Harmohan Singh Gabri, Msits, Cissp, Cgrc, Amp Email & Phone Number

Washington D.C. Metro Area

Working as s Senior Financial Examiner for the Operations Risk Branch (ORB) serving the Department of Enterprise Regulations (DER) division for Federal Housing Finance Agency (FHFA). Execute cybersecurity examinations to ensure the operational risk safety and soundness of Freddie Mac. Duties include conducting targeted examinations and ongoing monitoring of IT and cybersecurity operational activities.

Rockville Md

Cyber Security SME in support of the NRC CSRPDS contract at the NRC customer site in Rockville, MD. SME duties consist of conducting Cyber Security Industrial Control System (ICS) inspections/assessments on US Nuclear Reactor Sites. SME duties also require management of work load, project schedule and incorporating efficiency when it comes to getting inspections/assessments completed on time. Assist in developing procedures and processes to improve quality of the deliverables and inject efficiency wherever applicable.

Program Manager working for Chief Information Security (CISO) Officer for US Food and Drug Administration. Our team supports the Office of Information Management and Technology (OIMT) which in turn supports Information Systems Security Staff (ISSS). Program Manager managing various different tasks at FDA. Team consists of the assessment team, audit team and emerging technologies team. For the past 6 months, I transitioned from being a Subject Matter Expert to an experienced manager level professional. We support the Risk and Compliance team as risk advisors with focus on information security, cybersecurity and information risk management and IT compliance. Support the Risk Compliance team lead, Brach chief and the Project Core lead. Management duties consist of managing four team leads, each catering to their subject matter expertise. Managing complex regulatory systems that support the FDA mission. Provide recommendations to conduct work efficiently and effectively through various processes and tools. Work with Audit team on GAO audits and various other FISMA data calls. Provide support on FedRAMP cloud CSPs and assess various other emerging technologies.

19901 Germantown Rd, Germantown Md 20874

Project Manager for Innovation and Engineering group leading various projects from initiation to completion. Currently leading the two different PKI sub-projects. Planning the deployment of Global Directory Services (GDS) in the agencies infrastructure to enhance directory services to other sites which are supported by the agency’s Enterprise Information Technology Services (EITS) CA PKI infrastructure. Also leading the migration of 20,000 managed users unto the Entrust’s Share Service Provider (SSP). Previously lead a project which decreases the Personally Identifiable Information (PII) footprint from the agency’s infrastructure. This included scanning of the DOE storage area network (SAN) and laptops. Serving as a member of the TRB (Technical Review Board) for the HQs CCB (Change Control Board) in making risk based decision for changes to the existing operations environment and upcoming technologies.Assist in CIO Council Cloud initiative and procurement of Cloud services. Previously worked on Virtual Desktop Infrastructure (VDI) migration to the Cloud. Looking at risk and threats associated with the migration without impacting the user functionality. Working with Cyber support division as an ISSO to attain an ATO (Authority to Operate) for the newly implemented infrastructure. Help emerging and newer technology application system owners and data custodians of various technologies through security authorization process as it relates to NIST, OMB and departmental guidanceHelp the department lead OMB mandated initiatives like Trusted Internet Connection (TIC), IPv6 & DNSSEC. Member of the team leading the TICAP initiative working alongside various operational teams. Lead DOE to obtain its highest score in 2014 on the DHS’s TIC CCV Audit. Member of the IPv6 Cyber Security Working Group deployed to plan secure deployment of IPv6.

Senior Cyber Security Lead working for Associate Chief Information Officer for Energy IT Services EITS supporting various components such as network operations and enterprise IT services cyber component. Also working on different engineering initiatives such as pilot projects and interjecting cyber security practices, risk management and mitigation processes. Also serve as the Project Manager for Identity, Credential and Access management (ICAM) OMB mandates. Duties include specific organization related project planning, resource allocation and task scheduling. Work with Sr. ICAM architect to design the data flow process and solve technical design issues. Also offer enterprise access management solution to other DOE organizational representatives. Communicate with other site application/system owners so that they could leverage enterprise services. Help emerging and newer technology application system owners and data custodians of various technologies through security authorization process as it relates to NIST, OMB and departmental guidance. Help the department lead OMB mandated initiatives like TICAP, IPv6 & DNSSEC. Member of the team leading the TICAP initiative working alongside various operational teams. Member of the IPv6 Cyber Security Working Group deployed to plan secure deployment of IPv6.Work with different Risk Management groups at DOE to strategize and document appropriate risk management approach to match the DOE wide threat statement.

Task Lead on various tasks at Department of Energy’s (DOE) working for the Office of Chief Information Officer (OCIO). As a Senior Cyber Security Lead, worked with all of the program offices; Headquarters, EIA, Energy, Science, PMA and NNSA on various Cyber Security FISMA related tasks. Currently assisting the department in developing and customizing state of the art technological automation toolsets. Lead the department in evaluating COTS and GOTS products for Certification & Accreditation. Worked along side the OCIO Chief Technology Officer in advising and assisting the department in picking and implementing technology. Subject Matter expert on various commercial Certification and Accreditation toolsets such as Trusted Integration’s Trusted Agent FISMA toolset, SecureInfo’s RMS toolset and Department of Justice’s CSAM. Lead the HSPD (Homeland Security Presidential Directive) -12, Domain Logon Smart Card project, one of the many projects under the ICAM (Identity Credential and Access Management) umbrella. Lead the implementation, deployment and troubleshooting of Smart Card logon at the DOE HQ sites. Facilitated communication with various different organizations under HQ and helped an organized deployment effort of 5000+ card readers to help instigate use of the Smart Cards at DOE. Managed a team of individuals which helped facilitate this effort.Provide expert technical advice, guidance and mitigation strategies of LAN/WAN technology, Mainframes, NT, UNIX and various types of database systems at DOE.

Manage and conduct technical system testing on various Department of Energy’s office of Intelligence (IN) Certification and Accreditation systems. Conduct security evaluations, audits, reviews and risk analyses on classified automated nformation systems. Review Security plans along with contingency, incident, configuration management, interagency agreement, and memorandum of agreement, Privacy impact assessments, and business impact assessments to conduct a complete risk assessment report.Utilizing Directorate of Central Intelligence directive 6/3 (DCID) along with Office of Management & Budget (OMB) Circular A-130, Federal Information Security Management Act (FISMA), Government Information Security Reform Act (GISRA), National Institute of Standards and Technology (NIST) SP 800 series special publications to create Baseline Security Requirements (BLSR), which were then used to create Security Test and Evaluations (ST&Es).

Task Lead on various Financial Management Systems Certification and Accreditation projects. Worked alongside various business owners, Information System Security Officers and FMS facilitators to conduct C&A work and to infer, formulate, and apply IT security policies, standards, and procedures, ensuring systems are in compliance with Federal IT security regulations. Utilizing Office of Management & Budget (OMB) Circular A-130, Federal Information Security Management Act (FISMA), Government Information Security Reform Act (GISRA), TDP 75-10 and 85-01, National Institute of Standards and Technology (NIST) SP 800 series special publications to create Baseline Security Requirements (BLSR).Worked with Internet Security scanner, Nessus, NMap and other tools to conduct techincal security testing for major applications. Also assisted Penetration testing teams in conductin full knowledge penetration tests on servers and internetworking devices such as routers, switches and firewalls.

Provided technical and project management support to the Cyber Critical Infrastructure Protection (CIP) Program. The Treasury and Departmental Offices Cyber CIP programs have been established in response to Presidential Decision Directive (PDD) 63, Critical Infrastructure Protection, dated 5/22/98. Develop and maintain system profiles of all critical DO systems.Review the results of vulnerability assessments (e.g., risk assessments and automated penetration testing) and determine if planned corrective/risk mitigation actions are sufficient to ensure security of CIA systems.Develop System Security Plans (SSP) for all DO CIA systems. Prepare certification and accreditation evaluations for all DO CIA systems.Develop policies and procedures for a DO Computer Security Incident Response Capability (CSIRC) which deters attacks and unauthorized intrusions against the established DO critical infrastructure.

Held responsibilities for new project development and marketing new SAIC tools and methodology concerning VoIP, VoFax, Wireless and VPN technologies. A test lab consisting cisco routers was developed for evaluation and testing purposes where VoIP and other Routing protocols such as EIGRP, RIP and BGP where evaluated and tested. The results were implemented at Walter Reed Medical Center to better their network performance. Created partnerships with companies such as CISCO, NORTEL, Computer Associates and various other venders. Tasked to compare and contrast various different Network Management tools like HP-OpenView, Optivity, Ciscoworks2000, NETscout, Visual Uptime and many other venders. Research data was used to implement better network management tools at Walter Reed Medical Center. Other tasks included collecting Sniffer data using network general’s sniffer-pro software at Andrews Air Force Base and St. Vincents hospital in New York.

A critical part of the Switching Team responsible for ATM switch fabric design and implementation at Walter Reed Army Medical Center. Trouble shooting and network management have also been part of the responsibilities. Worked on Bay Network’s C-100 ATM LAN Switches and configured VLANS. Bay network’s BHC 5000 hubs were configured, implemented and also maintained. Used Bay’s Speed-View for configurations and Bay’s Optivity for monitoring devices over Hp’s Open-View network management software. Duties also included setting up and trouble shooting Cisco 7000 and BCN Bay Network Routers. An Excellent understanding of TCP/IP and other routing protocols like RIP, EGIRP & BGP helped in troubleshooting network problems efficiently. Also used engineering design tools such as AutoCAD, Design CAD and Microsoft visio for proposal network drawings and network documentation.

Masters Of Science, Management Information Systems And Telecommunications Systems

Activities and Societies: Alpha Iota Mu, National Honor Society Induction 2002, GPA: 3.78

Bachelor Of Science, Information Systems Management

Created my own disciplinary studies major combing both engineering and information systems management classwork. Presented to the school.

School Of Architecture

Accepted to the 6 year Architecture program at College Park but after attending 3 year, changed my major. Elected to do IFSM at UMBC.