•Technical team lead for Public Key Infrastructure (PKI) team providing oversight and weekly reporting on PKI projects and initiatives •Responsible for architecting and maintaining the Unisys enterprise public key infrastructure (PKI) and peripheral solutions•Planning and implementation of new PKI hardware and software deployments in physical, cloud (Azure) and virtual (hyper-v) configurations•Administer and maintain certification authority (CA) servers utilizing Active Directory Certificate Services (ADCS) in both standalone and enterprise configurations on various Windows platforms •Installation, management and subject matter expertise on Thales/nCipher hardware security modules (HSM) including nShield Connect, nShield Solo and nShield Edge devices•Administration and maintenance of Microsoft network device enrollment service (NDES)/simple certificate enrollment protocol (SCEP)•Planning and deployment of Certificate Enrollment Web Services (CES) solution to allow for user certificate enrollment off-VPN•Planning and deployment of Microsoft Identity Manager Certificate Management (MIM CM) solution as registration authority (RA) for archival and self-service recovery•Planning and implementation of JAMF ADCS connector for management and provisioning of certificates on Apple (Mac) devices•Administration and configuration of online certificate status protocol (OCSP) revocation configurations•Maintenance of Public Key Services Active Directory objects including certificate templates, AIA/CDP and enrollment services•Perform certificate request vetting, support and issuance from internal and third-party CAs.

• Conduct research to identify trends and best practices in support of the development of policies and procedures that provide safeguards for the security of network, perimeter, and/or gateway services.• Analyze and evaluate network traffic for adversary activities, categorizes the types of vulnerabilities and associated attacks using incident-handling methodologies, and makes recommendations to management.• Assist in the deployment of technology solutions to institute the security of network, perimeter, and/or gateway services, including incident-detection tools.• Provide program guidance, direction or advice to internal and external stakeholders, coordinates and provides direction on a project basis.• Assists in developing, testing, coordinating and implementing strong defense mechanisms that protect network systems.• Develop reports regarding the status of the security of the network, ongoing status of protections, problems, and future efforts regarding threats, vulnerabilities, and risk factors.• Work with employees, vendors, and contractors to help identify problems and irregularities in the network defense infrastructure; and develop and implement corrective measures to resolve issues.

Technical team lead for the United States Postal Service's Public Key Infrastructure (PKI) and Encryption Key Management team.•Support USPS in compliance with industry standards for PKI and ADP security.•Perform system analysis, design and database management for PKI and other security-related systems.•Develop security-related guidelines, technical bulletins and training materials. coordinate, review and monitor installation activities related to security.•Develop specifications for security operations to be included in selection of hardware systems.•Oversee and conduct reviews and audits to ensure enforcement of security policy, programs, and procedures.•Perform risk assessments to make recommendations on security certifications and accreditation of sensitive applicants and systems.•Management and support of Public Key Infrastructure and encryption key lifecycle.•Management and support for deployment and lifecycle of X509 digital certificates to support several hundred Postal applications.•Certificate management support for multiple operating system platforms and devices.

Member of United States Postal Service Information Systems Security team and responsible for maintaining the USPS public key infrastructure (PKI).Perform security vulnerability assessments on centralized computing resources and networks to ensure systems compliance with Postal Service security policies and hardening standards.Use system vulnerability assessment tools to scan computer resources (Rapid7 Nexpose, Nessus)Identify weaknesses in public facing applications and risk mitigation planningProvide support and administration for PKI infrastructure (Windows Server 2003/2008)Issue/Revoke/Renew digital certificatesUtilize Veritas/Netbackup to maintain backups of PKI systemsProvide up-to-date documentation of proceduresAssist end users in installing and configuring SSL certificatesPlan and integrate Postal PKI with remote PIV card registration agent locationsTroubleshoot PKI-related problemsAttend and participate in Certificate Policy Working Group (CPWG) conferences

Cyber Systems Operations (3D0X2)Rank: TSgt (E-6) Skill Level: 9 (Trainer)Member of the Network Operations team and responsible for:Installation and configuration of MS Outlook/Office 2000/2003Network Administration (port security, network services)Training/SupervisoryAdministration of Microsoft Exchange 5.5, Exchange 2003Administration and support of Windows XP, Vista, Server 2000, Server 2003 systemsAdministration of Active Directory (new accounts, password resets, etc.)Help desk (Remedy)Desktop support (hardware, software, printers

Design, configure and maintain Intrusion Detection System and Card Access System (DMP, C-Cure)Provide day-to-day Industrial Security support to DoD and intelligence community programs. Coordinate the establishment and configuration of stand alone and small networked classified computer systems.Set system security parameters and audit in accordance with national security standards in a Microsoft Windows or Linux environment. Train designated program personnel in the daily responsibilities of an Information System Security Officer. Develop Program Protection Plans, OPSEC plans and Systems Security Plans per national regulations and program specific security guidance. Assist in developing the program protection process for Critical Program Information Identification, protection and associated OPSEC planning and execution. Develop security plans, briefings, reports and present computer security briefings to employees.

Responsible for the maintenance and support of Windows, UNIX, Linux and network systems.Core areas of responsibility were:Install and support NT/2000/2003 Workstation/ServerAdministration of Access Control/Intrusion Detection SystemPurchasing/ProcurementInstall/Configure/Test PCsPlan and implement Active Directory MigrationPlan and implement Exchange 2003 Mail ServerPlan and develop security proceduresAdminister backups (Veritas)Conduct troubleshooting and vulnerability testing for company network assets to ensure security.Coordinate with Program Security to ensure systems are in compliance with corporate and DOD policySoftware and security auditing