Gary Brice Email & Phone Number

Bonaire, Ga, Us

Sparks, Nv, Us

Sierra Nevada Corporation Cyber Security/Principal Systems Engineer08/2014-Present• Perform system and subsystem integration, Perform technical risk assessments, technical planning, and verification and validation.* Perform duties as the program Information Systems Security Manager (ISSM).• Responsible for developing, modifying and implementing standard operating procedures for hardware and system design.• Execute engineering design and development activities consistent with quality, cost and schedule requirements.• Ensure that all specifications, designs and developments adhere to technical and industry standards.• Provide support in the development and maintenance of configuration baselines for systems and sub-systems.• Act as a technical liaison to the Program Manager.• Assist in developing and implementing cyber security policies, standards, and guidelines.• Develop, recommend, & test security controls to meet information assurance requirements.• Define and perform security audits, evaluations, and risk assessments of complex operational data processing systems and facilities.• Define and validate security tests, certifications, and evaluations of applications and general support systems processing sensitive and/or confidential information as defined by the NIST RiskManagement Framework (RMF).• Author and update all applicable ICD 503 and NIST related assessment documentation.• Use relevant information and individual judgment to determine whether events or processes comply with laws, regulations, and standards.• Monitor the security of critical systems and changes to highly sensitive computer security controls to ensure appropriate system administrative actions, investigate and report on noted irregularities.• Investigate potential or actual security violations or incidents in an effort to identify issues and areas that require new security measures or policy changes.• Responsible for the development of artifacts to achieve certification

Participate in the development or modification of DCGS-A security program plans and requirements. Collect and maintain information needed to meet system IA reporting requirements. Recommend resource allocations required to securely operate and maintain system IA requirements. Assist identifying security programs implications of new technologies or technology upgrades. Assist creating and analyzing IA policies. Assist in developing system security configuration guidelines for DCGS-A.Review the selected security safeguards to determine if security concerns identified in the DCGS-A system POA&M and SSP have been fully addressed. Maintain knowledge of current and emerging Federal, Department of Defense (DoD), and Army requirements, policies, regulations, and trends.Maintain knowledge of information vulnerabilities and trends. Collaborate effectively with the government customer and other project team members. Understand and apply sound Information Assurance principles and methodology to all work. Research IA regulatory compliance requirements and tools for IA requirements. Provide recommendations and strategies for material and/or non-material solutions to improve the system and/or organizational IA posture. Analyze an organization’s internal and external IA processes and identify areas for improvement. Author official IA correspondence, IA guides, and accreditation documentation. Work independently with minimal direction. Ability to lead or work on informal teams. Knowledge of the Department of Defense Information Technology operating environment. Ability to brief organizational leadership on technical issues in a non-technical format. Analyze an organizations business processes and develop material and non-material solution to implement applicable DoDI 8500.2 IA controls. Ability to perform independent or collaborative research on solutions for IA requirements.

Lead Information Assurance engineer on a 9 member Information Assurance and Systems Administration team tasked to provide systems administration, systems hardening, patch management, Assessment & Authorization (A&A) formerly (C&A), and security to the U.S. Air Force Forward Processing Exploitation and Dissemination (FPED) program. Define information assurance security requirements based on the analysis of user, policy, regulatory, and resource demands. Develop policies and procedures for responding to security incidents, and for investigating and reporting security violations and incidents. Conduct C&A of DoD and Federal Information Systems, which will include data gathering and documenting system security plans, risk assessments, contingency plans, security test and evaluation plans, security concepts of operations. Develop, research, and maintain proficiency in tools, techniques, countermeasures, and trends in computer and network vulnerabilities, data hiding, and encryption. Perform security, analyses and risk/vulnerability assessments with tools such as Eeye Retina, WASSP, ACAS, SCAP, and DISA Gold. Coordinate and perform technical and non-technical Certification & Accreditation assessments to evaluate compliance with established Information Assurance policies and regulations according to DoD, NSA, DISA, NIST and other IA-related military/Federal requirements. Perform duties of Information Systems Security Officer (ISSO). Knowledge of current DoD Information Assurance trends including DCID 6/3, DITSCAP, DIACAP, ICD 503, NIST 1253 and 8500.XX. Supports updates to eMASS/EITDR, and XACTA databases. Plans and conducts Security Test and Evaluations (ST&E) to ensure compliance with DoD IA controls. Support implementation of STIGS/STIG changes, assist in developing system configuration documentation for A&A. Communicate, collaborate and act as a liaison between military, civilian and contractor personnel at all levels in support of the ISSO position.

Responsible for installing and troubleshooting Servers and Desktops, to include HP and Dell Blades, hardware and software and supporting computer systems running Microsoft Windows. Worked with various engineering teams providing IT support for their projects. Installs, maintains, and patches operating systems including local customizations. Tracked and counters security vulnerabilities. Monitored and responded to technical user helpdesk email. Diagnoses hardware issues and performs necessary maintenance. Monitors the “Online Compliance Reporting system”, and takes corrective actions to ensure 100 percent compliance with vulnerability issues.

Provided IT technical support, clarification and Guidance for ANG headquarters and field units. Assisted with planning, developing and administering current and future regionalized systems. System administration and support to the end users. Planned, configured, engineered, and maintains the ROOT Active Directory Servers for the ANG SIPRNET enterprise.

Various Job descriptions

Education record

Education record