Participated as subject matter expert in documenting the agency's IT Security vulnerability life cycle process and streamlined existing workflows. • Acted as primary liaison between multiple stakeholders and the contracted hosting vendor to develop and implement appropriate security measures in support of DoD external facing website.

Vienna, Virginia, Us

(Supporting DISA)• Managed multiple desktop engineers and deployment specialists who designed/built/tested/deployed custom software packages, vendor patches. • Created a repeatable deployment/release process for IT hardware/software updates, security patches/configuration changes and new product launches.• Oversight responsibilities include: planning, building, and acceptance testing of single or multiple, simultaneous releases; conducting release readiness reviews; negotiating rollout schedules with appropriate stakeholders; reviewing and analyzing data reports for accuracy to ensure completion time and SLA requirements are met; and executing against the release plan to implement as scheduled. • Provided technical guidance to Problem Management, Tier III Support and Engineering to address systemic problems through the release process. • Managed IA professionals who tracked and reported systemic vulnerabilities for action by the Release and Deployment Team. • Managed testing and tuning of Security Tools; Host based Security, Vulnerability Scanning, Compliance Scanning, etc.• Provided weekly vulnerability analysis reports to management detailing vulnerability status/compliance.• Provided subject matter expertise on the secure environments and procedures, and assisted with the creation and modification of security policies to DOD NIST 800-53 standards.• Prepared and maintained application and security related documentation as required.

(Supporting DISA)• Managed multiple desktop engineers and deployment specialists who designed/built/tested/deployed custom software packages, vendor patches. • Created a repeatable deployment/release process for IT hardware/software updates, security patches/configuration changes and new product launches.• Oversight responsibilities include: planning, building, and acceptance testing of single or multiple, simultaneous releases; conducting release readiness reviews; negotiating rollout schedules with appropriate stakeholders; reviewing and analyzing data reports for accuracy to ensure completion time and SLA requirements are met; and executing against the release plan to implement as scheduled. • Provided technical guidance to Problem Management, Tier III Support and Engineering to address systemic problems through the release process. • Managed IA professionals who tracked and reported systemic vulnerabilities for action by the Release and Deployment Team. • Managed testing and tuning of Security Tools; Host based Security, Vulnerability Scanning, Compliance Scanning, etc.• Provided weekly vulnerability analysis reports to management detailing vulnerability status/compliance.• Provided subject matter expertise on the secure environments and procedures, and assisted with the creation and modification of security policies to DOD NIST 800-53 standards.• Prepared and maintained application and security related documentation as required.

Falls Church, Va, Us

(Supporting WHS/WSO)• Project Lead for technology refreshes such as OS upgrades and email migrations as well as the deployment of new services such as SharePoint and Project Web Server.• Managed logon scripts and maintained group policies, domain accounts, domain groups, organizational units and Exchange mailboxes. • Provided user support for all desktop applications, ensured user data was accessible to authorized personnel only and install security patches and upgrades to workstations and servers. • Attended security team meetings to ensure awareness of DOD NIST 800-53 security requirements and status of security patches; also, evaluated new applications for security vulnerabilities and submitted corrective recommendations to management. • Built 2K3 Servers for testing and production on hardware and VMWare after which the servers where patched and configured with the latest security requirements.

(Supporting NAVSEA)• Provided technical expertise necessary to manage and maintain the corporate network infrastructure.• Installed and configured desktops with security updates and antivirus definitions. • Performed maintenance on existing network servers and built new servers. • Developed a disaster recovery plan and documented backup restoration processes. • Analyzed and integrated database driven web and desktop applications that supported the Virginia Class, Seawolf, Trident, and SSGN submarine program offices. • Coordinated with vendors to ensure that the database servers were in compliance with all DOD NIST 800-53 security requirements.

Leesburg, Virginia, Us

(Supporting USALSA)• Installed, configured and managed a network environment and created baseline desktop images with the latest security requirements. • Provided user support for applications and ensured user data was accessible to authorized personnel only. • Installed and configured Microsoft desktop operating systems. Installed and configured network application software, and provided training to users.

(Supporting USALSA)• Installed, configured and managed a network environment and created baseline desktop images with the latest security requirements. • Provided user support for applications and ensured user data was accessible to authorized personnel only. • Installed and configured Microsoft desktop operating systems. Installed and configured network application software, and provided training to users.