Matthew Merchant Email & Phone Number

Freeport, Fl, Us

Mclean, Virginia, Us

Mclean, Virginia, Us

Lincoln, Ma, Us

• Successfully obtained 7 Authority to Operate (ATO) by implementing the Risk Management Framework (RMF) for high-impact, mission-critical Air Force and TRANSCOM applications hosted on-premises and in the cloud.• Led cyber element of migration of DoD mission critical program from datacenter to AWS GovCloud.• Provided cybersecurity and application modernization advisory to infrastructure, platform, and application teams.• Managed RMF compliance for cloud-hosted high-impact, mission-critical Air Force and TRANSCOM applications, ensuring adherence to strict security standards.• Implemented high-availability, cloud-hosted, critical infrastructure systems.• Conducted ongoing code scans using Fortify, ACAS scans, and STIG checklists for all assigned systems, ensuring prompt identification and mitigation of vulnerabilities.• Coordinated compliance and remediation activities with program offices, application developers, system administrators, security service providers, and multiple hosting enclaves, fostering effective cross-functional collaboration.• Facilitated the integration of Cybersecurity Service Provider (CSSP) for cloud-based systems, enhancing overall security posture.• Documented, reported, and tracked all POA&Ms, waivers, and risk acceptance for assigned systems, ensuring timely resolution of outstanding security issues.• Coordinated the development and collection of all RMF Body of Evidence documents and artifacts, guaranteeing a comprehensive and accurate representation of the security posture.• Managed CIO and FISMA data calls and system compliance report cards, addressing inquiries and concerns promptly and efficiently.• Managed system authorization activities in eMASS for ATO, ensuring smooth and compliant processes.• Utilized scripting to automate metrics and reporting based on the output of various security tools, improving efficiency and accuracy in monitoring and assessment.• Built proof of concepts in AWS.

Albuquerque, Nm, Us

• Led projects and provided technical guidance on functional and military cybersecurity requirements, contributing to the expansion of unclassified and classified hybrid cloud software development networks.• Established a new security compliance program for the RDT&E software development network located at Eglin Air Force Base, enhancing the overall security posture.• Managed the security compliance team and program for RDT&E, ensuring efficient and effective execution of compliance tasks.• Developed comprehensive policies and plans for the RDT&E security program, establishing a strong foundation for secure operations.• Created policies and plans for major applications and training systems, guaranteeing robust security measures are in place.• Facilitated communication of requirements with government and industrial security representatives, ensuring alignment and understanding among stakeholders.• Managed compliance against NIST SP 800-171 and NIST SP 800-53r4, ensuring adherence to strict security standards and guidelines.• Maintained security program artifacts in DCSA and USAF eMASS, guaranteeing accurate and up-to-date records for all security-related activities.

Alexandria, Virginia, Us

• Served as the Alternate ISSO for USCG C3CEN's cutter C4ISR information systems, ensuring compliance with FISMA, OMB, DHS, DoD, and USCG policies.• Led the IA analyst team assigned to C4ISR systems, managing assigned systems through the RMF process effectively.• Ensured security activities were consistently implemented throughout the SDLC/SELC, maintaining a strong security posture during all stages.• Ensured assigned systems were operated, maintained, and disposed of in accordance with USCG security policies and procedures.• Led the development of System Security Plans, Configuration Management Plans, Contingency Plans, and other required security documents, ensuring a comprehensive approach to system security.• Conducted and documented contingency plan tests, verifying the effectiveness of contingency measures.• Assessed system vulnerabilities, provided direction for remediation, tracked remediation efforts, and reported on system security status to senior leadership.• Documented, reported, and tracked all POA&Ms, waivers, and risk acceptance for assigned systems, ensuring timely resolution of outstanding security issues.• Promoted information security awareness and best practices among the C4ISR development staff, fostering a security-conscious culture.• Utilized ACAS / Nessus Tenable Security to monitor and report the security status of assigned systems, enabling timely identification and mitigation of vulnerabilities.• Managed system accreditation activities in eMASS, ensuring a smooth and compliant process.

Anchorage, Alaska, Us

• Led the Mission System Sustainment Lab's (MSSL) as the lead engineer for a cross-functional team, providing C4ISR and C4IT cybersecurity sustainment engineering for United States Coast Guard (USCG) Aviation.• Provided IA engineering subject matter expert consultation and support to the Development and Sustainment Aviation Information System Security Officers (ISSO) for required ATO artifacts, waivers, design considerations, and sustainment decisions.• Managed the application of the USCG Aviation information assurance (IA) program, including tasks such as routine vulnerability scanning of aircraft IT systems, regression tests of aircraft security patches in a test environment, release of IA patches with support to field technicians for installation on operational aircraft in the fleet, and IA subject matter expert support to the Aviation ISSO.• Led the design, development, documentation, configuration management, testing, and deployment activities associated with the sustainment of operational USCG Aviation Mission Systems aboard a fleet of HC144, HC130J, HC130H, and C27J aircraft stationed across the US.• Served as a liaison between MSSL and field support representatives, unit maintenance warrant officers, project warrant officers, aircraft product line managers, and other stakeholders, fostering effective communication and collaboration.

Anchorage, Alaska, Us

• Led the Mission System Sustainment Lab (MSSL) as the lead engineer for a cross-functional team that provided C4IT and C4ISR engineering support for United States Coast Guard (USCG) Aviation.• Spearheaded a project to design, develop, and deploy the Coast Guard's primary ground support equipment to support all aircraft equipped with the Minotaur mission system.• Provided IA engineering subject matter expert consultation and support to the Development and Sustainment Aviation Information System Security Officers (ISSO) for required ATO artifacts, waivers, design considerations, and sustainment decisions.• Managed the application of the USCG Aviation information assurance (IA) program, including tasks such as routine vulnerability scanning of aircraft IT systems, regression tests of aircraft security patches in a test environment, release of IA patches with support to field technicians for installation on operational aircraft in the fleet, and IA subject matter expert support to the Aviation ISSO.• Led the design, development, documentation, configuration management, testing, and deployment activities associated with the sustainment of operational USCG Aviation Mission Systems aboard a fleet of HC144, HC130J, HC130H, and C27J aircraft stationed across the US.• Served as a liaison between MSSL and field support representatives, unit maintenance warrant officers, project warrant officers, aircraft product line managers, and other stakeholders, fostering effective communication and collaboration.

Anchorage, Alaska, Us

• Supervised technical staff, ensuring system documentation, testing, and deployment were completed on schedule and within budget.• Coordinated system development tasks, including design, integration, and formal regression testing, for seamless project execution.• Participated in scanning, packaging, testing, and deployment of patches for aviation mission systems, enhancing overall system security.• Advocated for and established the aviation mission system software change management program, streamlining updates and revisions.• Developed software in C#, PowerShell, and BASH to meet IA requirements of aviation mission systems, ensuring compliance with security standards.• Provided support to operational aviation mission systems using enterprise-level admin rights on CGOne and SIPRNet, enhancing system reliability and efficiency.

Falls Church, Virginia, Us

• Served as the Alternate Information Systems Security Officer for the USCG Aviation Training Center, ensuring robust security measures were in place.• Developed and processed all required documentation for three DIACAP Authority to Operate (ATO) cycles, ensuring system compliance with necessary standards.• Acted as Trusted Agent for SIPR PKI card issuance and resolved related issues promptly and effectively.• Performed vulnerability scans and generated VMS/CRMS reports using Retina/ACAS, and applied patches to maintain system security.• Served as TISCOM's Field Service Representative for the HC-144A Aircraft Mission System Pallet, ensuring seamless support and maintenance.• Applied USCG Time Compliance Technical Orders and configured systems per DISA STIGs, adhering to security guidelines.• Administered a network of TACLANE KG175D and KIV7M encryption devices, safeguarding sensitive data and communications.• Developed and maintained PowerShell, Batch, and Visual Basic scripts to support efficient systems management and administration.

North Billerica, Massachussettes, Us

• Installed and maintained the Mission System Pallet (MSP) on the HC-144A Ocean Sentry aircraft, ensuring optimal performance.• Developed comprehensive documentation for the MSP and provided training to Mission System Operators, enhancing their operational capabilities.• Managed SIPRNet networks and supported non-secure network technicians with help desk operations, fostering a collaborative work environment.• Developed PowerShell and VBScripts to streamline help desk operations and resolve user issues on CGOne, improving efficiency and user satisfaction.

Arlington, Virginia, Us

• Served in the 35th Signal Brigade (Airborne) as a Network Switching Systems Operator/Maintainer• Held the rank of Sergeant (E5)• Specialized as a 25/31F in network systems operations and maintenance• Proud veteran of Operation Iraqi Freedom (OIF-3) campaign

Master Of Science (M.S.), Information Systems

Dual Bachelor Of Science (B.S.), Accounting And Business Management

Associate Of Science (A.S.), Information Technology

Master Of Business Administration - Mba, Information Technology Management