Patrick Holtz Email & Phone Number

Chantilly, Virginia, Us

Influential leader of teams composed of both technical and non-technical members with a firm background in organizational change management and digital modernization within a rapidly growing company, prioritizing information security strategies and goals. Trusted leader and advisor with a proven track record in building and leading world-class information security teams, building strong partnerships with key business stakeholders, and acting as a strategic mentor, providing leadership and strategy guidance as well as direction on information security related topics. Lead complex, multi-disciplinary projects from start to finish - working with stakeholders to plan requirements, manage project schedules, identify risks, and communicate clearly with cross-functional partners across the company. Coordinate across teams, time zones and hemispheres to keep deadlines and progress on track.Perform cross-functional coordination with senior leadership to facilitate decision making based upon risk and business impact. Lead at a strategic level and manage the effective use of resources, directing assigned staff to design, develop, maintain and implement highly complex IS Security related system(s) and projects supporting the enterprise or wide business area.Provide leadership in the creation of strategic technology plans, including Disaster Recovery, Incident Response, Change Management, Continuity of Operations, Continuous Monitoring, et al.Manage multiple engagements with major enterprise-wide business significance.Foster organizational transformation, implementing best practices, managing business priorities, and coordinating cross-functional initiatives.Hands-on leader with a history of working within a highly technical, global, rapidly growing organization, ensuring the organization’s information is secure and assets are protected. Develop and implement strategic information security roadmaps in alignment with strategic business and financial goals.

Chantilly, Virginia, Us

Serve as Information Assurance Manager (IAM) III level security advisor on all aspects of cybersecurity and Risk Management Framework (RMF) to ensure organizational programs meet all requirements to support the mission. Perform Independent Verification and Validation (IV&V) of cybersecurity Assessment and Authorization (A&A) packages. Identify and research vulnerabilities, perform risk analysis and recommend mitigating controls to the Chief Information Security Officer (CISO). Perform system Information Assurance Vulnerability Management (IAVM) and Security Technical Implementation Guidance (STIG) compliance audits, and provide cyberspace defense support. Provide Subject Matter Expertise to aid Program Managers in the development of Assessment and Authorization (A&A) documentation. Perform technical reviews of A&A documentation for compliance with applicable cybersecurity regulations. Assess security compliance, support program security reviews, and coordinate and compile security-related documentation. Assist with the preparation and revision of cybersecurity policy and guidance documents for specific cybersecurity related technologies. Provide critical written and oral analysis of security architecture documentation, vulnerability assessments and risk assessments. Assist in the development of plan of actions and milestones (POA&M) and tracking of milestones within POA&Ms directly related to cybersecurity requirements. Coordinate with system owners to ensure the appropriate A&A artifacts are developed to support system authorization. Provide security incident reports as required, outlining the specific security issue, critical concerns, and remediation actions required to resolve or mitigate the issue.

Led a team performing systems and networks security Assessments and Authorizations (A&A) in accordance with the Risk Management Framework (RMF).Prepared and delivered briefings to Agency executive leadership personnel.Prepared and maintained cybersecurity documentation in accordance with RMF. Prepared slides for, and led weekly cybersecurity governance meetings.Conducted Information System Security Manager (ISSM) training on the nuances of the Risk Management Framework. Led a team of cybersecurity engineers in the conduct of software and hardware Risk Assessments, ensuring proper application of Security Technical Implementation Guidance (STIGs) and Security Requirements Guides (SRGs). Assisted in the development of Agency level Business Continuity and Disaster Recovery Plans, Continuity Of Operations Plans (COOP), and Incident Response Plans.Provided leadership and mentoring for junior Information Systems Security Officers (ISSO).Maintained Agency-wide Cybersecurity Integrated Master Schedule using MS Project.Authored DoD Architecture Framework (DODAF) drawings for inclusion in cybersecurity packages.Represented the cybersecurity team at twice-weekly Agency level Configuration Control Board (CCB) meetings.

Falls Church, Virginia, Us

Perform network and systems Assessments & Authorizations (A&A). Prepare and maintain cybersecurity documentation in accordance with the Risk Management Framework (RMF) using the Enterprise Mission Assurance Support Service (eMASS). Provide IAM III expertise in the design and development of networking solutions and other capabilities enhancements. Employ software vulnerability analysis tools to aid in the secure development of production software.

Falls Church, Virginia, Us

I managed the Network Operations Security Center (NOSC) supporting 4 Global Area Networks (GAN) with thousands of users. This included managing installation of patches and upgrades to all operating systems, as well as performing system security lockdowns in support of Information Assurance (IA) requirements. I provided leadership and oversight of the Computer Network Defense (CND) team in the escalation of cybersecurity events and anomalies ensuring mitigation and eradication of risks to the enterprise. Managed and maintained a 24x7x365 watch schedule staffed by Information System (IS), Information Transport (IT), and CND professionals. Managed, maintained and optimized a help desk for administrative networks of >1000 users; provided PC support for client machines; troubleshot group policy issues; troubleshot application layer issues; installed software patches and hotfixes; maintained user accounts and provided general Windows Active Directory management. Managed network engineering professionals and responsible for: troubleshooting internetworking operating systems, switches, routers, trunks, VLANs, PVPs, PVCs, ATM. Provided IP, ACL, SNMP, router protocol, and network operations configuration and management for all networks. Maintained all this stuff: ACLs, FWs, NAT/PAT, DHCP, SMTP, PDCs, IPS/IDS, VoIP, Multicast, VMS, ACAS, WSUS, Exchange, SCCM, AD, LDAP, FS, LEAP, SQL, OCSP and more.

Falls Church, Va, Us

Operate and manage the information transport infrastructure for four Global Area Networks (GAN).Operate and manage all network information flow to include content staging and information dissemination management.Operate and manage Information Assurance (IA) and Computer Network Defense (CND) systems.Monitor network performance for four GANs, maintaining situational awareness and reacting to adverse performance.Provide management and Tier 1 and Tier 2 troubleshooting and maintenance for all routers, switches and firewall appliances.Manage the help desk supporting four operational GANs by creating trouble tickets, performing engineering analysis and coordinating with users to remediate any IS or IT problem, spanning all 7 layers of the OSI model.Develop and distribute Information Assurance/Computer Network Defense incident and status reports to the Information Systems Security Manager (ISSM) and Chief Information Security Officer (CISO).Establish and maintain a watch schedule to enable seamless, 24x7x365 network management support for four GANs.Push upgrades, patches and IAVA updates to all devices and applications and validate success.Conduct vulnerability assessments and scans and apply fixes as required.Manage and maintain security training status for all staff and ensure compliance with Information Assurance Management requirements for all personnel. Monitor and maintain the efficacy of Host-based as well as Network Intrusion Prevention systems.Develop and maintain the master Internetworking Protocol (IP) schema that provides for logical network growth.Monitor, maintain and optimize network servers, Provide Systems Administration of Microsoft Active Directory, providing group policy updates and enforcement, object & user account creation and deletion and security policy management and implementation.Develop SOPs for the various job functions within the NOSC to include Transport Management, Systems Management, IA/CND and Event Management.

Falls Church, Virginia, Us

• Served as Systems Support Branch Chief for a diverse team of professionals providing leadership and full-scale IT support.• Led a team of Systems Administrators providing expertise in Red Hat Enterprise Linux, MS Windows, and Sun Solaris operating environments across four Wide Area Networks.• Led a team of Cybersecurity professionals providing certification & accreditation, and information security and programmatic documentation for four operational networks.• Managed and implemented the application of information assurance controls and development of regulatory compliance documentation for all information systems.• Led a team of Automated Data Processing (ADP) technicians, providing on-demand desktop support to 500 on-site users, employing Windows, Linux and Solaris operating systems.• Led a team of Systems Integrators to garner requirements and ensure application of appropriate resources.• Ensured application of Security Technical Implementation Guides (STIG) and Security Requirements Guides (SRG) for all devices whether networked or stand-alone.• Managed the configuration and maintenance of host-level security tools for two wide-area networks (WAN) containing over 600 servers and 7000 workstations.• Installed, configured and troubleshot Cisco ASAs to establish VPN connectivity.• Defined enterprise hardware and software requirements.• Coordinated with stakeholders to ensure timely delivery of all IT requirements.• Forecast requirements, schedule and assign resources to enable seamless 24x7 IT support.• Defined processes and procedures to enable Information Management efficiencies.• Defined Systems Support Branch objectives and strategies.• Prepare and deliver performance reviews.• Prepared Life Cycle Management equipment purchase requirements.

Fairfax, Va, Us

• Managed and assisted in full lifecycle development of sample applications exemplifying advanced communication capabilities and submitted for Common Criteria for Information Technology Security Evaluation to obtain Evaluation Assurance Level rating. • Managed custom implementations in order to follow project specifications, timelines and budget in accordance with Capability Maturity Model Integration (CMMI) methodology.• Led analysis and high-level technical design of systems and components.• Managed the security compliance, specification, architecture, implementation and subsequent modification of new and existing software applications.• Authored data flow and entity-relationship diagrams for process modeling.• Developed proposals for enhancements to support workflow processing and worked with application and environment developers to facilitate functional design and resource management.• Researched new technologies, identifying new product opportunities as well as promotion and integration of new development tools and engineering methods.• Provided high-level analyses and design reviews to avoid duplication of efforts in solving the same application problem within different products.

Ms, Information Systems

Bachelor Of Arts, English