Drew Para Email & Phone Number

Columbia, Md, Us

Chantilly, Virginia, Us

Subject Matter Expert supporting Assured Compliance Assessment Solution (ACAS)

Houston, Texas, Us

Bethesda, Md, Us

Security architect for large US government project. Provide technical, security, and policy guidance to other internal teams and cooperate with US government security staff to ensure protection for a complex system with high integrity and confidentiality requirements. Assist with certification and accreditation efforts base primarily on NIST SP 800-53.- Utilize Nessus and DISA Security Readiness Scripts / Gold Disk- Perform automated web application assessments utilizing Nessus and HP Webinspect- Work with developers to expand secure coding efforts, utilize FOSS debugging tools to test and improve the quality of web applications- Revived the internal relations with COTS engineering staff and application developers by shifting the focus to results and working to streamline operational efforts- Assess proposed system changes for security and IA governance impacts- Provide technical advice and support to documentation and test staff o COTS products, network design / architecture, and other nuances of system design- Provide cohesive support for security efforts, such as static code analysis reviews- Developed the technical core of a continuous monitoring strategy to improve the system's security posture and achieve FISMA and NIST 800-37 compliance

Bethesda, Md, Us

Lead a small team of engineers and systems administrators responsible for assuring the availability, security, and compliance of a complex heterogeneous network environment. Investigate, develop, and maintain hardware and software solutions to meet customer requirements while maintaining compliance with applicable DoD and USG requirements. Develop procedures and documentation to ensure that operations are both successful and repeatable.- Manage network and systems operations for a DoD client’s unclassified information technology infrastructure- Operate as the lead technical consultant for information technology department, including oversight and planning review on most projects/operations that will touch the network- Supported and secured a combination of COTS, GOTS, and custom-built applications- Developed IT plans, strategies, solutions and implementations for numerous technologies- Advised clients on courses of action that satisfy due diligence, based on analysis of industry and vendor best practices and related IT / IA governance- Utilized DoD/USG government standardized tools to ensure compliance, and commercial and open source tools to validate the organizations security posture- Introduced virtualization to simplify the network while improving resource availability- Provide network engineering and information security training to engineers and administrators- Developed, and maintain internal wiki site to provide a knowledge management repository- Manage compliance with DoD, OSD, NSA and other relevant governance and regulatory requirements- Update client DITSCAP documentation and bring existing documentation to DIACAP standard- Create SOP and policies that enable the organization to be compliant with DoD guidance and vendor best practices

Chantilly, Virginia, Us

Served as the technical lead for an engineering team providing tier II and III support for Department of Defense client. Supported 1800 node campus network in seven building and field training location with 3600 users annually - Transitioned client from Internet to NIPRNet- Deeply involved in the efforts to meet DoD, NSA, OSD, DISA and US. Army information assurance compliance requirements with minimal guidance or documentation - Provide network engineering and information security training to fellow engineers and helpdesk staff- Deployed and maintained Checkpoint Firewall-1 on Nokia, Sun Solaris, and Secure Platform - Implemented and maintained CISCO IOS Firewall feature set including CBAC, IDS and rate limiting - Maintained ISS Realsecure IDS on Nokia, Windows, and Redhat Linux. - Implement and maintain centralized logging in a Windows NT and Windows 2000 domains using syslog - Implement and maintain content filtering solutions with SurfControl with Microsoft ISA proxy server and later SmartFilter and Blue Coat ProxySG- Designed, configured and deployed wireless network that meets DISA, NSA, and US. Army requirements - Implement and briefly maintain wireless intrusion detection system using open source tools, later transitioned to AirDefense- Develop IT plans, strategies, solutions and implementations for numerous technologies - Integrate and manage Juniper SSL-VPN solution, and Checkpoint and Cisco IPSec VPN technologies- Integrate 350 Macintosh OS X workstations and servers into Windows NT4 and Active Directory domains- Upgraded two Windows NT 4 domains into a single Windows 2000 Active Directory forest

Provide technical support for two public charter schools in the District of Columbia. Design and implement network services and information security for clients. Assist with designing a training program for underprivileged youths and young adults.- Administering networks to maintain functionality, and modifying them to provide increased security. - Configure Cisco PIX to provide Internet Security and VPN service for users.- Oversee changes on networks to ensure information confidentiality. - Installing Squid server to proxy web traffic, and Squid-Guard to filter that traffic.- Utilizing open source software to provide increased functionality and security to non-profit clients with limited resources.

Professional services engineer tasked with supporting multiple clients, supporting sales staff, and assisting managed services team. Network design, installation, troubleshooting, and maintenance. Frequently sent to client site with little more than a laptop, a point of contact, and a brief description of the problem.- Troubleshoot network problems with protocol analyzers such as Network Associates Sniffer and Wildpackets Etherpeek.- Designed a Checkpoint firewall image based on Red Hat Linux 6.2 for use as a managed services product- Design and implement network security systems, particularly firewalls, VPNs, and intrusion detection systems.- Administer Microsoft operating systems, most notably Windows NT3.51, NT 4, Windows 2000 and Windows XP. Significant experience with Red Hat Linux 6.2 – 7.3 and OS/2 versions 3 and 4.- Support and installation of most types of data circuits (ISDN, Frame Relay, T-1 and T-3, POTS), and local area networks (Token Ring, Ethernet, mainframe, and wireless)- Perform network assessments to determine basic design flaws as well as bandwidth over and under utilization.- Communicate with customers and vendors to provide effective technical support and troubleshooting.- Train fellow engineers and technicians in new techniques and equipment. Supervise groups of technicians at client sites.

Contracted to Large Federal Savings Bank to provide LAN administration. Support large token ring network in five main campuses and at individual bank branches. - Installed, configured, and supported PC, laptop, and server hardware/software- Configured and troubleshot most end-user application suites, including Microsoft Office 97 and 2000, Corel Suite 7 and 2000, and Lotus SmartSuite 96 and 2000- Remotely supported sites via Netfinity, PCAnywhere, and HP Openview software- Hardware and software installation and support on OS/2 and Windows NT workstations and servers- Installed and configured network equipment in new bank branches

Arnold, Maryland, Us

Responsible for assisting students and county residents with basic computer tasks. Ensured functionality of the network and appropriate work environment. - Trained users in Microsoft Office, Corel WordPerfect, and numerous educational programs- Taught students to understand and use the Internet.- Assisted teachers with technology classes- Worked with the networking group to ensure network reliability. Assisted in repairs and changes to the network

Masters Of Science, Information Technology

Bachelors Of Science, Computer Studies

Associate Of Applied Science, General Education