• Manage and develop project plans for systems development, implementation, and production support activities• Develop and oversee compliance and adherence to Information system security policy• Responsible for the oversight and governance of security compliance • Provide guidance support and validation of systems security documentation • Prepare and present IT security related metrics to executive management • Conduct risk analysis and vulnerability assessments on Network Infrastructure, Websites, and Applications, to identify potential risks and create mitigation and protection plans• Monitor latest vulnerability and virus threats to ensure effective security safeguards are in place• Identify internal and external security threats using automated scanning tools and periodic system audits• Oversee System Assessment and Authorization (SA&A) efforts for information systems • Develop functional and technical requirement, project scope, project plans for new systems• Conduct feasibility studies/analysis and review cost estimates for proposed new projects • Develop accurate integration plans to ensure system interoperability• Oversee the research, design, and implementation of new systems• Develop security awareness and role-based security and privacy training • Participated in the design of a new production Azure Active Directory (AD) forest including the design of an AD Administrative Tier model to protect systems from administrator error, lateral traversal, and privilege escalation attacks • Developed policies for user workstations to protect against the exposure of privileged credentials• Developed policies to harden specialized Privileged Access Workstations (PAWs) to protect against credential thefts, phishing, and various impersonation attacks

• Ensured security requirements for major applications and General Support Systems were met• Ensure requests for security assessments and authorizations (SA&A) of computer systems are completed in accordance with the policies and procedures• Provided appropriate level of support for SA&A activities• Supported continuous monitoring testing and other requirements. • Ensured that protective measures for physical security threats such as deadbolt locks on doors, placement of electrical wiring, etc., are in place when required• Ensured compliance with all legal requirements concerning the use of commercial proprietary software, e.g., respecting copyrights and obtaining site licenses• Maintained an inventory of hardware and software required for the system• Coordinated the development of a Contingency Plan and lead annual table-top exercises• Conducted risk analyses to determine cost-effectiveness and ensure proper safeguards are in place• Reported IT security incidents (including computer viruses not contained by antivirus software) in accordance with established procedures• Provided input to appropriate IT security personnel for preparation of reports to higher authorities• Coordinated memorandums of understanding, interconnection security agreements, and service level agreements are signed by all parties when applicable• Ensured user accounts are managed in accordance with applicable policies and procedures• Monitor vulnerability reports to identify required patches, hotfixes, and updates• Performed ad-hoc security scans on newly deployed systems and on systems with known vulnerabilities to ensure resolution or mitigation plans within specific time frame

• Reviewed technical and administrative controls and conducted RMF per NIST 800-53, NIST 800-37, and applicable agency policy• Drafted and security artifacts including, inventories, contingency plans, security control traceability matrix, security assessment reports, FIPS 199 System categorization form, Privacy Impact Assessments and System Security Plans • Conducted annual assessments of sites on compliance with organizational policy• Drafted and managed POA&M for authorized systems with appropriate remediation suspense dates and tracked findings until closure• Prepared system implementers for successful assessments through coordination and advisement

• Supported the CIO’s Chief of Staff as requested, including briefings on research projects such as NASA’s Nebula Cloud Computing Platform• Provide day-to-day support for NASA CIO staff such as SharePoint troubleshooting and problem resolution• Served as SharePoint lead for Chief of Staff: most recent project included translating manual approvals into an electronic workflow to be managed through SharePoint to eliminate lag time, and testing the workflow• Designed user manuals for usability, maintainability, effectiveness and in compliance to NASA policy• Created and managed customized central database for equipment manager

Enrolled in a one-year career development program and earned six-month corporate internship and college credit following six months of rigorous technical and professional trainingMastered coursework in business writing, professional skills, advanced networking, advanced repair, advanced troubleshooting, critical thinking, computer networking, customer service, desktop support, and IT help desk