Working for NASA was a dream come true! We secured TDRSS, basically the internet provider for outer space. I was able to apply my background as a Network Engineer and SysAdmin to bring TDRSS's IT Security programme from a purely theoretical one to being oriented toward praxis. Now I'm ready to bring these 3 disciplines to your company!• Advised Network Administrators and System Administrators on configuration changes to routers, switches, firewalls, and servers to meet NASA CSET security configuration standards.• Utilized CIS and NASA CSET standards checklists to assess and document compliance.• Used BigFix to automate NASA CSET compliance documentation.• Created reports on compliance and vulnerability mitigation for local and NASA-wide use.• Served as IT Security Engineer at NASA TDRSS satellite communications ground stations.• Worked within established change management procedures to install BigFix endpoint automation and reporting suite to 2000+ endpoints. • Reported on BigFix project installation status to technical and project management staff.• Performed Trade Study on SIEM tools, resulting in the selection and installation of Splunk.• Coordinated actions and reporting on Mitigation Action Requirements and Emergency Directives from NASA and Department of Homeland Security. • Configured WhatsUpGold monitoring service to track site and device bandwidth utilization, circuit status, and general device monitoring; includes configuring SNMPv3 across enterprise.• Enforced Change Management process including review and analysis of ACL changes.• Performed software upgrades and maintenance on CDM (Continuous Diagnostics and Mitigation) suite (BigFix, ForeScout, SecurityCenter) and supporting hardware/OSes. • Developed BigFix automation content locally and for greater NASA community.• Liaised with BigFix vendor and NASA CDM Team to resolve BigFix issues.• Created training documentation for BigFix and Ticket Management processes.

This role got me excited about network engineering and network security!I managed vendor relationships and offerings, and even assisted a vendor with some re-architecting work.• Maintained hybrid network for $1.5B company with 850+ remote locations. • Provided Level II/III and vendor-escalation support and troubleshooting to resolve issues.• Migrated HQ, datacenter, and eCommerce to separate data facilities over one weekend.• Migrated e-Commerce across hosting vendors during software migration. • Configured corporate and vendor firewalls, routers, switches, and wireless access points to PCI and SOX Security standards. • Created Change Management program for firewall ACL changes.• Worked with multiple WAN vendors from RFP and selection to troubleshooting and config migration over the entire circuit lifecycle.• Utilized packet captures for security audits, DLP, and software issues.• Created site-to-site VPN tunnels between Stage and vendors across multiple firewall types (Cisco ASA, Meraki Firewall, Juniper SRX).• Configured Cisco ASAs, Routers, and Switches to optimize traffic (encryption, ACLs, QoS).• Assisted new IT Security office with technical knowledge and expertise. • Analyzed penetration testing results for new IT Security office.• Completed wireless infrastructure upgrade to managed access points with no prior knowledge. • Upgraded, configured, and troubleshot Cisco network including ASA, IOS, and NX-OS.• Performed Root Cause Analysis for outages and security incidents. • Trained HelpDesk and Network teams and developed training materials. • Utilized SNMP and Netflow-based tools to improve performance and security management.• Migrated and integrated acquired company’s network (Gordmans) into the Stage network. • Member of on-call rotation for 24x7 after-hours support. • Assisted multiple departments with critical projects as Network and Security SME. • Performed "silo-busting" to address critical business needs, outages, and projects.

This role gave me the opportunity to work in networking. I remember the interview with Cliff, the NOC manager. He was a fellow USAF Comms vet. "You're Air Force, so I know you'll figure it out. If you don't, I can think of 3 things to write you up for right now and get rid of you. So congratulations, you've got the job."It was sink or swim, but within about 6 months I was teaching my fellow NOC techs a thing or two. By the end of my time here, I was pushing Tier III and had taken it upon myself to write instructions and provide training and mentorship to n00bs.I only left because my primary client made me an offer that MegaPath couldn't come close to in terms of pay and resume-growth.• Maintained diverse broadband technologies including T1, xDSL, cable, 3G EVDO, ATM, DS3. • Used ability to rapidly learn and apply technical information to high call/ticket volume. • Performed daily spot-training and created training documents for new technicians. • Maintained and ensured PCI (Payment Card Industry) Security compliance for all clients.• Performed Level 2/Level 3 escalation services, including router configuration troubleshooting.

This was my first job after moving to the great state of Buck-ee's--I mean, Texas!Kahlig (which is a family of auto dealerships) suffered the temporary loss of their sole IT guy supporting 3 far-flung dealerships. They hired me to fill in until his return. In 3-4 months I learned the lay of the land, the technologies, and even drove some improvements.

I worked at ██████ supporting ████ ██████ missions for ███, ██████, and ██ ██████ ████. What? Fort George G. Meade is home to a famous three-letter-agency, so... Yeah, it's like that.After boot camp and tech school for System Administration (3C0X1/3D0X1 at the time), I performed System Administration duties on UNCLASSIFIED, SECRET, and TOP SECRET networks. After the SME left without any handoff, I was assigned the duty of figuring out and administering the Blackberry Enterprise Server with the quote from my Senior Master Sergeant that has defined my career:"Give it to Withers; he'll figure it out."It was an honor, a privilege, and you were worth it.• Maintained $4.1M network of 800+ diverse endpoints supporting global intelligence missions.• Provided Tier I/II technical support and handled escalation of issues to Tier III and vendors. • Enforced Information Assurance policies, including Incident Response for Classified Message Incidents and viruses. • Proactively analyzed server event logs identify and resolve hardware/software and security issues. • Taught monthly, week-long course to non-IT staff, allowing offices in-house Tier I support capability. • Configured and hardened servers to Air Force Comms Agency standards. • Trained on installation, configuration, and maintenance of Cisco devices, Sun Solaris UNIX and creating fully functional virtualized Windows/AD/Exchange networks via VMWare. • Assisted NetSec with forensic investigations.