Jason Stevenson Email & Phone Number

Phoenix, Arizona, Us

• Part of Cloud Core Team for Microsoft Azure. Agile methodologies are being established for IaaS and PaaS.• Building and Securing the deployment of Office365, SharePoint, OneDrive.• Assisting in the establishment of the Mobile Center of Excellence.• Assisting in establishing the governance for mobile access.• Assisting with the integration of Microsoft Intune Mobile Access Management (MAM) policies.• Securing users requirements for using mobile native applications.• Assisting in securing our Identity Provider and enabling multi-factor authentication.• Initiated the unification and maturity of the Cyber Security Framework by adopting NIST 800-53 series security controls and the Cloud Security Alliance Cloud Controls. This involved aligning across the organization and cross-referencing various industry regulations, e.g. NEI 08-09, American Water Works Association.• Act as a member of the Risk Ranking team. We collaboratively assess risk of various types of vulnerabilities to determine what the residual risk to the organization is.• Update and establish security policies.• Assisting with the modernization of how sensitive data is handled, protected, and labeled. Automating tagging documents that contain confidential and highly confidential information.• Assist in ensuring Palo Verde Generating Station’s projects are adhering to the security controls, are aware of, and leveraging enterprise resources for securing their technologies.• Assisting in securing the digital transformation of our water treatment facility.• Review, comment, or edit vendor contracts, statement of work agreements, and perform third party risk assessments to ensure the security posture of a business partner aligns with the requirements of our cyber security department.• Provide hours and budget required to IT for security personnel involvement in projects. Projects are measured by level of complexity, must achieved, and determined to be O&M or can be Capitalized.

Walnut Creek, Ca, Us

• Architected, engineered, and deployed enterprise SIEM solution.• Participated in several vendor meetings in order to provide recommendations on various technologies suitable for CSAA’s cyber security environment, i.e. IPS, Threat Intelligence, Threat Detection, SIEM, etc.• Responsible for providing senior level expertise on decisions and priorities regarding system enhancements (software and hardware updates) that will improve the performance and reliability of the system. • Facilitates the establishment and implementation of standards and guidelines that guide the design of technology solutions including implementing solutions requiring integration of multiple platforms, operating systems and applications across the enterprise.• Develops solutions to resolve highly complex technical and business issues. Recognized expert in systems engineering who provides guidance and internal consulting expertise toward integrating multiple systems. May provide guidance/training to other staff. Also develops and maintains product lifecycle for enterprise level software and hardware.• Reviews planned resource and capacity; risk assessed and created contingency plans. Responsible for significant contributions to enterprise wide planning efforts.• Provides technical leadership in the design, development and deployment of software and hardware solutions with his or her area of specialization. Tracks industry trends and maintains knowledge of new technologies to better serve the enterprise's needs.

Phoenix, Arizona, Us

• Responsible for maintaining the integrity of corporate infrastructure, protect PII, and ensure PCI-DSS compliance is maintained. Assisted with creating crisis management documentation for enterprise use.• Perform Risk Analysis and Vulnerability Assessments on all assets deployed to the production environment.• Analyze network traffic to determine the presence of any threatening packets to the infrastructure. • Communicate with all levels within the organization, including the Risk Advisory Board.• Maintain Corporate/Partner PKI infrastructure.• Construct and implement security centric solutions to ensure our environment is less susceptible to a breach.• Institute accreditation framework based on NIST 800-53 and DISA guidance.• Designed and deployed a SIEM and central logging solution to ensure better incident response time. This supports the team’s ability to respond in real-time to security events.• Constant engagement with Network team to ensure secure ACL’s and iRules are properly in place. • Ensure team is properly maintaining file integrity by way of Tripwire.• Manage NDLP, IDS, and conducted application code reviews. Leveraged several industry known applications such as Tenable, Informatica, Fortify, to name a few. • Was in the process of introducing SCAP vulnerability baseline assessments based on NIST. • Work with various vendors seeking solutions that could/would better our security posture within the organization.

San Diego, Ca, Us

I worked as an Information Assurance Engineer while at Ausgar. I spent most of my time creating Certification & Accreditation packages for Trident Warrior/FLEX exercises. This entailed working with Industry leaders, i.e. General Atomics, General Dynamics, Raytheon, in providing technical solutions potentially solving Department of Defense gaps and/or modernizing legacy systems.

San Diego, Ca, Us

Work as a Lead Navy CA Liaison/Reviewer for SPAWAR systems. I Develop Certification and Accreditation (C&A) documentation to support the DIACAP approval process within the Department of the Navy. Review and track C&A documentation to ensure that DIACAP documentation complies with the provision of DoD 8500 series IA policy directives and the DoD 8510.bb (DIACAP) instructions. Provide risk assessment evaluations relative to NIST 800-30.Audit vulnerability scan results from GoldDisk, eEye Retina and manual checklists released by DISA. Perform C&A documentation security analysis critical review and risk assessment to support a risk determination signed by the Certifying Authority.

San Diego, Ca, Us

As an Information Assurance Systems Engineer, I provide JPEO JTRS guidance in the area of Certification and Accreditation of applications as it pertains to DIACAP/NIST 800-30 rules and regulations. I also provide technical expertise in the area of Platform IT as it refers to computer resources, both hardware and software, that are physically part of, dedicated to, or essential in real time to the mission performance of special purpose systems such as weapons, training simulators, diagnostic test and maintenance equipment, calibration equipment, aircraft and aviation equipment, etc.

• Ensured the streamlined operation of the IT department to support and align it with the business objectives of the organization.• Developed and managed application portfolios for each department within my hierarchy.• Attained all IT service level agreements for the user community within the organization.• Planned, coordinated, directed, and designed all operational activities of the IT department, as well as provide direction and support for IT solutions that enhanced mission-critical business operations.• Partnered with Managers in other departments to identify, recommend, develop, implement, and support cost-effective technology solutions for the entire organization.

San Diego, Ca, Us

As a Systems Administrator for NuVasive I accomplished the following:• Moved and rebuilt entire infrastructure to new facility.• Designed and migrated network from NT 4.0 to Windows 2003 Active Directory.• Migrated Exchange 5.5 email system to Exchange 2003.• Managed Active Directory and maintain all Group Policies.• Managed Exchange 2003 email system.• Administered and supported SQL databases.• Managed over fifteen various servers.• Managed daily operations of corporate LAN in a 2003/2000 environment.• Managed network printers (Xerox Document Centre, Fiery * HP network printers). • Schedule and perform routine maintenance on all servers and workstations.• Managed network and email virus protection using Enterprise Symantec Antivirus.• Managed Cisco VoIP phone system as well as Cisco Unified Messaging. (Call Manager)• Managed Xmedius Fax Server. • Migrated from a manual Help Desk to web based Altiris Help Desk ticketing system.

Bachelor'S Degree, Computer And Information Sciences, General

Business Administration/Accounting

Education record

Diploma, General Studies