Darrell Mcdowell Email & Phone Number

Winston-Salem, Nc 27127

• Technical POC for migration to Cloud Services (SaaS and IaaS).• Research, design and created highly secure Purchase Requisition and Travel Authorization databases using RBAC, Reader and Author fields and encryption.• Troubleshoot variety of LAN/WAN issues (DNS, SMTP routing, NRPC etc.).• System Administrator for database, email and mobile device services.• Continuous audit, review and monitoring of Zero Trust principals.• Redesign of mail archiving systems and enforcement of policies.

Winston-Salem, Nc

• Design, develop, oversight and maintenance of Risk Programs (FISMA)• Audit and Assess findings and create Plan of Action and Remediation (POAM)• Lead training and education of stakeholders on doing business with Federal government• Manage the multi-million Federal grant program• Lead FedRAMP Security Assessment & Authorization (SA&A) process with ATO goal• Review grant sensivity levels (Low, Moderate, High) to match FISMA NIST SP 800-53 requirements• Monitor and maintain security controls, testing and vulnerability within environment• Automate recurring process notifications with ServiceNow GRC tool• HITRUST, CSF, Frameworks

Oakland, Ca

• Assures implementation, monitoring, maintenance and enforcement of the Information Security Program.• POC for VA Security Control Assessment (SCA) performed by Deloitte. SCA is part of the NIST Risk Management Framework (NIST 800-37). Uploaded POAM, SOP’s, artifacts and documentation into RiskVision.• Plans, establishes, and implements local policies and procedures to ensure IS reliability and accessibility.• Conducts system security evaluations, audits, and reviews.• Develop and review privacy impact assessments, incident response plans, and risk assessments- assesses security incidents to determine impact and initiates corrective action per NIST SP 800-53, Rev 4. • Takes appropriate measures to resolve and report incidents, as required.• Advise director on all facets of IS and recommends resolution of issues when appropriate. • Authorize access to various applications and information systems.• Works with IT Operations and business staff to develop, update, and implement a facility security policy, local circular or standard operating procedures that define implementation of national policies for information security• Performs daily, weekly, monthly, quarterly, bi-annual, and annual audit reports to review controls, activities, vulnerabilities, and purge the system of obsolete records• Reporting and escalating issues as appropriate

Oakland Ca

Act as the key IT and Security Consultant for USA arm of Multi-National MEKTRON.• Extensive knowledge of overall IT functions and business operations, policies and practices and years of experience translating strategies into action plans;• Created and maintained Public Key Infrastructure (PKI). Designed Hierarchical Certificates infrastructure to support multiple organizational units. X.509 certificates supporting SSL and S/MIME. Administered and created: new certificates, CRL, end user and server ids.• Extensive working knowledge of Identify and Access Management (IAM) technologies, secure passwords creation techniques, digital certificates, multi-factor authentication, federated identity, Symmetric/Asymmetric encryption/decryption and Digital Signature.• Directed conversion to Role Based Access Control (RBAC) from discretionary access control (DAC). • Decommissioned and migrated Good Technologies MDM to IBM Traveler solution providing support for: Android, iOS, Blackberry and Windows devices.• Lead investigation of security breach by former employee, performing root cause analysis, including a review of system and application logs, Covert Channels, Intrusion Detection System (IDS). Reconfiguration and rename of multiple breached databases, monitored of unauthorized communication channels, harden operation systems, secured and move file system.• Strong working knowledge of all Information Security domains including but not limited to: network protection, policies, intrusion detection/prevention, access control, and incident response; proven ability to expertly coordinate Risk Assessments, technical vulnerability assessments and/or external/internal audits.

Offices In Oakland Ca And Alexandria Va

General Services Administration (GSA) Streamlined Technology Acquisition Resources for Services (STARS) contract winner. Services provided to United States Federal Government Agencies (primarily to United States Coast Guard). • Standardized and codified critical development processes as part of the USCG’s Modernization effort. Assisted with the standardization of business processes, linking IT, engineering, budget and finance.• Managed PACAREA-wide application development providing standardization to handle waivers. Deliverables were SQL database, system documentation and user guide.• Provide support/service to the integration of Nationwide Automatic Identification System (NAIS) into Maintenance and Logistics Command Pacific MLCPAC’s Support Infrastructure based on OPINTEL with USCG network application, documentation and user training.• Business Analysis, Information Security, Inventory and Property Management support for the Financial Procurement Desktop (FPD) custom software financial system• Telecommunications Infrastructure Planning and Design

Oakland, Ca

Act as the key IT Specialist for USA arm of Multi-National MEKTRON. • Extensive knowledge of overall IT functions and business operations, policies and practices and years of experience translating strategies into action plans;• Created and maintained Public Key Infrastructure (PKI). Designed Hierarchical Certificates infrastructure to support multiple organizational units. X.509 certificates supporting SSL and S/MIME. Administered and created: new certificates, CRL, end user and server ids.• Extensive working knowledge of Identify and Access Management (IAM) technologies, secure passwords creation techniques, digital certificates, multi-factor authentication, federated identity, Symmetric/Asymmetric encryption/decryption and Digital Signature.• Increased corporate efficiency and productivity with research, evaluation and installation of Good Technologies Mobile Device Management (MDM) solution supporting Bring Your Own Devices (BYOD). • Developed new applications using Secure Software Development Life Cycle (SSDLC) design principals. Multiple mission-critical business databases including: Inquiry, Quotes, Customer Drawing, Engineering Change Request, Travel Authorization, Design Guidelines, Sales Transfer, FPC Cost Calculation, Quarterly Rolling Sales Plan, Sales Report, Inventory and Project Management. Security focused data sanitization: input validation, extensive use of pick list, buffer overflow checking and field filtering.

Sf Bay Area & Calgary Canada

Custom application development in various languages

Business Management For Entreprenuers

Mathematics And Computer Science