Andrew Scholnick Email & Phone Number

As an independent contractor in the technology and security industry, performed research, identification, and development of customer opportunities; capture management; bid and proposal functions. Served multiple simultaneous clients providing Subject Matter Expertise (SME) for various activities including technical writing, software systems design, programming, and formulating solution architectures.CORE COMPETENCIES INCLUDE:• Network Security (Internal And Customer Facing) • Process Reengineering• IA and Security Analysis • Mobile and Wireless Infrastructure & Security• Internet Systems and Architecture • Rapid Prototyping• Large-Scale DBMS Design • Unix / Linux / Android Systems• Project Management • Software Product Development (Full Life Cycle)• Standards and Conformance TestingMANAGEMENT SKILLS INCLUDE:Consulting, System Design and Analysis, Process Re-engineering, Risk Management, Proposal Writing, Cost Assessment, Presentation Development, Conformance Testing, Technical Oversight Mentoring, Product Testing, Patent Application

Newport News, Va, Us

 Principal designer for advanced DoD cyber range used for both Red and Blue cell activities and execution of scenarios.Range capabilities include the ability to reconfigure entire resource base within 55 to 60 minutes, depending on complexity, for multiple logical networks with hundreds of individual nodes and full emulation of mixed network traffic conditions – including highly distressed channels, satellite links, and various secure and insecure intermediaries. In this way, the range is able to emulate secure DoD network infrastructures and their connection through DoD and/or Internet links to adversaries and/orpartners within a completely secure and isolated virtual architecture to allow for training and intrusion/exploit testing. Cyber Security SME, supported various ongoing efforts, including soliciting new Cyber Security work. Design and prototyping of innovative satellite security and encryption technologies. Supported ongoing efforts to solicit new DoD and US Government

Columbia, Md, Us

As the development manager and lead architect for the MobileFortress™ product, directed design and implementation of secure android OS. Implemented structured design practices while coordinating team efforts to engineer first full commercial MobileFortress product release, including: app containerization, context-aware VPN-tied secure processing isolation, whole-device DAR protection, enterprise / deployment customization, and a backend device management subsystem with dynamic over-the-air (OTA) security posture adjustment capabilities. Also created Mobility Services line of business plan defining a phased growth-path for entering and building a sustained consulting services practice in the commercial marketplace. In addition, supports ongoing efforts to solicit contracts and grants, including work which could benefit from in-house expertise based on MobileFortress secure Android technology.

Herndon, Va, Us

Security and wireless technology Subject Matter Expert for US Army AKO/DKO contract. Assistant Program Manager (APM) on a variety of initiatives in support of the US Army PEO-EIS’ AKO/DKO program (the us.army.mil website and services) and was also responsible for services including architectural and security analysis, design research, infrastructure troubleshooting, and functionality assessment. Focusing primarily on the GoMobile initiative, Mr. Scholnick defined the Data Only Non Routing Architecture (DONRA) model for smartphones and performed and oversaw in-depth technical assessments of individual and integrated products ranging from commercial software applications, to system tools and peripherals, to PDAs and smartphones. These studies varied widely and covered issues including security posture, scalability, usability, cost of ownership, and basic functionality. Specific projects include coordination of the GoMobile Application Exchange (App-X ) Warehouse pilot initiative and the AKO Outlook-Connector CAC Integration project, as well as various security-related integration assessments and policy recommendations.

Herndon, Va, Us

IA, infrastructure, and security architecture analyst supporting planning and implementation projects for Army PEO-EIS roll-out of Unified Capabilities compliant with the 2013 Unified Communications Requirements (UCR) VoIP/VVoIP/XMPP/SIP/AS-SIP infrastructure worldwide (mostly CONUS, PACOM, and EUCOM regions). Working with DISA, contributed to evolving guidance regarding JIE goals and Infrastructure Modernization - focusing largely on XMPP (IM/Chat/Presence) and VoIP compliant UCR network and server infrastructure technologies. Developed VoIP implementation plan and ADN/EUB transition plan for PEO-EIS I3C2 Acquisitions TMD. Additional activities included vendor technology assessment and architectural assessment of security posture, integration, interoperability, scalability, usability, cost of ownership, and basic functionality for various systems and components. Coordinated and ran a week-long multi-vendor functionality and interoperability assessment exercise for XMPP technologies. Arranged cooperative hosting by neutral 3rd party vendor, Dell, at their Herndon Solution Center in VA - resulting in a savings of over $500k to Army and resulting in valuable insights regarding engineering and deployment of UCR compliant XMPP technology. Designed testing infrastructure, test plan, and automated testing tools and oversaw all activities.

Reston, Virginia (Va), Us

• Directed research engineers in the discovery, acquisition, analysis, and verification of over 175 software and firmware vulnerabilities annually; providing actionable front-line security intelligence services to Fortune 500 companies and worldwide government and financial institutions.• Redefined operation of the iDefense Vulnerability Contributor Program (VCP) including budgeting, contract management, vendor and contributor management, and day to day operation resulting in a %400 increase in reporting of high-impact (dangerous) commercial software vulnerabilities while decreasing overall Lab expenditures by %32. • Increased overall team production of general intelligence research papers in 2009 by %10; covering topics including general security trends, customer operational and network security reviews, vulnerability research, and security-focused technology reviews including MPLS, WiFi, WiMax, Cellular, Mobile Devices, VoIP, Security Tokens, and Open Source and Commercial Software.• Automated contributor payment process resulting in a dramatic reduction in unnecessary processing overhead and time.• Communicated with key customers to gain insight into security posture, creating opportunity for additional on-site analysis and presentation work.• Prepared and presented in depth review of worldwide security trends for Purdue University staff and students highlighting current hot-button open source intelligence issues.

Encryption technology research work and R&R.

Designed and implemented a commercial IPSEC device utilizing SCPS (wireless IP) protocol gateway technology to enable reliable functionality without performance loss in satellite and other long-haul wireless networks. The resulting products, available within 90 days of start of development, satisfied immediate customer needs including IBM, US Forestry Service, and the US Marine Corps. The final product is capable of providing encrypted traffic at an average of 100% to 400% acceleration beyond the rated connection throughput.Designed and implemented proof-of concept prototype of Secure/Reliable Bulk Image Distribution system for Department of Homeland Security. The prototype, completed in less than 30 days, demonstrated coordinated & scalable distribution of fax & image data among wide combination of destinations.Performed various functions spanning management & implementation duties: project team scheduling, costing, and tracking, proposals, & software design/programming.

• Negotiated contracts with clients, generating over $80,000 in revenue over a 6 month period.• Analyzes, designed, and developed of SNMP functionality for TCP/IP and SCPS (wireless IP) protocol gateway products and their associated device drivers.• Prepared, presented and communicated in depth network security analysis for a prominent IDS provider resulting in additional secure infrastructure design.• Other assignments included conformance testing, system management, prototyping and documentation for various customers.

Us

• Maintained %99 uptime for all aspects of corporate computer, telephone, and network system operation including multiple Windows-IIS web-servers and application front-ends utilizing MS SQL Server as back-ends.• Implemented migration to Windows 2000 from Windows NT 4.0 and to Microsoft Exchange environment from SMTP email resulting in greater security, performance, and productivity for both corporate use and 3rd-party (hosted) services access.• Other responsibilities included system configuration management; VPN, DNS, WINS, and DHCP services; system configuration, maintenance and monitoring (SNMP); product evaluation, firewall configuration and management; operations tool development (Perl, C); troubleshooting; and MS Exchange server management

Reston, Virginia, Us

Conceived, staffed & implemented QuickBid NET; a commercial Web-based procurement bid-board: 1st Value Added Network certified by US Government.Manage/design/operate security, network & firewalls for Pender Drive office of CACI.Managed teams building client/server apps for various UNIX & MS-Windows platforms.Redesign & implementation of DNS root-server and Domain Name Registration engine for ENetRegistry.Com.Advised/consulted at AT&T with creation of Global Digital Video Services center used by US Govt & military to coordinate worldwide teleconferencing. Lead re-development of automation & device drivers for conferencing mgmt services provided to the US-DOD/DISN.Managed installation of SACONS Gateway (EC/EDI document translator/router) for DISA NEP (Network Entry Point) at DoD Megacenter, Columbus, Ohio. Project Mgmt responsibilities included planning/managing functional, technical, and staffing of various projects.

New York, Ny, Us

Designed/implemented AOL's Internet email gateway & performance reporting/monitoring tools & system maintenance utilities.Designed & supervised upgrade of AOL’s internet link from a 56KB modem to T1 link, and further upgrade to T3, with geographically isolated 'Hot Backup'. Implemented AOL’s initial security Firewall.Sole UNIX System Manager/Admin during AOL’s growth from 5 development systems to 500 UNIX production systems and over 100 development systems. Managed engineering and maintenance of corporate DNS; initially among four Class C IP networks; transitioned to single Class B.Designed/engineered/maintained system installation/productivity tools for over 500 UNIX computers including HP 9000's, SUN SparcStations, 386/486/Pentium-based SCO UNIX systems, and Auspex File Servers.Responsible for hardware and software installation and maintenance of UNIX-based production systems.

Mclean, Va, Us

Designed and managed implementation of the CellSIGHT application, LCC's cellular network management product with integrated database communication and analytical functionality. This product generated over $500k in revenue before beta-testing was completed and was one of the key corporate assets purchased by Ericsson several years later.Other activities included participation in marketing to domestic and international customers giving product demonstrations and other customer presentations, performed market analysis and feasibility studies, managed LCC's UNIX MIS staff, performed third party product evaluation, hardware configuration management, and UNIX system and network administration.

Assisted in the creation of COS's Engineering Services Division (business plan, definition of marketing and pricing strategies), managing business development projects, and producing proposals for engineering assignments.Created the boilerplates for proposals, resumes, and the division's corporate profile decreasing proposal turnaround by %40.Performed systems analysis for in-house computer hardware / software needs and implemented a project tracking system, document management system, client tracking database, and prospect database (C, SQL, Unix shells) to facilitate sales and decrease overall workload (~%20).Project leader for Intermediate Layers Group which designed and implemented ISO Transport and Internet Layer conformance validation testers.

As a Project Leader, designed and directed implementation of standard PBX Control Interface software used in ARC's telephone network Switch Interface Subsystem (SIS), an 80286 based PC-DOS embedded system machine. Initial SIS implementation controlled an AT&T System 85 PBX, performing maintenance and statistics gathering for ARC's PBX Control and Data Processing System (ARTACS). Scheduled, Managed, and participated in product design, implementation, and documentation. Participated in redesign of ARTACS system.

Client assignments included: N.A.S.A. - X.400 network gatewayTERA Systems - Digital Voice information systemLife Cycle Technologies (LCT) - commercial document production and managementB.T. Dialcom - X.410/X.rts and X.ds conformance analysis / training / software developmentU.S.D.A. Graduate School - Taught course on UNIX systems and C programmingBCC - training and support for Word Perfect users on IBM-PC micro computersCSC - UNIX configuration Connecticut and R Street Associates - configuration support / systems analysisReston Manufacturer - PBX configuration monitoring and control software

Washington, Dc, Us

Designed and developed software to take Alpha Micro word processing files, inset appropriate typesetting commands, and transfer files automatically to a typesetting machine. Created an Electronic Mail System and a Calendar Datebook System in BASIC and C, and developed several relational DBMS applications. Assisted in selection of hardware, software, and services. Systems operator for three super-micro computer systems. Chief software and database analyst for Comptroller's Office.