N. Takam Email & Phone Number

* Supported of FedRAMP activities for cloud hosted systems such as eMASS Package (ex: Readiness Assessment Report (RAR), System Security Plan (SSP), Plan of actions & Milestones (POA&M), etc. Review, Audit, and validate compliance of DCSA systems Secure Cloud Computing Architecture (SCCA) to ensure cloud systems connections to the Boundary CAP (BCAP) and Virtual Datacenter Security Stack (VDSS) are implemented in accordance with the cloud Security Requirements Guide (SRG) including support for the internal implementation of the Visual Data Management System (VDMS) solutions internally. * Performed periodic cyber security control assessments of IT cloud systems, identify potential risks and gaps, and make recommendations and implement cloud security improvements based on industry standards and best practices.* Performed Cyber Security Impact Assessments and Risk Assessments for new and existing cloud systems, determine security posture and viability for organizational use, and make recommendations for cloud security architectures and controls.* Provided support for the internal Information Security Continuous Monitoring Program for authorization to operate and ongoing authorization approvals for cloud-based IT systems.Experience working with Third Party Assessment Organizations (3PAO)Participation with the DISA Cloud Joint Verification Team (JVT) Team * Assisted the Product Managers (PMs) and/or Program Management Office (PMO) with cyber security audits and assessments of cloud systems including programmatic reviews and management of corrective action plans.* Participated in reviews of Information System Agreement (ISA) / Memorandum of Agreement (MOA), Whitelisting, etc.* Worked with the solution engineers to identify best practices and methods required by the FedRAMP PMO to configure and operate within the NIST SP 800 series of controls.* Assisted with non-cloud systems authorization efforts utilizing the Risk Management Framework (RMF).

• Developed, analyzed and maintained monitoring and logging systems for client’s cloud security enhancements using AWS CloudWatch and AWS CloudTrail, remediating 50+ known vulnerabilities, and configuring 30+ CloudWatch Alarms, resulting in a 70% decrease in high-risk vulnerabilities. Configured AWS SNS to fan-out alarms notifications. • Configured AWS Config rules and Security hub to provide a comprehensive view of client’s security state within AWS, and ensured compliance with best security practices: AWS Well-Architected, CIS Benchmarks and NIST SP 800-53 security controls.• Developed several AWS Cloud-based applications for a variety of business needs, using AWS Console, automation with Terraform, Yaml and Python scripts, and deployed them using DevSecOps CI/CD pipelines with Azure DevOps, Gitlab or AWS CodePipeline depending on client’s technology stack. • Authored run-books for security activities and documentation for processes implemented by my team with various clients.• Collaborated with development and operations teams to embed SAST, DAST, IAC tools, and automate security testing and vulnerability scanning into the DevOps process, following DevSecOps best practices.• Performed code reviews on Terraform scripts written by developers, and ensured best practices were followed.• Set up and maintained security monitoring tools in AWS cloud environment.

Postgraduate Degree, Cybersecurity

Mathematics And Computer Sciences

• Acquired tools for analytical techniques and thinking to solve complex problems in technology fields. Received a solid foundation.