Joined a team of Information Assurance engineers at Excentium, tasked with assisting the DoD in getting a brand-new facility DIACAP certified and accredited. NIPRnet (unclassified data) and SIPRnet (classified data)networks were co-located here, but each had different MAC (Integrity and Availability) and CL (Confidentiality). Collectively, our work led to the Certifying Authority granting DHHQ authority to operate (ATO)This was a phased, physical relocation of Tricare-owned assets. Legacy data, networks, hardware and software was moved from Skyline Towers to Defense Health Headquarters (DHHQ) in Falls Church, Virginia. A new building under construction at the time.We began the process with a security audit and baseline assessment, looking for compliance gaps across a variety of IA controls---physical, technical and administrative. Risk analysis, identification, enumeration and mitigation strategies offered. Meetings with Christian Brock, CIO and other DoD stakeholders. Briefed key individuals on the physical, technical and administrative security requirements. Gave them adequate time to implement. Then, returned on-site to visit---validating each IA control (100+) against a comprehensive QA checklist. Assembled the DIACAP team on the consulting side and client side.Registered new networks, ports and protocols with their respective DoD branches.Identified potential vulnerabilities in security posture that required remediation for compliance.Conducted validation activities and compiled validation results.Documented/diagrammed proposed network architecture, boundaries and enclaves for each of the incoming tenants. Familiar with DISA STIGs.Contributed content to a variety of documents, comprising our final deliverable.Technical Writing included the following:Security Education, Awareness and Training PlanSystem Design DocumentSystem Security PlanPrivacy Impact AssessmentContinuity of Operations PlanIncident Response Plan

Software requirements for the new JSS website involved the collection of personally-identifiable information from Service members and their families---necessitating DIACAP-accreditation before the website, its integration with other sites and its back end functionality could be launched. Our work resulted in getting the JSS website an ATO...and it was successfully introduced into the ARG/ANG enterprise. Documented/diagrammed software requirements for our application development/test team. Communicated the functionality that was needed, as well as design preferences, branding images/colors, use cases, usability concerns and performance criteria. Weekly meetings with ARG/ANG stakeholders, like Janet Salotti, who led the Yellow Ribbon Reintegration Program. ESGR, Family Programs, FMAP, Behavioral Health, SAPR and Transition Programs, too. Listened to what their most dominant needs were. What features on the JSS website proved to be most useful to their constituents, Noted product enhancement requests and expanded their vision for different use cases and business process workflows that were possible. Given the feedback, our emphasis became ease of search, navigation and usability for JSS users--so military personnel could quickly find the online resources they were looking for 24/7 especially during a crisis.Wrote the System Security Plan (SSP) and Privacy Impact Assessment (PIA) detailing the personally identifiable information (PII) we were collecting, storing, querying, retrieving, viewing, printing and exchanging between various DoD systems. Evaluation of the system architecture and data flow to identify places where this data was potentially at-risk. Data at rest in databases.Data in transit, electronically exchanged. Diagrammed the data flow and directionality. Documented multiple ways we proactively protected the data---physically, technically and administratively. Handled a small data breach during my tenure here, with positive outcome.

Licensed in the Commonwealth of Virginia to sell Life Insurance and Securities.Whole Life and Term Policies. Mutual Funds exclusively through American Funds.Passed the Series 6 and 63 Exams. Passed Virginia Law Exam. Registered Agent with FINRACRD# 5583257Met with individual clients and couples. Conducted a comprehensive Financial Needs Analysis.Confidential interviews to assess their current financial situation---outstanding debt, credit history and score, monthly income/expenses, assets, real estate owned and future needs. Their current tax bracket, interest rates, their monetary and lifestyle goals, timeline and risk tolerance. Then made appropriately-advised recommendations in their best interests. Always operated from a place of honesty, competency and integrity. Educated my clients so they could make decisions that would compound in their favor over time. My professional reputation and my fiduciary responsibility to them was always very important to me. Worked with the following financial advisors at PFS Investments:Shakil IslamCRD# 4697239Samir QureshiCRD# 4926477Sunny PatelCRD# 5381217Raju Mahmood CRD# 5016946

Born out of the events of 911, the US Government formed a watchlist for individuals suspected of being involved in terrorist activity. Software requirements for an FBI screening system that enabled identity search---the comparison/match of names and biometrics, retrieval, remote access and sharing of terrorist watchlist data domestically between US Federal, State and Local law enforcement agencies. NCTC, DHS, TSA and CBP. Integration with CJIS and NCIC. Required precision and accuracy because of name variants, so we developed an aggregated, disproportionately weighted search algorithm. Required scalable architecture and high availability at 99.999% uptime to accommodate an expected high volume of concurrent search requests. The content residing in the terrorist screening database was categorized and optimized for speed of retrieval. Meetings w/stakeholders having varying perspectives and needs, depending on their organizational roles. Requirements elicitation, documentation and traceability. Identified use cases and diagrammed business process flows in UML and Visio. Wrote interface control documents and diagrams for uni-directional and bi-directional electronic data exchange between systems of same security classification. System design documentation.Market research, vendor comparison, selection and implementation of a dual-factor authentication solution.I am a CIPP/US professional, certified through IAPP. Contributed content to Privacy Impact Assessment, working together with legal counsel and technical architects to determine where PII is introduced/collected. Where it resides. What circumstances/events trigger it's flow/movement as it traverses systems. Where it's archived in log files. Where it's replicated, if there is redundancy/failover to another geographic location. Contributed to writing the SSP, PIA, IRP and COOP deliverables.During my tenure at TAC, it was an honor to receive recognition/award from John O. Brennan, CEO for my work.

Requirements gathering, definition, revision and management for a security incident database and reporting system---centralized and available across all NRO Directorates. Worked directly with Chris Hamlin, CIO and Mary Rose McCaffery. Validation with use cases and screen mock-ups. Working with ISSMs and ISSOs.Caliber RM: Requirements gathering, definiton and management for a brand new product----a proprietary and proactive network monitoring tool called NETWITNESS. Configuration and testing in conjunction with COTS Intrusion Detection Systems. Review, investigation and audit of system log files for usage trends and anomalies.conducting process improvement studies and implementation,

Senior Business Analyst on several DoD Healthcare Projects, under RITPO/CITPO Management.Administration and integration of military healthcare systems. Software installations, configuration, testing, tuning, troubleshooting. Optimizing for performance/resource utilization. Upgrades and IAVA security patches. DEERS system of record at DMDC. DISA San Antonio, TX DISA Columbus, OH DISA Montgomery, AL SAIC at the ATIC in Skyline/Falls Church, VALegacy CHCS and web-based CHCS-II >100 CONUS/OCONUS MTF sites for patient care TRICARE Online EWRAS/NAS and Regional MCSCs (systems integration) DMHRSi CCQASOracle HTB and HL7 RIMOracle 9iAS and migration to Oracle 10gAlso was the Lead Analyst at the inception of the Washington DC Bioterrorism Surveillance System. Together with Washington DC Department of Health, all local EMS and Hospital Emergency Department Heads, to include Dr. Craig F. Feied, MD. Quest Diagnostics, CDC and Epidemiologists. Building an alert/notification system that was to be available 24/7 with 99.999% uptime. Monitoring "chief complaint" and certain set of symptoms...and detecting if a volume of patients were calling 911 ambulances and presenting at Emergency Rooms. Algorithms to establish the normal cadence of patient care/baseline…and any anomalies, significant departures from it. This would invoke a predetermined sequence of events. Cascading, based on a flow chart with "if/then" conditional logic to notify all the appropriate individuals and mobilize resources ASAP during a crisis. Incident response plan.

Analysis & re-design of paper-based & electronic billing statements for cell phone/wireless carriers. Competitive analysis across multiple service providers---marketing/branding and customer service. Best practices for development of a secure, fully-transactional web site. On-line bill presentation and payment---with exceptional content and formatting.

System Administrator - International Performance Monitoring System. On-site resource for daily system administration/testing of IPMS-II hosted on new platform. Daily, proactive testing of global telecommunications network to ensure service level agreements (SLAs). Invasive probes placed throughout production network---with remote access/control via VNC viewer. Intl “test” calls were configured---simulated by providing an origin/destination pair of cities, scheduled at a peak time. Resulted in an audio file. Benchmarks recorded. Quality/performance metrics (line current, dial tone detection, post-dial delay, call completion ratios, call disposition, local recorded voice announcements, echo and jitter) were evaluated over both PSTN lines and DAL circuitry. Analysis/outcome delivered to C-level executives in daily/monthly and ad hoc reports. HW/SW installation & upgrade. RJ-11 and RJ-45 cabling. In role for an intensive 6-month period in effort to launch this project.Note: Laid off from this position because company was going BANKRUPT after the Bernie Ebbers fraud/embezzlement scandal and financial crime.

Provided routine/critical technical support to hospitals who implement Affinity software (a suite of enterprise-wide clinical applications) with DataGate (now eGate) as their integration engine and HL7 2.x message broker.Clients included:National Jewish Research & Medical CenterSoutheastern Ohio Regional Medical CenterGood Samaritan HospitalSibley Memorial HospitalHogue HospitalConducted strategy meetings with Hospital Information Systemsdepartments and third-party vendors to determine current infrastructure and staffing resources. Defined requirements of the sending/receiving systems,directionality of data, its format and message types (ADT, ORU, etc) to betransacted electronically. Drafted a project plan for a phased implementation, w/milestones andpotential risks. Outlined a strategy for what we would do and how it would beexecuted. Managed client expectations and issues that arose.DataGate (now eGate) software installation/configuration on UNIX and NT server platforms.Assignment of static IP address/port number and entries to hosts file. Built routetables, with rules for translating data formats between the disparate systems.Created users, group profiles and permissions. Established/tested bi-directionalTCP/IP connectivity and communication between hosts for real-time messaging(serial FIFO) and FTP batches. Verified HL7 message receipt/acknowledgement.by using “ping”, netstat –p and other network monitoring tools. Tail –f” log files towatch the chronology of events and exceptions written to audit log files.Visibility into queues (evaluated queue counts and speed at which theyincrement/decrement). Validated the integrity/content/acceptance of the data onthe destination system.SDLC. Product enhancement requests from the field were given to our application development team. Led on-site instructional training courses for hospital IT staff on how to admin the new software.

Worked with John Gutwald, John Bernas, Jr. and Mark Kominski at 24/7 Data & Network Operations Center for MEDSTAR/Washington Hospital Center, Washington, DC. Also supported Peter Basch, MD at Washington Primary Care on Capitol Hill for al clinic software installations, upgrades, maintenance, troubleshooting and daily Seagate backups. Windows 95 on the desktop and Windows NT in the server room. Setup and test of new network printers to replace local printers.Established and monitored approximately 40 HL7 interfaces. Uni-directional and bidirectional routing of real-time clinical transactions between disparate systems---within and outside the hospital enterprise. Routine and critical troubleshooting across TCP/IP networks. Security, privacy, patient confidentiality and HIPAA. Used system log files and queue counts to trace traffic as it traversed multiple systems. Health data dictionary. Data mapping to resolve many systems' interpretation of the same concept to one single alphanumeric value...a unique concept identifier. Cerner and HIE interface engines, with hub-and-spoke architecture. Monitored the receipt/acknowledgement of incoming messages real-time and batched intervals. Identification of sending system, message type, and delimiters. Queue, parse, re-construct to specifications of receiving system(s) and enveloping for outbound routing.

Provided help desk support for a physician practice management/billing system called MEDICAL MANAGER. Also went on-site to physician offices to install, configure, upgrade and troubleshoot it. Managed UNIX operating systems remotely using PC Anyhwere and a bank of dialup 56k modems. Software trainer for physicians, nurses and other clinical/admin staff both on-site and off-site in our classroom. Instructor-led classes and hands-on use cases and scenarios. Attended annual industry conferences and live events to interact with the MEDICAL MANAGER user community nationwide. Listened to hear what the collective sentiment was towards our latest release of the software, frustrations, needs and product enhancement requests. Market feedback relayed back to our app dev team via documentation and accompanying diagrams to illustrate sequence of steps and if/then conditional logic.We also did several installations of DOCUSCAN as this was the beginning of business process automation for office visit paperwork (encounter sheets, ICD-9 codes, CPT-codes, etc)

Patient Scheduling for all of the clinical departments/physicians providing outpatient care at the Ambulatory Care Center. Business process reengineering. At this time, patient scheduling was a "pen and paper" based process. We implemented IDX software to centralize and automate Patient Scheduling. Entering all of the Physicians into the system, their specialities, their schedules, all the patient exam rooms, resources and equipment available to reserve. Received incoming calls. Triaged and scheduled patients for routine office visits and outpatient procedures, such as sigmoidoscopy and cardiac stress tests.

Worked for this primary care practice in the evenings and rotating weekends, while putting myself through school as a Pre Med student at GMU. Answered phones. Light triage, but forwarded urgent/complex calls and Rx refill requests to the Registered Nurse working with me. Set appointments for all the doctors. Pulled charts and prepared encounter forms for the following day of patient care. Greeted patients, verified their current contact information and health insurance. Photocopied their health insurance card front/back. Gave them their encounter sheet…and new patient questionnaire if they were not an existing patient with us. After their visit, took their co-pay or full payment, provided a receipt. Entered their visit into the computer and any associated labs, x-rays, IVs or any other services. Paired CPT procedure codes with corresponding and compatible ICD-9 diagnosis codes to assure insurers would reimburse us. Photocopied medical records for patients requesting them. Added incoming lab/radiology reports to patient's main medical record, in the right chronological order. Made sure all the doctors SOAP dictation tapes were ready for the transcriptionist to pickup and transcribe the next day. Trusted with the day/evening cash received. Did the financial reconciliation and secured the monies for bank deposit the next morning. Made sure to lock the cabinet with all the Rx samples (from Merck, Pfizer drug reps) and the physicians' prescription pads and DEA#s. Made sure the office and waiting room (magazines!) was clean for the next day. Wiped down all surfaces with saturated anti-microbial cloths for infection control. Locked the office. Maintained patient confidentiality and HIPAA compliance. Always polite, calm and respectful that people coming to see us were not feeling well and were often irritable.James P. Jenkins, MDJoseph W. Gravel, MDDaniel P. Garfinkel, MDAlan W. Dappen, MDMary E. Braza, MDElizabeth Intermill, CRNP

Worked the 6pm-2am evening shift. Received incoming specimens from medical couriers each day, representing a large volume of specimens from physicians in our region after a full day of outpatient care. Specimen Accessioning (identification, sorting and labeling) for Histology, Cytology, Hematology, Microbiology, Toxicology and Chemistry Lab. Worked with Fairfax Hospital Pathologists. Gross Description of Specimens. Tissue Processing Machine. Embed in Paraffin Blocks. Warm Water Bath and Microscopy. H&E Stain. Special Stains. Campylobacter and Immunoperoxidase. Cover slipped trays of slides for the pathologists. Processed STAT Heart Biopsies for Fairfax Hospital Cardiac Surgeon, Edward A. LeFrak, MD. This took priority and was placed ahead of everything else because this was tissue from heart transplant patients and cardiologist needed to know if their body was accepting the transplant, or saw it as foreign and was mounting an immune response against it.Training and certification in W Edwards Deming's Total Quality Management (TQM). This was for quality assurance and was strongly influenced and modeled after the Japanese auto industry.

Summer internship. Provided front desk reception and administrative support to Terry Golden, Administrator of the GSA. Worked on his project and initiative to ban smoking in ALL Federal buildings.

Summer internship with the President's Council of Economic Advisors. Office of the Chairman. Executive Assistant to the Chairman and Staff. Provided front desk reception and administrative support for Beryl Sprinkel, PhD as well as the macro/micro economists. Included preparation of Official Reports to Congress. Supported the computation and release of the GNP/GDP numbers to the Press. Also provided administrative support for Donald Regan, Secretary of the Treasury. This was during the Reagan Administration (1985).