Gene Gotimer Email & Phone Number

Shreveport, La, Us

Draper, Ut, Us

Building and delivering interactive courses. The first ones are Terraform Fundamentals and Introduction to DevSecOps.

Mclean, Virginia, Us

Supporting DHS ICE Security Special Projects in the Information Assurance Division (IAD). Supported the development and adoption of the Secure Hardened Image, a STIG-compliant AWS machine image (AMI) with the latest system updates, including the security and enterprise software agents required at ICE. The prior gold image was built monthly by hand. The Secure Hardened Image is rebuilt at least daily using Terraform and Ansible and security scanned with OpenSCAP and Tenable Nessus. Deploy time for development teams was reduced from 20 to 6 minutes and the baseline vulnerability count reduced from 180 findings to under 20.Produced reference CI/CD pipelines with security and compliance tools and automated infrastructure deployments. Developed and documented container and Kubernetes security strategy for development teams and the ICE Containerization Working Group. Produced example pipelines demonstrating Anchore Grype and Aqua Security Trivy for container vulnerability scanning, Checkov by Bridgecrew for infrastructure-as-code (IaC) best practices, and Anchore Syft to produce a software bill-of-materials (SBOM).Evaluated and demonstrated SAST and DAST tools for development teams to replace Micro Focus Fortify SCA and WebInspect, evaluated several leading options to IAD leadership, and piloted and selected Contrast Security Assess which is being procured. OWASP Zed Attack Proxy (ZAP), Veracode, Synopsys, Checkmarx, and White Hat products were also considered. Implementing Harbor as an enterprise-wide container registry with security scanning, OWASP Dependency-Track to manage SBOMs for container images and other systems, and OWASP DefectDojo to manage vulnerability findings across scanning tools for the development teams.AWS GovCloud, Ansible, Terraform, Jenkins, CloudBees, Checkov, Cloud Custodian, Fortify, Docker, Kubernetes, Trivy, Grype, Syft, Maven, Java, Go.

Fairfax, Va, Us

Secret and Public Trust clearances.Led thought leadership. Program chair for Agile + DevOps conference. Frequent conference and meetup speaker.Instructor for security, agile, mobile testing, and DevOps courses. Developed the Foundations of DevOps course material.Jun 2018 – Sep 2020DevOps Engineer SME for DHS TSA Cloud Project.Built CD pipeline in the Microsoft Azure cloud, using Chef to install and maintain Sonatype Nexus Repository Manager and IQ Server (Firewall, Lifecycle, Auditor), Jenkins, SonarQube, and Windows workstations.Migration from on-premises pipeline, automated deployments, delivery pipeline architecture, automation infrastructure, security, and CI/CD processes. Azure Government, Linux, Windows, Jenkins, Chef Workstation, Chef InSpec, Sonatype Nexus Repository Manager, Lifecycle, Auditor, and Firewall.Jan 2018 – Dec 2018Enterprise Architect/DevOps SME for DHS TSA Agile Services, leading the Automation, Modernization, and Transformation (AMT) Team.Built CD pipeline in the DC1 data center, using Chef to install and maintain Sonatype Nexus Repository Manager, Jenkins, and SonarQube.Linux, Windows, Jenkins, Chef Workstation, Chef InSpec, Sonatype Nexus Repository Manager.Aug 2014 – Dec 2017Framework Architect for Affordable Care Act, Federally Facilitated Marketplace, on the Enterprise Architecture Team.Architecture and development for FFM. Standardized and modernized Maven build process. Led code review process. Encryption, security, unit testing, and quality improvements. Java, Spring Framework, Spring Batch, Akka, Jasypt, Maven, JUnit, PowerMock, EasyMock, Mockito, Vagrant. Sep 2009 – Mar 2014Senior Software Architect for Forge.mil, a DoD open-source ALM solution.Developed and documented agile and CI/CD practices as an exemplar project within the DoD. COTS, open-source, custom software integration, automated security scanning.Puppet, VMWare, CollabNet TeamForge, Drupal, PHP, Python, Java, OWASP ZAP, Selenium, PKI.

Architect for Protect My Child Registry, an opt-in web-based registry designed to support COPPA and other age-related restrictions for children on the web and via mobile phones/SMS. Built on Apache Tomcat and MySQL, using Java, Spring, ActiveMQ, FreeMarker, and SiteMesh. Responsible for architecture, development, security, deployment, and continuous integration.Lead developer for InfoCard reference implementation, an identity management system similar to OpenID and other single sign-on solutions. Developer for AOL Shortcuts electronic coupon service. Development for front-end and back-end applications, built on Apache Tomcat and MySQL, using Java, Struts, iBATIS, and ActiveMQ.Developer on Fannie Mae agile development team, for C&D Cash, Forwards, and Negotiated Transactions applications. Applications were built using BEA WebLogic 8/9, Oracle, and ILOG JRules rules engine, using Java, Struts, Spring, Hibernate, JasperReports, and AJAX.

Us

Team lead for the Supplier Assessment Tool, a questionnaire and reporting tool for tracking compliance with IT policies, Sarbanes-Oxley, etc. Built on JBoss and MSSQL Server 2000 using EJB, Struts, Tiles, JasperReports, and XDoclet. Responsible for requirements, project management, development planning.Formalized and documented department development process.

Interim Secret clearance. Architect and team lead for development of the Management Operating System, a web-based time-tracking/efficiency-tracking tool for NAVSEA. Built on JSP/Tiles, Struts, and Hibernate, running on Oracle Application Server 10g and Oracle 9i database backend. Responsible for design, development, security, and development process integration with CMM. Ported to Apache Tomcat and MySQL for NAVAIR.

Reston, Virginia, Us

Team lead for support and development of ACX/OSS Clearinghouse, an LSR/PO gateway for companies placing electronic orders with the incumbent local exchange carriers (ILECs). Built on BEA WebLogic Server and Oracle, Web-based and SOAP/Web services interfaces, using Java, XSL, and JMS. Responsible for operations, development, security, support, reporting, and billing. Implemented an outgoing fax server solution for CARE Clearinghouse.Connectivity support and integration with partners, using IA, NDM/Connect:Direct, FTP, and CORBA interfaces.

Team lead for support and development of ACX/OSS Clearinghouse, an LSR/PO gateway for companies placing electronic orders with the incumbent local exchange carriers (ILECs). Built on BEA WebLogic Server and Oracle, Web-based and SOAP/Web services interfaces, using Java, XSL, and JMS. Responsible for operations, development, security, support, reporting, and billing. Design and development of Java Interactive Agent (IA) server and clients, an SSL-based transport for EDI. Connectivity support and integration with partners, using IA, NDM/Connect:Direct, FTP, and CORBA interfaces.

Reston, Virginia (Va), Us

Supported the CyberCash acquisition and merchant migration from CashRegister to VeriSign platform. Intranet web site design, content management, and support.

Mahe, Sc

Managed the team responsible for CyberCash payment systems: credit card, micropayments, and electronic bill payments. Handled systems design, project management, product requirements, development support, maintenance, testing, and coding for international and domestic services, including merchant registration, payment processing, billing, and merchant SDKs. C, C++, Java, and Perl development and API design.Lead developer for Integrated Merchant Registration system, FraudPatrol service, HTML wallet for InstaBuy service, Microsoft Wallet Adapter, CyberCoin merchant software, Digital Newsstand micropayments storefront, and CashRegister merchant credit card processing software.Involved in development, design, requirements, security, cryptography, usability/human factors, storefront integration, user documentation, build and release processes and procedures.

Washington, Dc, Us

Secret clearance. Web design, server administration, CGI programming, database interfaces, web and Internet policy.Computational fluid dynamics, 3-D numeric grid generation, 3-D modeling, computer-aided design, data visualization, data analysis, and software development. Long-term computational support for the Large Cavitation Channel in Memphis, Tennessee, including laser Doppler velocimetry.Systems administration, maintenance, and support for Macintosh, Linux, SGI Irix, Windows, and DOS-based systems. Networking, file servers, software auditing and metering, automated backups.

Bachelor Of Science, Naval Architecture And Marine Engineering

Education record