Donna Zimbro Email & Phone Number

Front Royal, Va, Us

Pentagon

Program Manager for the Washington Headquarters Services’ (WHS) Facilities Services Directorate (FSD) Industrial Control System (ICS) Network Supervisory Control and Data Acquisition (SCADA) System. Responsible for overall program management, implementation and maintenance for all WHS FSD ICS SCADA Network IT services. Manage the SCADA Network Support Team, each team member having different skill sets such as Senior Windows Engineer, Senior Network Engineer, Information Assurance Engineer, VMware Engineer, Network Engineers, Security Analyst and System Administrators. As a Senior Information Assurance Compliance Officer accountable for the Department of Defense Risk Management Framework (DIARMF) accreditation process for WHS FSD ICS SCADA Network. Provide guidance on all security related subjects, such as security processes, security operating procedures, system security configuration requirements to the System Owner, users and outside vendors. Responsible for following the DoD Information Assurance Vulnerability Management (IAVM) program. Develop and maintain all network documentation needed for the DIARMF Assess and Authorize Process for the WHS FSD ICS SCADA network. Responsible for managing and directing the Information Assurance program for the WHS FSD ICS SCADA Network. Interfaced with engineers to identify support requirements for DIARMF, review and analyze network diagrams, and utilize automated vulnerability assessment tools (i.e. Nessus, SCAP, SRRs and Manual Checklists) to identify and report security exposures associated with the mission critical applications, their databases and hardware platforms. Perform weekly and monthly scans of the WHS/FSD/ICS SCADA Network using Nessus Network Security Scanner tool within the Assured Compliance Assessment Solution (ACAS) Security Center. Maintain the DISA’s Host Based Security System (HBSS). Utilize the Enterprise Mission Assurance Support Service (eMass) system to maintain the accreditation status.

Ellicott City, Md

Function as a Senior Information Assurance Engineer responsible for the Department of Defense Information Assurance Certification and Accreditation Process (DIACAP) for Washington Headquarters Services’ (WHS) Pentagon Building Management Network (PBM Network). Interfaced with engineers to identify support requirements for DIACAP, review and analyze network diagrams, and utilize automated vulnerability assessment tools (i.e. Retina, Production Gold Disk, SRRs and Manual Checklists) to identify and report security exposures associated with the applications, their databases and hardware platforms. • Maintain the DISA’s Host Based Security System (HBSS).• Perform weekly and monthly scans of the Pentagon Building Management (PBM) Network using eEye Retina Network Security Scanner tool• Appointed Information Assurance Office for the PBM Network.

Function as a Subject Matter Expert for the Defense Messaging System (DMS) supporting 75+ sites for the Federal Aviation Administration (FAA). This support includes but not limited to system administration support for their Defense Message System (DMS) components residing on the classified and unclassified networks. Information assurance support in the areas of Certification and Accreditation (C&A) assessments, C&A documentation and patch maintenance of the DMS servers at the primary and alternate sites is provided. • Successfully maintained the DMS Systems for the last six months with zero hours of unscheduled downtime• Provide 24x7 on call support for the Washington Operations Center personnel• Currently responsible for the design and creation of a active directory domain which will reside on the classified network and house domain controllers and mail servers in support of FAA classified email services which is currently housed by an outside organization.

Function as a Senior Information Assurance Engineer and Team Lead responsible for leading the Military Health Services / TRICARE Management Activity Applications Assessment Team during the Department of Defense Information Assurance Certification and Accreditation Process (DIACAP) for TRICARE stand-alone and integrated applications. Interfaced with engineers to identify support requirements for DIACAP, review and analyze network diagrams, and utilize automated vulnerability assessment tools (i.e. Retina, Production Gold Disk, SRRs and Application Detective, HP WebInspect) to identify and report security exposures associated with the applications, their databases and hardware platforms.• 100% compliance with the DIACAP requirements• Completed all assigned DIACAP assessments within the allowed ninety (90) days time frame

Washington Dc Area

System Engineer - As a member of the DMS Specialty Team which was responsible for the integration, testing and verification of CommPower Enterprise XML Portal (CP-EXP) and Telos Automated Message Handling System (AMHS) products in the Defense Message System (DMS) environment. Activities included testing new installs CP-EXP and Telos AMHS software products, along with testing software upgrade packages to ensure compliance with operations and meet DMS security requirement.• Required knowledge of Sun Solaris OS, HPUX OS, Window NT, Microsoft Exchange, TCP/IP and Ethernet network protocols, Remedy, networking monitoring, Internet, X.400 connectivity, and X.500 directory synchronization.• Selected for a six month assignment as Lead Test Engineer responsible for the creation of the overall System Test Plan for the Maritime Domain Awareness (MDA) Non-Classified Enclave (NCE) Pilot ProjectProgram Manager - DMS Program Manager assigned to the Joint Chief of Staff (JCS) at the Pentagon, responsible for coordinating the smooth operations of the Joint Staff Message Center and Defense Message System Help desk. Supervised 18 individuals; provided systems administration support of the various components of the DMS. Provided 24x& on-call support and crisis support (as needed). Maintained stability of 56 DMS components to support real-time operations across three classifications of networks.Security Engineer - COTS Security hardware and software products were evaluated to ensure smooth integration into the existing operation. Prepared test plan and schedule accordingly. Supported the certification and accreditation process for systems and applications by ensuring that security plans are developed for all assigned applications and other documentation such as security produces, risk assessments and security guides are developed.

During a 20 years career assignment varies from computer operator, programmer/analyst, and system programmer to computer specialist and Principal Advisor. Leadership and supervision provided for up to 65 military personnel.• Chief advisor to the organization head on military enlisted matters.• Awarded a Meritorious Service Medal, four Army Achievement Medals and received exceptional performance appraisals the entire period, plus a cash award for superior performance• While assigned to the U.S. Army Military Personnel Center was one of two military personnel selected for and successfully completing an Automatic Data Processing Intern Program• Appointed as Automatic Data Processing Security Officer for the TS/SI Computer facility