Mr. Richard Duque Email and Phone Number

• Chief, AFRL Special Projects Cybersecurity Office; oversaw and directed 3 contracts delivering technical, administrative and cybersecurity support to AFRL Special Project’s enclaves, weapons development systems, and space/ground control systems.• Advised headquarters AFRL, AFMC, AFLCMC, and AFOSI/PJ PSO on program IT requirements, network modifications, risk assessments, and mission impact analysis.• High tempo operations; organized weekly planning and execution meetings to adapt to volatile project objectives, communicate weekly priorities, set/monitor suspense, and identify possible delays.• Coordinated incidents, infractions, violations with cognizant AFOSI/PJ Detachment; conducted inquiries, audited security event logs, documented findings, responded as directed, and submitted incident reports to PSO, HQ AFRL, and AFMC.• Validated accuracy of RMF packages; reviewed body of evidence, assessed security controls, and examined supporting artifacts.

• IT/IA lead for AFRL Special Projects; directed contractor personnel supporting 5 technical divisions and 30+ R&D programs.• Maintained assessment and authorization artifacts such as SSPs, SCTMs, System Test Plans, SOPs, topologies, diagrams, hardware/software list, vulnerability scans, and configuration management documentation.• Processed customer change request; presented desired requirements and security concerns during CCB reviews.• Pioneered the auditing program; instituted an audit plan to validate compliance for technical and administrative controls.• Directed the install, configuration, maintenance, upgrade, and removal of HW/SW from test and operational networks.

• Appointed primary Information System Security Manager (ISSM) for the Kirtland AFB’s NIPRNet and SIPRNet enclaves.• Accredited DISA circuits and enclaves for NIPRNet and SIPRNet utilizing the DISA SNAP, GIAP, and eMASS systems.• Audited RMF/CCRI programs (i.e., higher risk data transfer/assured file transfer, DoD 8570, Incident Response, and Insider Threat mitigation), identified and resolved program discrepancies; awarded full compliance for DISA CCRI.• Increased IA awareness for host/tenant units; trained unit liaisons, designed info-sharing site, and inspected IT/IA program.• Transitioned NIPR/SIPR networks to RMF, updated comm policies and processes; adapted base populace to new requirements.• Analyzed network interfaces and ACLs, documented sources, destinations, and open PPS; obtained PPS registration ID.• Managed boundary firewall for base networks; validated customers’ requirements and established point to point connections.

• Appointed as enclave Information System Security Manager, evaluated the Kirtland Air Force Base (AFB) NIPRNet and SIPRNet enclave’s security posture and Certification & Accreditation packages.• Collected and reviewed network topologies, Cross Domain Appendix for Cross Domain Solutions, DIACAP Scorecards, Master Inventory of base hardware and software, and Master Vulnerability List.• Analyzed connected and interconnected networks and device documentation, verified current Approval to Connect (ATC) or Authorization to Operate (ATO) signed by DISA or Air Force DAA.• Developed documented processes for the Wing Cybersecurity programs, organized and improved tracking and submission of SIPRNet Write, USB waivers, Collaborative Computing, and wireless device request. Implemented documented procedures for handling and tracking Incidents such as CMIs, Data Spillages, and virus infections.• Coordinated with organizational Cybersecurity Liaison (CL) for Command Cyber Readiness Inspection (CCRI) criteria audits, to align best practices and security goals with the AF Cybersecurity program and DISA Security Technical Implementation Guides. • Evaluated C&A package for NIPR and SIPR ATOs, updated System Security Plans, Incident Prevention and Response Plan, Security Architecture Design Artifacts. Revalidated annual DIACAP IA controls and modified SNAP and SGS registrations.

•• Guided the Air Force IA program for the 86th MDG; processed, trained, and assisted 5 squadrons comprised of 800+ personnel.• Briefed all inbound military, civilians, contractors and volunteer personnel on OPSEC, authorized IS usage, data protection, and HIPAA legal and regulatory requirements for protecting patient data.• Distributed workload to SGSI (Systems) staff utilizing Remedy; efficiently resolved trouble tickets and processed IA request.• Review retina scans of medical systems; applied software patches and updates to remediate IS vulnerabilities.

• Lead Network Enterprise Center (NEC) representative for JPC; communicated and facilitated NetOps and IT support.• Administered the JPC security domain; added, removed, and modified users, computers, security groups, and mailboxes.• Migrated workstations from Microsoft Windows XP to Windows 7; drafted and executed a data migration plan to move over 15yrs of data, transitioned 150+ users’ workstation data.

• Provided staff and users with technical assistance in solving computer related problems, such as malfunctions, program problems, hardware and software compatibility and modifications, and all other Information Technology related issues.• Maintained a Remedy account to tracking all work-order entry, progress, statuses, and closures. Managed building access, 4 communication rooms, over 600+ workstations/VOIP phones, and 550+ users.• Tested, maintained and monitored computer programs and information systems, to include coordinating the installations of computer programs and systems. Analyzed data processing or computation needs to plan and design computer systems, using structured analysis, and data modeling and informational engineering techniques.• Trained staff and users to work with computer systems and programs based on the troubleshooting methodology; gathering information, identifying the problem, analyzing gathered information, develop a solution, implement the solution, record actions and solution. • Reviewed manuals and technical reports and documentation to learn how to develop programs and engineer systems that meet executive, staff, and users requirements. Researched new information systems and the compatibility with current programs and hardware, to recommend new computer systems to improve the work flow.• Determined and maintained classification on all information systems, managed access control to facilities and systems, and ensured only authorized users can gain access to computer systems, applications and network resources such as the intranet and internet.• Coordinated with supervisors and security managers to determine the required access allowed to all employees based on their need-to-know, and clearance before granting them proper access to DOD facilities, SCIFs, and other classified sections within the organization.