Provide Splunk Architect services for Splunk Enterprise with clustered environment for various Department of the Navy contracts.• Provide Splunk leadership to junior Splunk staff for PMW-220 customer.• Provide architecture-level design and consultation for a 7TB implementation for PMW-220 customer.• Implemented Security Assertion Markup Language (SAML) Single Sign ON SSO for all Splunk instances where sign on is required for PMW-220 customer.• Reviewed and identified inaccuracies in Architecture diagram for PMW-220 customer.• Developed and provided Architectural design changes as well as defined path forward for PMW-220 customer that would enable the program to move from two discrete Splunk environments with no failover into a single integrated Splunk environment with complete fail over protection.• Singularly provide architect, administrative, operations and maintenance support for a 500GB implementation for PMW-205 customer. This includes onboarding to meet OMB M-21-31 requirements.• Develop proactive course of actions to optimize Splunk.• Troubleshooting new and current data collection issues• Troubleshooting system issues that make the system unstable or unusable.• Develop advanced custom Splunk content including scheduled searches, reports, dashboards, etc.• Transitioned all of our Splunk instances from manual sign on via LDAP to CAC single sign on (SSO).• Built a fully distributed Splunk version 9.0 environment on development (dev) host for dev testing.• Manage all certificates on the Splunk host through the environment for PMW-220 customer.• Provide administrative support for the Splunk Enterprise Security Application.

Manage a 4TB clustered, multi-agency Splunk Enterprise application on the backend and front end for the Department of Justice (DOJ) Justice Management Division. This support is being provided to 20+ sub agencies within DOJ with for both Linux and Windows operating systems. • Implement the required system configuration changes on the backend to onboard a wide range of data types to include Antivirus (AV), Dynamic Host Configuration Protocol (DHCP), Domain Name System (DNS), PowerShell, Web Application logs etc.• Work with customers to troubleshoot on the backend why their endpoints are not communicating with our servers, receiving the expected applications, or sending in the expected data.• Created indexes on the backend as required to support various data retention requirements.• Install and configure various Splunk Add-on as required on the backend to meet data parsing and field extraction requirements.• Develop REGEX for field extractions and configuration file implementation on the backend.• Build custom Splunk apps in the backend for various use cases.• Built a capability to interrogate thousands of machines for healthy status and data flow check. • Provide Tier 3 support to 20+ sub agencies to bring closure to a number of issues and use cases.• Perform routine Splunk Application upgrade throughout agency.• Provide Splunk best practices training to new teams joining the team.• Design and build responsive dashboards with the capability to diagnose endpoints and user accounts for the purpose of troubleshooting issues to include account access, onboarding etc.• Lead effort to develop an application that with a single click, a Splunk Admin can determine if any endpoint machine in their environment is correctly configured to send data to its respective Heavy Forwarder or indexer.

Responsible for administering Splunk Enterprise Security (ES) for the US Senate’s IT cyber security operations center (CSOC) and cyber threat intelligence cell (CTIC) in support of their transition from ArcSight.• Developed custom dashboards with real time field extraction (at search time) with the use of custom REGEX for client custom use cases. Few examples include:• Developed search quires to meet customer custom use cases.• Troubleshoot Splunk ES during the process of standing up the tool for use by the agency in their process of transitioning from ArcSight.• Work with agency to ensure appropriate indexes and tags are being whitelisted in all of the ES Data Models.

Responsible for providing systems engineering support to the Joint Planning and Execution Services (JPES) Program Management Office (PMO) to ensure that the Joint Operation Planning and Execution System (JOPES), the Joint Capabilities Requirements Manager (JCRM) and the Preferred Force Generation (PFG) systems are maintained, available, stable and secure using agile scrum methodology.• Evaluate Splunk Use cases for applicability.• Develop Tier III ticketing system.• Manage all Tier III issues across all systems.• Develop process documentation for our Tier III system.• Provide weekly briefings to Gov leadership on the status of all Tier III issues.• Lead all test effort for all test releases for the program using agile scrum methodology.• Develop test plan, test procedure and test scripts for all test efforts across the program.• Track PWS metrics to ensure deliverables are being met in accordance with the contract.• Develop SOPs in support of the program as well as documentation repository.• Develop requirements metric to trace test script to software requirements.

Responsible for leading the operational performance of Continuous Diagnostics and Mitigation (CDM) team of Cybersecurity data integrators, operators, and engineers across 7 Federal Agencies chartered to deliver quality Operations and Maintenance (O&M) services necessary for the protection of critical infrastructure utilizing Splunk, RESONE, BigFix, RSA Archer and ForeScout CounterACT. Currently Certified Splunk Administrator.• Implement processes, procedures, and guidance to deliver operations and maintenance support services for deployed Cybersecurity tools and capabilities in a DevOps construct.• Ensure that the team provide adequate support to meet Response Time and Time To Resolution operational metrics to ensure the reliability, availability, and maintainability (RAM) of the CDM solution.• Oversee the technical and management escalation of issues in accordance with standing operating procedures (SOP).• Provide thought leadership and insight to develop and mature the delivery of Cyber and operational solutions utilizing the DevOps methodology.• Identify performance gaps and take action to resolve challenges.• Manage stakeholder expectations through direct client interfacing and build relationships across multiple federal departments and agencies.• My team has provided workshops and training sessions to help educate agency staff on use of specific cyber protection tools.

Lead Engineer for the US Army PM – Soldier Protection Equipment by directing, coordinating, and exercising functional authority for planning, organization, integration, and completion of various engineering projects for the next generation Soldier Protection System.

Lead engineer to the US Army Night Vision & Electronic Sensors Directorate in support of PM – Ground Sensors (GS) by directing, coordinating, and exercising functional authority for planning, organization, integration, and completion of various engineering projects that are integrated on Bradley vehicles and Abrams tanks.

Subject matter expert for MARCORSYSCOM (MCSC) Counter Improvised Explosive Device (CIED) Technology Directorate as their IED Detection subject matter expert (SME) to, research and analyze CIED technology solutions across the full spectrum of the Integrated Defense Acquisition, Technology, and Logistics Life Cycle Management System.

Lead Electrical Engineer responsible for the developing schematic architecture for the armored Amphibious Assault Combat Vehicle while providing engineering solutions during the Engineering & Manufacturing Development Phase of the program. Manage team responsible for design and integration effort of two simulators and four part task trainers for the Amphibious Assault Combat Vehicle.