Mr. Cain joined the plant cyber team supporting the design and development of the Xe-100 advanced reactor as a technical and programmatic subject matter expert (SME) in nuclear cyber security. He was responsible for the interpretation and application of regulatory guidelines, including potential rules affecting advanced reactors, and mitigating the challenges facing advanced reactor designs with respect to the current rules. Mr. Cain also provided the following functions:• Provided guidance for the integration of new security features and tools into theplant design and served in plant system design reviews.• Collaborated with internal and external stakeholders, including plant systemdesign teams, vendors, and government agencies, to integrate security measuresinto all technology solutions.• Supported the development of system hardening and configuration standards forplant systems and authored the design documentation for the plant cybersystem.• Provided GRC functions and managed the cyber team’s project risks and ledmonthly risk management meetings with leadership.• Developed and managed cyber security program policies, standards, procedures,and forms aligned with industry best practices.• Prepared and facilitated multiple cyber training workshops with project teams toprovide awareness of cyber requirements and scoping objectives.• Served as representative for industry group initiatives pursuing refined regulatoryguidance for advanced reactors.

Mr. Cain served both IT and OT cyber teams supporting regulatory commitments, technical functions, and program implementation. Served as a cyber SME for many OT systems and GRC SME for enterprise program development.• Partnered with external facing business unit within Energy Northwest, providing IT and cybersecurity services, winning contracts serving utilities and municipalities across the northwest.• Oversaw the Enterprise Central Monitoring Project which culminated in expanding the Splunk deployment and decommissioning Solarwinds SEM.• Led Enterprise Cyber Program development, aligning with the NIST Cybersecurity Framework and Risk Management Framework using NIST 800-53 controls. Managed the project and coordinated the activities of 5 team members in developing and improving the enterprise cyber program, which included modifying and creating 25 policies, procedures and corresponding forms.• Defined and drove the technical vision, roadmap, and strategy for data security across IT and OT systems and networks and measured this success by implementing the Cybersecurity Capability Maturity Model (C2M2).• Conducted system security analysis and risk management for critical assets, ensuring compliance with established security policies and standards, and communicated the results and risk posture effectively to senior leadership.• Served as a member of the Enterprise Architecture Review Board and was responsible for defining and documenting corporate cyber standards for the organization.• Led effort to scope, create, and implement Preventative Maintenance (PM) tasks for all in-scope Critical Digital Assets (CDAs) to align with industry benchmarking that strived to balance regulatory compliance with business costs.• Led effort to refine and reduce 10 CFR 73.54 scoping related to Emergency Preparedness assets, including cleanup activities to address program deficiencies.• Participated in inspection activities interfacing directly with NRC personnel.

Mr. Cain was initially hired as a limited-term contractor and promoted rapidly through a series of leadership positions involving increased responsibility based on strong technical, project, and team leadership performance. Served as the SME for the Cyber Security product line.• Performed proposal writing, sales, and contract negotiations for contracts in excess of $5 million for which I was also project lead.• Worked closely with customer stakeholders to identify and mitigate risks, performed security reviews, designed top-tier security practices, and delivered strategic, innovative security offerings.• Conducted cyber readiness audits and inspections to assess the effectiveness of implemented security measures. • Contributed technical expertise to ongoing work at Columbia Generating Station, Diablo Canyon, Clinton, Indian Point, and Calvert Cliffs Nuclear Power Plants.• Regularly oversaw concurrent projects at different customer sites and ensured successful approval of all project products and deliverables.• Designed and implemented the Emergency Preparedness network to address CDAs in-scope of the Cyber Rule within the Emergency Response Organization.• Demonstrated effective leadership skills, consulting, negotiating, communicating, consensus-building, presentation, and facilitation.• Technical contributor to the design and implementation of the Digital Asset Protection System (DAPS) at Columbia Generating Station.• Served as project lead for cyber security assessments of plant systems, including plant process computer, turbine control, security, leak detection, stack monitor, main steam, spent fuel storage, reactor water cleanup, and many others.• Provided cyber-security evaluations of plant design change components, including devices in the digital feedwater systems, the security computer system, Level 4 and Level 3 time synchronization, and plant network switch infrastructure.

Mr. Cain joined the company’s IT and development team and provided key technical input into the design, configuration, and deployment of proprietary cutting-edge technology. Served as Level 3 support contact for the company’s custom web applications.• Explored solutions for software expansion, facilitated proof-of-concept with the development team, and selected and designed a cloud infrastructure environment for the company's expanded data center.• Managed the evaluation, selection, and migration of key business applications for which he was also the administrator.• Project lead for VoIP conversion from preexisting PBX phones.• Developed scripts to improve SQL query efficiency.• Experience with IIS, SQL, Sun, CentOS, Ubuntu, Fedora, RedHat Enterprise Linux, and Windows server and workstation software.• Managed the Business Continuity and Disaster Recovery plans for multiple organizations.

Mr. Cain was the field office network administrator in Pasco, WA and was project lead for a site-wide endpoint encryption program on all NOAA hardware on site. He provided the sole IT support for the field station and had responsibilities including server configuration and management, end-user support, as well as general administrative and maintenance tasks.