David W. Email and Phone Number

Key ResponsibilitiesAs a senior information security engineer/SME in charge of ensuring customer system compliance, my primary responsibility is to develop and implement system compliance objectives for OT, ICS, BMS, SCADA, and FRCS ATO packages that appropriately address risk management. I oversee a variety of complex processes, such as complete RMF control implementation and manual STIG, CCI and SAP reviews.To ensure compliance, I lead and deliver RMF/NIST 800-53 alignment by employing automated and manual Security Technical Implementation Guide (STIG) application and Tenable Nessus/ SCAP vulnerability scans. I also perform and oversee CCI/SAP and POA&M reviews and provide RMF control and patch management to maintain system security, reduce attack surfaces, and ensure employee productivity. I work with a wide scope of platforms including Windows Active Directory, MSSQL, Windows 10 and Server 2012, 2016, 2019, Linux, VMWare, Cisco, Palo Alto Networks, Garrettcom/Beldin, OT embedded devices and video surveillance systems. I use this knowledge to assist stakeholders in shaping cost-effective contracts and bid structures for cybersecurity projects. Overall, I push hard to ensure system compliance and information security that reduces risk while also maintaining productivity.Key Achievements• Streamlined Cybersecurity Risk Management Framework RMF processes for Department of Defense projects to attain Authorization to Operate (ATO), Memorandum for Record (MFR), and maintenance programs.• Designed innovative Raspberry Pi ARM Nessus scanner within virtualized Linux platform for long-term RMF maintenance projects.• Led and managed multiple projects and network engineering processes by acting as cybersecurity SME and cybersecurity project manager.• Completed and provided company's first approved ATO package, serving as model for subsequent RMF compliance efforts.• Revamped sales quote/proposal templates; reduced risk and increased revenue by over 30%.

Key ResponsibilitiesI was responsible for developing and executing RMF compliance planning and implementation in order to provide key clients such as Department of Defense, GSA and Veterans Administration with cutting-edge information security network-based solutions. To ensure accuracy and precision, I gathered the necessary information and produced detailed reports adhering to DIACAP/RMF standards.One of the most interesting projects I was involved in was the deployment of a secure disaster recovery configuration for the Jack Henry banking environment. I was in charge of designing the information security configuration for that project and implementing Schneider Electric SBO/EBO BMS and Web Reporting Services. To ensure the disaster recovery configuration was successful, I used various technologies such as VMWare VCenter Active Directory integrated server cluster, CIFS, and RMF compliant virtual images. Additionally, I developed and provided remote RMF image installation procedures for customer projects. This allowed them to quickly and efficiently install the RMF compliant images remotely over VPN using IPMI and CIFS/FTP, with minimal time and trouble. Key Achievements• Led, trained, and guided top-notch associates by cultivating professional skills and delivering requisite knowledge for advanced system solutions.• Enhanced execution of network solutions to solve urgent Amazon Datacenter Building Management System (BMS) issues and secure future sales.• Devised and developed leading-edge network architecture and engineering designs as per RMF and custom cybersecurity compliant environments.• Secured DIACAP and RMF cybersecurity compliant image project deals for Pelco, Inc. DX8100, Digital Sentry, and VxPro product lines.• Attained and maximized C4 revenue by devising and implementing initial local group policy method for delivering DIACAP/RMF Windows cybersecurity controls, reducing 5 days to 1 hour for completion.

Key ResponsibilitiesI was a founding member of the Information Assurance Resource Center (IARC) in collaboration with key stakeholders. I was tasked with creating and integrating DIACAP/RMF compliant features into the Schneider Electric SBO/EBO BMS product line. I led and oversaw the DIACAP/RMF compliance test and remediation project with the TAC R&D team. I also planned, created, and evaluated specialized custom templates for the IARC DIACAP/RMF ATO package documentation. By working with the TAC R&D team, I was able to create and integrate the DIACAP/RMF compliant features into the Schneider Electric SBO/EBO BMS. This enabled us to ensure the security of the system and adhere to DIACAP/RMF requirements. I also developed specialized custom templates for the IARC DIACAP/RMF CoN (Certificate of Networthiness) package documentation. This streamlined the DIACAP compliance process, enabling us to deliver a comprehensive, detailed set of documents for each customer providing the detailed framework of security controls and procedures for the system. Overall, my collaboration with key stakeholders and the TAC R&D team enabled us to develop a secure and compliant system for the Schneider Electric SBO/EBO.Key Achievements• Established company's first DIACAP/RMF test lab, realizing organizational objectives.• Improved DIACAP technical implementations such as pre-configured, and managed Windows and Linux images.• Delivered DIACAP/RMF consultation project knowledge and documentation to APC R&D achieving RMF compliant Linux-based Data Center Expert DCE virtual appliances.• Saved deployed systems and future sales and completed/delivered solution in seven days vs. R&D team estimate of two months by developing custom SBO/EBO SNMP service augmentations.• Developed (with R&D) company's first DIACAP/RMF ready OT BMS product line as per NIST 800-53, FIPS, and FISMA standards.

Manage Windows, Linux, embedded systems firmware and driver R&D

Manage Network Software and Security R&D

Software Quality Engineering