End to end management of information system assessment & authorization within ICD 503 risk management framework guidelines.*Applied cybersecurity best practices to information system standards, directives and guidance for personnel, monitoring compliance across organization.*Collaborated with cross-functional teams to integrate security measures into system development lifecycles.*Collaborated with key personnel to verify enhanced network security by implementing robust information systems controls and monitoring processes.*Managed incident response efforts, minimizing potential damage and facilitating quick recovery from security events.*Fostered a high level of trust between the organization and Sponsor, streamlining new requests.*Verified continuous update of systems and immediate patching of critical vulnerabilities to prevent security issues.*Prepared and maintained regular system assessment and accreditation documents, including SSPs, POA&Ms, and CONOPS.*Coordinated with external auditors during annual audits, demonstrating adherence to regulatory requirements and industry best practices.*Managed system inventory baselines and changes.*Conducted regular security awareness training sessions, fostering a culture of cybersecurity vigilance among employees.*Adhered to NIST and NISPOM controls and requirements.

Maintain Certification and Accreditation requirements in accordance with DCID 6/3 and ICD-503 Risk Management Framework guidelines for enterprise class datacenters.● Prepared system security plans including security concepts of operations (ConOps), security control traceability matrix (SCTM), security test procedures, and plan of action and milestones (POA&M).● Performed vulnerability assessments to validate system compliance with DISA Security TechnicalInformation Guidelines (STIGs) and submitted detailed compliance report to customer security.● Executed ACAS vulnerability scans of test and operational systems and produced scan reports to evaluate system security postures and ensure compliance through continuous monitoring procedures.● Filed change requests (CRs), researched vulnerabilities, and worked with the program team to remediate security findings.● Maintained and reported ongoing security accreditation activities to program management andgovernment customers.● Hardened Irix, Linux, and AIX systems and validated instruction CDRL for site personnel to follow.● Maintained SSAA and ITDR documentation for reaccreditation activities for several site Security Plan Identification Numbers (SPIDs).● Provided IA support determination for basis of estimates (BOEs), WAGs, ECPs, and proposals,contributing to crucial program new business.● Trained new team members in IA processes and procedures for maintaining compliance to assurerepresentation of cyber security knowledge.

Part of a team responsible for designing, deploying and maintaining large scale multi-petabyte data-centers using COTS equipment following an ISP/ASP deployment model.

Supported the Unique Item Identification (UII) effort to update the DoD IUID registry.• Maintained database changes for new parts and updated part configurations.• Troubleshot technical issues relating to the UID database, providing timely response to prevent manufacturing interruption.• Created training documentation for the DoD IUID registry update process, ensuring knowledge-sharing and process improvement• Liaised between engineering, manufacturing, integration, QA, and program office to ensure parts are properly marked and tracked in accordance with DoD standards.

Highlights:• ISP Data Migration Lead - Led a team of engineers to design, document, procure, and integrate enterprise class hardware material in Geospatial datacenters to provide data migration functionality to support customer BRAC.• ISP Disaster Recovery Lead - Designed, documented, and procured Disaster Recovery material within a hierarchical HWCI driven project.• ISP Documentation Lead - Led a team of engineers to document the hardware design for a Geospatial Datacenter project in accordance with engineering best practices, processes and standards.Additional:• Created, reviewed, and approved technical documentation, such as BOMs and drawings (elevation drawings, interconnection diagrams, block diagrams, configuration instructions, field service bulletins, etc.), ensuring accuracy and control of the system baseline.• Implemented documentation and process improvements resulting in more efficient use of valuable resources and more effective communication of the system architecture.• Developed strategies for meeting aggressive scheduling and budgetary needs, resulting in the completion of a critical project and positive customer feedback.• Successfully wrote numerous engineering reports and presentations for TEMs, internal design reviews, and customer reviews, which led to internal and customer approvals.• Provided support to strategic new business proposals, performing design, research, estimating, and documentation tasks during altered work schedules with extended hours to contribute to successful program awards and company growth.• Designed enterprise class systems using NAS, SAN, and Blade technologies, from various COTS vendors such as Dell, NetApp, Cisco, Quantum/ADIC, Brocade/McData and Redhat, with consideration to physical constraints.• Co-developed and tuned a parametric sizing model to extrapolate design sizes based upon system and architecture requirements and COTS benchmark data for design recommendations.