Dennis Sutherland Email & Phone Number

Worldwide, Oo

Architect Cloud Security solutions for Amazon Web Services ( AWS ), Azure , and Google Cloud Platform ( Gcp ).

Worldwide, Oo

Security Architect: Recommend and establish innovative cyber security models, processes and procedures. Identify and map business requirements to meet compliance, security and privacy requirements. Translate operational requirements into technical requirements and architectures needed to meet program objectives. Knowledge of and experience creating solutions to meet federal security regulations, standards and processes including FISMA, FIPS, NIST and FedRAMP.

Worldwide, Oo

Executive Level Interface: Interface with C-Suite, executives, business leaders, stakeholders, developers, administrators and end users. Work to lower risk and create solutions to increase productivity, efficiency, lower costs, increase the bottom line and to make risk a strategic advantage. Cyber Security Risk Management: Experienced in managing a broad spectrum of security frameworks, tools, processes and people to achieve and maintain risk management goals and requirements on time and on budget. Evaluate and implement multiple risk management frameworks (RMF) through the use of National Institute of Standards and Technology (NIST), DoD and International Organization for Standardization (ISO) methodologies to improve security posture. Project Management: Assemble and lead project teams. Leverage PMI PMBOK and industry leading practices to bring best of breed and high quality project management to implement cyber projects.

Worldwide, Oo

Meet the needs of business requirements, compliance, regulations and federal laws. Produce certification and accreditation (C&A) and authorization and assessment (A&A) documents. Prepare required documents for submitting and obtaining multiple authorizations to connect (ATC) and authorizations to operate (ATO). Documents created include: system security plan (SSP), information security risk assessment (ISRA), privacy impact assessment (PIA) and plan of action and milestone (POA&M). Prepare security authorization packages via eMASS, Archer and other methods.

Cloud Security: Evaluate cloud solutions and options. Implement identity and access management (IAM) solutions with Salesforce and Amazon Web Services (AWS). Subject matter expertise with the unique cloud based risks and cloud compliance methodology with FedRAMP and Defense Information Systems Agency (DISA) cloud strategy. Cyber Security Risk Identification: Manage information security risk assessments to identify risks and vulnerabilities. Evaluate and identify risks with tools such as Nessus, eEye (BeyondTrust) Retina, HP Fortify, IBM App Scan and QualysISSM: Performed the duties of an information system security manager (ISSM). Hardened systems using Security Technical Implementation Guides (STIGS). Installed patches based on Information Assurance Vulnerability Alerts (IAVA). Managed the assessment and authorization (A&A) process for multiple agencies on a cloud based system. Received multiple authorizations resulting in additional competitive advantage for the company. eDiscovery: Consulted commercial and federal clients with forensic searches, forensic collections and provided guidance and suggestions for eDiscovery products and solutions.Audit Preparation: Helped prepare systems and personnel for multiple third party assessments and audits. Successfully managed multiple audits based on separate requirements, frameworks and regulatory needs. Security and Awareness Training: Developed and implemented a security awareness training program. ISO 9001: Developed, implemented and maintained all aspects of an ISO 9001 quality management program.Facilities Security Officer (FSO): Served as a Facility Security Officer (FSO). Implemented and maintained classified environments. Followed the National Industrial Security Program Operating Manual (NISPOM). Successfully prepared for and passed multiple Defense Security Service (DSS) audits.

Palo Alto, Ca, Us

Manage Enterprise Change Control Board: Implemented and improved the change control process. Managed the Enterprise Change Control Board. Decreased emergency changes by 60 percent.Vendor Management: Lead a project with multiple vendors and sub-contractors to implement a critical infrastructure monitoring project across the US involving multiple data centers, network operating sites (NOC’s) and remote sites.Testing Architect: Set up testing environment to transition commercial web site to Navy owned facility. Participated in DITSCAP (DIACAP) process.

Implemented Infrastructure: Architected and implemented multiple data center sites consisting of Linux and Windows servers. Configured back office applications including email, ERP, and help desk ticketing servers.

Us

Systems Engineer: Managed and supervised a team of network and systems engineers. Built an infrastructure of 200 servers in multiple data centers. Supported over 300 desktops. Implemented an external web site capable of activating 100,000+ devices simultaneously.

Ms, Information Assurance

Ba, Business Admin

Business Administration

Education record