Jonathan Langlois Email & Phone Number

Lincoln, Ri, Us

Natick, Massachusetts, United States

• Prepare, Review and update authorization packages for multiple networks across multiple classifications under NIST 800-37. Creating and updated Plan of Action and Milestones. Assessing and implementing controls under RMF 800-53. Follows the RMF process of (Prepare) Categorize, Select, Implement, Assess, Authrorize, and Continuous monitoring of package health.• Admin for Tenable / ePolicy Orchestrator. Creates/implement scans and reports to assess and input vulnerabilities to be remediated on tenable. Updating ePO and agent data. Ensuring proper deployment of agents to devices. Partly responsible for remediation of 800+ systems on a single network.• Ensures Information System security related documentation is current and accessible to properly authorized individuals.• Conduct continuous monitoring for overall vulnerabilities on network and documentation.• Project Manager for Standalone systems. In charge of starting and continuing Authorization to Operate and the development of a System Security Plan• Auditor for STIGS and documentation. Works in conjunction with Networking/System admins to gather up to date documentation.• Responsible for /completing closing out pertinent taskers on a timely basis for a developmental network to maintain compliance.

North Smithfield, Rhode Island, United States

• Design / produce multiple IT technologies to exist within the enclave/environment to include radio frequency (RF) / SATCOM (SatelliteCommunications), troposphere scatter systems and traditional cable networking solutions (Ethernet / fiber).• Convert / modify / harden Commercial Off the Shelf (COTS) equipment in accordance to Defense Information Systems Agency (DISA) Security TechnicalImplementation Guide (STIG) guidelines.• Plan / design the location, installation, operation and maintenance of mobile networking equipment and systems to include router-to-routerconfigurations, switch trunking, circuit configurations through commercial multiplexers and asynchronous transfer mode (ATM).• Perform Assured Compliance Assessment Solution (ACAS) scans to assess network vulnerabilities and create/mandate risk management solutions.• Assign / schedule training (certifications, continuing professional education) and monitor training status of all unit members as training manager.• Develop lesson plans and on-the-job training for specific issues encountered by guard members in ongoing operations and for lessons learned.• Served in multiple deployments as J6 Senior Enlisted Leader in a ten-person shop and Host Based Security System (HBSS) subject matter expert andcybersecurity analyst.• Administers server-based networked systems, distributed applications, network storage, messaging, and application monitoring required to provision,sustain, operate and integrate cyber networked systems and applications in garrison and at deployed locations.• Processes and reviews C4 systems requirement documentation, telecommunication service requests, status of acquisition messages, andtelecommunication service orders.• Performs strategic and budget planning for networks.

Conducts inspections, operational analysis and evaluations of system installations and repair activities to optimize network capabilities. Implements preventative and corrective actions. Expertly exercises a comprehensive knowledge of IT fundamentals and best practices to accomplish combat communications missions. Designs and manages Active directory privileges for multiple groups and users. Also uses Active directory Certificate Services to issue and manage digital certificates (PKI) using root and subordinate CAs and CRLs. Ensures data is readily available in the event of a catastrophe or deletion of data, by using both VMware and RAID for system backup. Dedicates the most applicable and up to date DOD/DISA STIG’s to IA vulnerabilities using Security Center to scan the network. Oversees and optimizes configuration management of Microsoft Windows Server 2016R2, RAID, and VMware Workstation to ensure completion of primary administration duties. Maintains and administers HBSS, ACAS, Domain Controller, Exchange mail server, Solar Winds, Windows Server Update Services, a virtualized proxy and firewall/SMCA. Responsible for utilizing documentation of accomplished training in a timely manner and employs documentation training systems such as TBA (training business area). Monitors and operates in other various duties such as, but not limited to, developing training plans, ensuring availability of web and network, CISCO switch configuration, employing various internet protocols, and evaluating overall data.

Design, develop, implement and/or integrate IA and security systems and system componentsincluding those for networking, computing and enclave environment to include those withmultiple enclaves and with differing data protection/classification requirements. Identifying,researching, characterizing, and documenting security weaknesses related to operatingsystems, software applications, firmware, network hardware components, as well as networkarchitecture design and documented policies and procedures. Recommend informationassurance/security solutions to support customer requirements. Ensure servers comply withDoD Information Assurance requirements and update servers that are not in compliance. Testsecurity patches against operational software to ensure functionality does not impact thesoftware. Monitor hardware and software for any suspicious changes, behavior or traffic, providereports when/as directed. Enforces the design and implementation of trusted relations amongexternal systems and architecture. Assesses and mitigates system security threats/riskthroughout the program life cycle. Contributes to the security planning, assessment, riskanalysis, risk management, certification and awareness activities for system and networkingoperations. Reviews C&A documentation, providing feedback on completeness and complianceof its content. Trained in using the eMASS application to assess hundreds of security controls toensure a system/lab is or is not compliant given the evidence in documentation and STIGanalysis on the scanned systems/labs. Define backup strategies, adhere to backup policies, andmonitor backups for completion and viability.