Christopher Goff Email & Phone Number

Bigfork, Mt, Us

Bigfork, Mt, Us

Woonsocket, Ri, Us

Reston, Virginia, Us

Accomplishments:Designed and implemented a best practice solution for a security hardened baseline configuration for Windows Server 2019/2022 images across the vendor-diverse DHS DCCO Cloud, and delivered to the build team.Duties:• Create, maintain, deploy, and enforce cloud-level and system-level policies to continuously improve cloud security posture and DISA STIG compliance within a diverse Department of Homeland Security enterprise cloud environment. o Perform assessments of and consult on cloud security best practices, vulnerability remediation strategies, and operational workflows. o Collaborate with information system security officers and system owners to ensure effective solutions are implemented while preserving maximal uptime. o Develop and maintain PowerShell scripts to strengthen and advance a DevSecOps ethos.

Herndon, Va, Us

• Prioritize & manage CSPM & vulnerability data from AWS infrastructure, authenticated OS and web application scans; deploy and tune appliance-based scans in Qualys and Nexpose for VMDR and policy compliance checks against CIS standards; generate curated reports, specific CVE information, and associated guidance to stakeholders and remediation teams.o Continuously monitor scanning platforms to ensure environments are fully accounted for. Work with system owners to create and maintain applicably privileged service credentials in Active Directory, Oracle & MSSQL databases, network appliances for use with scanning as necessary.o Maintain & update centralized tracking records on key vulnerability statistics from each (SAST/DAST/SCA) scanning suite and penetration test results, to be referenced in compliance/third party auditing and FedRAMP assessments.o Work hand-in-hand with infrastructure & development teams to provide applicable remediation steps and prompt validation.• On-demand security impact analysis & evaluation of change management tasks, architectural reviews, resource deployments, and DR test procedures.• Maintain heightened awareness of daily vulnerability status and notify appropriate product owners & remediation teams as needed. Develop and constantly improve tailored dashboards in VMDR tools. Generate and sustain detailed documentation to track incidents and their respective SLAs via ServiceNow.o Create and maintain deviation requests and Risk Register items for vulnerabilities and other risks that have exceeded SLA. Follow up with stakeholders to determine, implement, and validate suitable mitigation strategies.

Herndon, Va, Us

• Deliver, secure, integrate and maintain various cloud compute resources, network infrastructure, and 3rd party SaaS applications, all within multiple AWS tenants including GovCloud. Troubleshoot critical components, administer AD/Group Policy, participate in monthly OS patching and vulnerability remediation efforts, ensure security/policy compliance to meet business requirements.• Within GovCloud, leverage exclusively FedRAMP-moderate compliant applications for change management & incident response cases, secure remote access, endpoint protection & monitoring, vulnerability scanning: ServiceNow, Centrify, Qualys, DUO MFA, Akamai Identity & Access Management and Edge DNS.o Implement complete rollout of Qualys VMDR/FIM/Policy Compliance cloud suite including per-instance Cloud Agent deployment & configuration of authenticated scans via EC2 virtual appliances, to meet or exceed FedRAMP controls.o Deploy and configure DUO Federal account with strict policies on user devices, geographical location restrictions on logins & 2FA events, anomalous activity. Manage administrator accounts and review historical console events.• Consistently collaborate with site reliability, security, architecture, and network engineering teams to ensure efficient handling of deliverables as well as prompt mitigation & resolution of ongoing incidents in a globally dynamic environment.

Kalispell, Montana, Us

• Manage creation, maintenance, lifecycle, security patching of 160+ Windows 2012/2016/Linux AWS EC2 & VMware server instances, 300+ physical workstations. Support 40+ Cisco switches/routers/UCS including firmware/hypervisor configuration. o Originator of Stage/Prod patch cycle policy to standardize update processes and ensure continued stability of mission critical systems. Follow best practices in all aspects of systems operation.o Constantly reduced costs by terminating unnecessary AWS instances/applications & driving migration to newer & less costly yet more powerful virtual resource types.o Redesigned shared services & application tier to leverage AWS FSx for file services instead of EC2 instance-based storage. Implemented changes and noted cost savings as well as performance gains translating to a more responsive web application.• Architected and deployed VPC subnets, Security Groups and associated EC2 instances for a new AWS Govcloud environment to meet FedRAMP requirements.o Designed & implemented GPOs to match CIS & DISA STIG benchmarks for Windows instances within Govcloud.• Led continuous InfoSec vulnerability remediation campaign to satisfy compliance/audit requirements. Configure Tenable.io/Nessus to scan all environments for vulnerabilities and compliance data using both agents and authenticated scans. Generate digestible reports, remediate all findings via OS updates, 3rd party application patches, Group Policy, etc.o Sole architect for creation & implementation of SCCM site hierarchies to automate & tightly control update processes across two separate domains.• Acted as tier III escalation resource for IT Operations personnel. Coordinate with various IT teams to evaluate technical issues & determine optimal solutions.• Accomplishments: o Directly responsible for cost savings of $300,000+/year due to proactive investigation & discovery of, and enacting comprehensive solution to, a faulty vendor process involving file storage.

Columbia Falls, Mt, Us

• In depth knowledge and configuration of communications technologies including voice, data, RF, WiFi, cellular, VSAT, CCTV & surveillance, security, rack & power, and other proprietary systems.• Manage IT project engineering from conception to delivery. Translate customer specs into detailed bill of materials (BoM). Configured all software & networking components; generated necessary literature including manuals, SOPs, layout drawings, etc. Handoff/train customers on operation of equipment.• Administer Exchange/Antivirus/VMware/backup servers and processes as needed. Set up and maintain end users' desktop hardware & software. Manage Veeam backup.

• Provide Tier II physical & virtual desktop support/customer service to 300+ users both local and remote to 100% satisfaction. Audit all technology assets and create applicable reports.• Monitor datacenter (200+ physical servers) hardware & applications to immediately address & escalate any alarms. Promoted to sole responsibility for maintaining several Windows 2003 application servers.• Administer AD, Exchange, Avaya, Solarwinds Orion, Track-It!, WASP Asset Management, Spector 360, Symantec System Center, VMware, Safeboot/WAVE Drive Encryption suites. Deploy internally developed software to multiple environments. Recipient of Stellar Award in Q3 2010 for superior performance.

Kalispell, Mt, Us

Redondo Beach, Ca, Us

A.S., Electronics Engineering

Education record