Christopher Kindle Email & Phone Number

Sherwood, Ar, Us

Responsible for designing and guiding the implementation of security solutions, policies, and controls across our company's business processes, systems, and products.Responsibilities:Conduct risk assessments of new and existing business initiatives, systems, and software applications to identify security vulnerabilities and threatsDevelop security strategy and architecture to address key cybersecurity risks to the organizationAdvise product teams on building security into new features and releases by defaultRecommend and design security controls for networks, systems, and infrastructure based on best practicesCollaborate with IT, engineering, and business teams to align security priorities and requirementsPerform gap assessments of current security policies, controls, and tools compared to strategyProvide guidance to senior management and board on security program strategy, investments, and resource needsConduct penetration tests, red team exercises, and code reviews to validate effectiveness of security controls

Develop, document, manage and implement an Enterprise wide Security Framework, Strategy and Roadmap, that outlines and defines the tactical, operational and strategic plan for cyber security following NIST, NERC CIP, SOX and PCI requirements.Develop criteria to assess and validate IT security risks (e.g., DLP, IDS, NERC CIP) and relevant security architectures.Research information security standards, conducting system security and vulnerability analyses, and risk assessments, studying architecture/platform evolution identify security gaps, and evaluate enhancements.Track and understand emerging cybersecurity practices and standards by participating in educational opportunities, reading professional publications, maintaining personal networks, and participating in professional organizations to provide oversight with the collection and analysis of system security reports and summarize data and trends.

• Monitoring data sources to detect, characterize, and respond to attacks on the agency's computing environment, domain boundaries, network assets and supporting infrastructures.• Providing in-depth cybersecurity analysis, and trending/correlation of large data-sets such as logs, event data, and alerts from diverse network devices and applications to identify and troubleshoot potential cybersecurity incidents.• Maintaining, operating, and enhancing the performance of toolset, via means and technologies (RESTful APIs, scripting languages, and interface scraping).• Consulting and collaborating across the Enterprise to augment and improve the information security posture via enhanced policies, system architectures, and processes.

• Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security. • Perform the deployment, integration and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise’s security documents specifically.• Participate in the planning and design of enterprise security architecture• Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines and procedures). • Develop, implement, maintain, and oversee enforcement of policies, procedures and associated plans for system security administration and user system access based on industry standard best practices.• Design and implement disaster recovery plan for operating systems, databases, networks, servers, and software applications. • Conduct research on emerging products, services, protocols, and standards in support of security enhancement and development efforts.• Deploy, manage and maintain all security systems and their corresponding or associated software, including firewalls, intrusion detection systems, cryptography systems, and anti­virus software.• Monitor server logs, firewall logs, intrusion detection logs, and network traffic for unusual or suspicious activity. Interpret activity and make recommendations for resolution. • Recommend, schedule (where appropriate), and apply fixes, security patches, disaster recovery procedures, and any other measures required in the event of a security breach. • Test new security software and/or technologies.

Little Rock, Arkansas Area

• Directly manage and maintain 5 OU’s across the Western Region encompassing 5000 users, groups, and corresponding Exchange accounts. • Provide Tier II/III support to local PC techs across the Western Region.• Install new / rebuild existing servers and configure hardware, peripherals, services, settings, directories, storage, etc. in accordance with standards and project/operational requirements including physical and virtual environments.• Install and configure systems such as supports DSN Administrative LAN/WAN applications or Asset Management applications.• Research and recommend innovative, and where possible automated approaches for system administration tasks. Identify approaches that leverage our resources and provide economies of scale.• Perform regular security monitoring to identify any possible intrusions.• Perform daily backup operations, ensuring all required file systems and system data are successfully backed up to the appropriate media, recovery tapes or disks are created, and media is recycled and sent off site as necessary.• Create, change, and delete user accounts per request.• Apply OS patches and upgrades on a regular basis, and upgrade administrative tools and utilities. Configure / add new services as necessary.• Perform ongoing performance tuning, hardware upgrades, and resource optimization as required. Configure CPU, memory, and disk partitions as required.• Maintain DoDI 8570.01-M IAT Level II certifications as well as Secret Clearance.

• Design, configure, and implement systems and network hardware and software. Develop standard guidelines for the use and acquisition of software; plan, coordinate, implement, and test network security measures; and monitor and optimize hardware, operating systems, and databases.• Architecture, design, install, configure VMware ESX, ESXi, within vSphere.• Built, configure, deploy VMs and templates. Complete Physical-to-Virtual (P2V), Virtual-to-Virtual (V2V) and Virtual-to-Physical (V2P) migration of Windows 2003, and 2008 as well as Linux servers from VMware, Hyper-V, and legacy hardware.• Develop, test and maintain a disaster recovery plan for critical VMs and application data.• Lead design, deployment and maintenance of a broad range of Microsoft technologies including Windows Server ; SharePoint; MS SQL ; Windows Server Update Services (WSUS); DNS; WINS; DHCP; Active Directory; Group Policy Design and Implementations; IIS and Remote Desktop Services. • Research, advise, and make recommendations to management on systems, network, and other significant IT issues; assist in the development and implementation of short-term and long-term IT plans for the court unit; and lead implementation and integration project teams, as required.• Provide daily systems and network backup; regularly monitor operations of the systems and network equipment; recommend and install updates; and act as technical expert in solving network and related computer problems. Install security operating system patches and database software upgrades; provide server maintenance; and troubleshoot problems with network equipment. • Develop budget justification for IT equipment, upgrades, cyclical replacement, and normal operations. Monitor or approves all expenditures for IT operations. Assure budgets and logistics are adequate for program responsibilities. Analyze and monitor the Court’s automation budget to ensure information technology priorities are properly funded.

• Troubleshot network problems and conflicts. Suggested and implemented procedure improvements to reduce response time and reliance on other organizational groups.• Installed and maintained Cisco IOS and configurations on multiple switch and router versions throughout the network.• Administered and managed Active Directory, DHCP, and DNS servers within an OU.• Installed, supported, and maintained new server hardware and software infrastructure.• Analyzed and resolved faults ranging from a major system crash to a forgotten password.• Undertook routine preventative measures and implemented, maintained, and monitored network security, particularly if the network connects to the internet. Planned and implemented future IT developments and undertook project work.• Worked closely with other departments/organizations and collaborated with vendors to ensure 99% up-time.

North Little Rock, Ar

Senior Software Engineer 2006 to 2008• Managed team of four CATI programmers. Introduced new quality measures and practices reducing issues with new interview requests by 15%.• Interviewed, trained, supervised, and evaluated programming staff.• Consulted with supervisor, systems analysts, other programmers, and end users to gather information about program intent, functions, features, data requirements, input requirements, output requirements, internal and external checks and controls, hardware and operating system environment, and interfaces with other systems.• Trained end users and technical support staff to use and support program. Provided technical support services to software development and data center.Technical Specialist: Quality Assurance/Support 2004 to 2006• Established quality assurance policies, practices, and procedures that took into account the small team, three developers, and limited hardware resources, two Redhat Linux servers, one for production and one for test. Allowed developers to increase number of enhancements per release while reducing customer found issues by 35%.• Assisted in testing, selection, design, placement, implementation, documentation, operation and maintenance of security technologies including authentication mechanisms, access controls, firewalls, proxy servers, VPN concentrators and wireless access points.• Researched, evaluated, installed, maintained and supported operating systems, telecommunications, database and specialized systems software.• Created Virtualization server environment using VMware; installation, configuration, administration and troubleshooting.• Managed Exchange 2003; Windows Server 2003; Red Hat server environments.

Certificate Of Completion, Sec504: Hacker Tools, Techniques, Exploits, And Incident Handling

In SEC504 we dig into the hacker tools, techniques, and exploits used by modern attackers from the perspective of an incident response.

Ics515: Ics Active Defense And Incident Response

This class was developed from my experiences in the U.S. intelligence community and within the control system community dealing.

Education record

Education record