Jonathan Gerard Email & Phone Number

San Diego, Ca, Us

Patuxent River, Maryland, Us

I continue my 13th year (contracting years included) of support for the NAVAIR Training team:• Lead CyberSecurity Engineer, leading a team of cyber security professionals responsible for the security posture of ~30 unique, high-availability, high profile domains across the United States to DoD and Navy Standards.• Developer and QA Tester of programs and scripts written to automate patching, program updating, STIG implementation and more on highly sensitive systems.• Supports a wide variety of Operating Systems and programs, including Redhat, Windows, McAfee Enterprise tools, Cisco, Palo Alto, Office, Adobe, etc.• Performs vulnerability assessment of systems with tools such as ACAS, Nessus, SCC, and EvaluateSTIG.• IA\CS Point of Contact for remote teams across United States. Provides onsite supprt via 10% travel* (until Covid)• Organizes and manages many aspects of systems in use including network configuration, topology (Visio), asset lists, Patch and Scan status, Checklists, ATO Status, software licenses, etc.• Responsible for datacalls and audits which occur on systems regularly.• Provides research and recommendations to upper management on technology trends and purchases as well as Enterprise security and CyberSecurity decisions.• Tracks and either resolves or mitigates vulnerabilities using a Plan of Action & Milestones (POA&M) and tools to automate tracking including Thinking Compliance\Vulnerator in order to successfully obtain and maintain an ATO.• Performs DOD Acquisition duties, feedback, testing and document review. Currently DAWIA Engineering Level 2.

Herndon, Va, Us

• Continued as Lead Information Assurance Engineer responsible for the security posture of 30 unique, high-availability, high profile domains across the United States to DoD and Navy Standards.

Falls Church, Virginia, Us

• Continued as Lead Information Assurance Engineer responsible for the security posture of 30 unique, high-availability, high profile domains across the United States to DoD and Navy Standards.• Expanded support of Operating Systems and programs, including Redhat 6, Windows 2008R2, Tenable Nessus (ACAS), Sharepoint, and SCAP.• Transitioned site from DoD's Retina Program to Nessus\ACAS program.

Warminster, Pa, Us

• Lead Information Assurance Engineer responsible for the security posture of 30 unique, high-availability, high profile domains across the United States to DoD and Navy Standards.• Supports a wide variety of Operating Systems and programs, including Redhat 4 and 5, Windows XP, 2003, 7, and 2008, Symantec and McAfee Enterprise Antivirus tools, Office, Adobe and more.• Developer and QA Tester of programs and scripts written to automate patching, program updating, STIG implementation and more on highly sensitive systems.• Network and System Administrator for team of over 20 members, including the administration of a Windows 2008 server, the team’s Sharepoint website, site backups and all associated IA tasks.• Manages a full-time IA Engineer to assist in achieving our team’s goals. Takes part in career development with training on DoD security methodology, IA, and script development.• IA Point of Contact for remote teams across United States. Provides onsite support via 10% travel.• Organizes and tracks many aspects of the domains in use including network configuration, topology (Visio), asset lists, Patch and Scan status, ATO Status, software licenses, etc.• Responsible for datacalls and audits which occur on systems regularly.• Provides research and recommendations to upper management on technology trends and purchases as well as Enterprise security and Information Assurance decisions.• Performs vulnerability assessment of systems with tools such as Retina, Golddisk, and SCC.• Tracks and either resolves or mitigates vulnerabilities using a Plan of Action & Milestones (POA&M) and tools to automate tracking including custom tools and Thinking Compliance\Vulnerator.• Develops and maintains multiple POA&Ms and other IA Documentation in order to successfully obtain and maintain an ATO (Authorization to Operate).

Atlanta, Ga, Us

• Performed HBSS (ePolicyOrchestrator) configuration and event analysis for a major Navy IA Command Suite, providing support to multiple Navy customer sites in the western United States.• Part of a 24/7 cyber-security team to respond to security events, viruses, intrusion, etc. • Responsible for local system Information Assurance tasks including Golddisk, Retina, STIGs, IAVA compliance, patching and QA testing.• Provided reports and created POA&Ms for open vulnerabilities. This includes updates to the DISA VMS and included issue resolution and/or mitigation plans.• Documentation contributor for Project CONOPS (Concept of Operations), SOPs (Standard Operating Procedures), and other critical information.

Arlington, Virginia, Us

• System Administrator for OPNAV DNS-4o Lead System Administrator (SA) for Navy Operations (OPNAV DNS-4). This includes Windows Server 2003 maintenance, hardware maintenance, STIG, CTO, IA Suite, and IAVA compliance. Servers are in both Windows and IBM Domino\Lotus Environments.o Managed over 2 dozen servers at multiple sites, including remote COOP sites, and ensured uptime by working during scheduled maintenance windows, and off-hours as necessary.o Responsible for Information Security, including the studying of the latest threats, mitigation practices, vulnerability resolution, COOP planning, and server security hardening best practices.o Developed and managed >$100K effort to deploy and accredit a set of DOD Servers.o Led and was primary developer for a SSAA under DIACAP guidelines. ATO granted in 2009.o Maintained the code for the OPNAV DNS-4 helpdesk system, including a Python program written for the automatic generation of monthly Excel status reports and ticket analysis.• Sharepoint Company Officer \ Webmastero Successful in leading the effort to establish a Corporate-Wide Intranet based on Sharepoint. Current system is now part of RGS culture and is the company Intranet.o Led weekly high-level meetings with the Vice-President and representatives from every company division to establish the layout, design, guidelines, policies, content management, and organizational structure of Sharepoint from scratch.o Main author of the RGS Sharepoint Guidebook, which included company policy, Sharepoint usage guidance, and content \ knowledge database management.o Main company Point of Contact for issues regarding Public Website and Sharepoint issues including network connectivity, Site Creation, Sharepoint Feature Usage (e.g. Surveys), etc.o One of two company-wide trainers for Beginner and Advanced Sharepoint training.

San Diego, Ca, Us

(Note: This was a contractor position)• Developed and conducted test plans for a wide range of scenarios incorporating new hardware and software applications such as Mediaflo (VCast), and Bluetooth capability.• Learned the basics of CDMA and cell phone technology as well as analysis tools.

Santa Clara, California, Us

(Note: This was a contractor position)• Coded and maintained a C# ASP.NET website which provided for automation of change requests, code retrieval, software compilation, CD image creation and bug tracking.• Trained coworkers on CM (Change Management) process, coding, source control, and other applications.

Engineering Level2, Engineering

B.S. Computer Science

High School