Sam Suh Email & Phone Number

Arlington, Va, Us

Chantilly, Virginia, Us

• Work across Cloud Ops, Security, Development, Audit teams at NGA to design, architect and implement resilient, flexible, and scalable cloud solutions to support GEOINT Enterprise operations. Develop and design elastic, resilient and self-healing Cloud native applications and workflows. • Provide expertise in ARCYBER DCO Cyberspace Operation Enterprise system architecture, technology standards, and enterprise frameworks. • Develop a cloud security implementation plan for Cloud Security Operations Center (CSOC) by analyzing and recommending industry best practices, TTPs, and best breed cloud security tools to integrate the CSOC into the Army Enterprise.• Develop innovative solutions such as eMASS RMF reformation for AA automation to cloud security mission requirements facing the Army as it continues migration of applications to the commercial cloud environment.• Provide assessments and evaluations of SATCOM, Aerial, Terrestrial, and Mobile components of current and proposed Army Tactical Exploitation of National Capabilities (TENCAP) systems and architectures, including identification of performance, cost, and schedule risk, preparation of recommendations for consideration by PD Army TENCAP. Participated in forums with DoD/IC organizations concerning employment, acquisition, and development of SIGINT/GEOINT collection, processing exploitation and dissemination systems.• Provide tactical RF communication integrated solutions management, systems engineering and communications engineering to pursue integration of intelligence support to EW and Cyber Operations. This shall include research, development, radio architectures and future SATCOM capabilities that can be leveraged for the next generation of Army SIGINT/Cyber/EW/ISR systems. R&D efforts on AI/ML, cognitive computing and data analytics technology; discovery, evaluation, development and transition capabilities.

Chantilly, Virginia, Us

• Analyze AWS cloud security architecture artifacts and identify technical gaps and provide solution recommendation by applying the best practices and process of capturing, refining, and assisting in prioritization of requirements• Security Transformation with modernizing infrastructure, content and analytic services using cloud-enabled development tools and application to improve supporting business processes • Provide ISSOs guidance, security engineering related cross-functional security areas, capability based cloud security analysis of system security architecture, identify vulnerabilities, and suggested mitigation alternatives.• Participate in SecDevOps design, development, and IaaS, Paps, SaaS cloud implementation of information systems to ensure these systems are in compliance with required security features and safeguards supporting ICD503 and other cyber assessment requirements. • Analyze DevOps pipeline tools and process, IA policies, procedures, and requirements and provide security recommendations for the operational functionality of systems or proposed capabilities to support the development of interoperable and standard systems.• Network services engineering in support of strategic defense of network infrastructures and operations against compromise by ensuring ISs are designed, developed, and implemented with required security features and safeguards.• Support A&A process by documenting CONOPS, SSP, SCTM to get ATO• Provide cross domain system security control guidance to developer. • Provide SE&I and Analysis to implement a vision of cloud-based software applications and services that offers an interactive user experience and visualization environment, "Big Data” analytics, alerting, and modeling capabilities, and data caching of intelligence data for accessing caching, and correlating static and streaming structured and unstructured data with driving architecture to leverage advances DevOps and Continuous Delivery methodologies.

Vienna, Virginia, Us

• Provide operational excellence in the day-to-day operation of the WHCA Computer Network Defense (CND) – Incident Handling Network defense analysis support to enable seamless support to the combatant commands and warfighters across the globe• Provide in-depth CND analysis support to CND Security Operations Center, as well as plan, install, configure, maintain, operate, document all wired and wireless network security systems on the networks in accordance with DoD requirements and NIAP/NIST guidance• Provide guidance to development and operational efforts on cyber security functions, particularly those focused on strategic planning, infrastructure protection, and defensive strategy and technical assistance in the development of tactics, techniques, and procedures to protect, detect, react and recover from the advanced cyber threat• Define, review, and enforce information security policy, standards, and guidelines for mobile operations and technology implementation and analyze security gaps, compliance and risk assessments on mobile devices and application• Provide researched and analyzed recommendations and/or makes cloud security related changes to a system and documents the items properly (i.e. follows CCB process, IAVA process, SOP update/creation) that meets applicable Cloud RMF/NIST guidance

Chantilly, Va, Us

• Provide on-site technical support to the Headquarters Department of the Army (HQDA) as a Senior Cloud Computing Cyber/IA Analyst for the Army Data Center Consolidation Program (ADCCP). Support development of a three-tiered Designated Approval Authority (DAA) structure that aligns with Cloud Service Provider (CSP) environment: Infrastructure (IaaS) layer, the common services layer, and the application layer. • Support identification of Army Computer Network Defense Service Provider (CNDSP) tasks, roles, and responsibilities for Army subscribers to a commercial service provider to meet DoD and ARCYBER CNDSP mission requirements at all impact levels.• Develop Army cloud computing security strategy and architecture to support an ADCCP effort addressing on data center consolidations, establishment of scalable and standard data centers, modification and migration of approved applications, systems and data, required capabilities associated with approved Joint Information Environment (JIE) data center reference architecture, and all crucial elements of the Army’s required DC/C/GF CE end state.

• Provide System Security Engineering services on-site at the Joint Strike Fighter Program Office (JSF PO) in Arlington, VA for the development and NSA certification of JSF crypto systems and their integration into the JSF System and development of key management architecture interfacing with the Electronic Key Management System (EKMS) & Key Management Infrastructure (KMI). • Work with NSA crypto modernization office, USG representatives, F-35 design IPTs, and the aircraft support contractor to develop and implement F-35 crypto modernization requirements and participate in trade studies and design technical interchange meetings (TIMs) to understand standards and requirements of crypto modernization efforts to support the security architecture.• Support F-35 follow-on development and US & Partner Reprogramming Laboratory activities by analyzing COMSEC requirements for future development plans and enhance & maintain comprehensive crypto strategy allowing maximum flexibility to accommodate partners and future foreign military sales customers, and maintain U.S. war fighter advantage, depending on changes in requirements.

Dallas, Tx, Us

• Provide technical and analytical system engineering service to AFLCMC Cryptologic & Cyber Systems Division focusing in the areas of C4ISR, advanced SATCOM geo-location and radio frequency communication systems.• Work with AFSPC & Air Staff to support transitioning to Program of Record (POR) through Joint Capability Integration Development System (JCIDS) process including briefing & document preparation for Air Force Requirement Review Board (AFRRB) & Air Force Requirement Oversight Council (AFROC) by analyzing Key Performance Parameters (KPPs) & Key System Parameters (KSPs). • Serve as a Configuration Management Manger to oversee system engineering analysis for all project phases to include: requirements, concept, technology development, test, verification and validation, installation, operation, sustainment, engineering change proposal process and AFOSI Information Assurance Certification & Accreditation Process (IA C&A) – ICD 503 RMF. • Development of applicable technical documentations. (etc. Vulnerability & Patch Management, Configuration Management Plan, Risk Management Plan, Program Protection Plan, Program Security Classification Guide, and Program Transition Support Plan.)

Mclean, Va, Us

• Provided technical expertise in development of the System Security Capability and Data Center module for the Army Network Next 2020 Architecture.• Provided early system engineering support from identifying capability gaps and shortfalls from the AF cyber defense user requirements at the end point data protection (data at rest, data in transit, and data in use) to new development of technology prototypes through collaborating with industry, academia and other government agencies in order to achieve technology standardization and transparency of the IT sharing vision.• Development of Cloud Security Solution using modern crypto technology, products and services for the AF unclass / classified requirements. • Task lead of AF type 1/classified Data at Rest (DAR) project by conducting user requirements, AoA study, and a new technology development for database, SAN/NAS storages, and mobile computing devices using foundational, common, standard cryptographic solutions with collaborating effort with NSA, IC, and DoD.• Served as an IA liaison for the Airborne Network Integration community by infusing Cryptographic Modernization & Transformation technologies such as Multi-Level Security (MIL/MILS), Trusted Computing, Dynamic Group Keying, Miniaturized Crypto for SUAS, High Speed Crypto, Airborne LEF/HAIPE, and Secure Crypto Enterprise Management into the AF airborne network systems and platforms based on the Joint Airborne Network Services Suite IA strategy, which is in turn based on Joint and DoD GIG IA architecture.• Supported the Air Force IA domain architectural development work by providing CPSG crypto modernization/transformation, PKI, and KMI roadmap in align with NSA national crypto roadmap and strategy. • Responsible for AF CMPO Requirements Management and Risk Management Process by developing implementation guide and plan for many initiatives and projects and utilizing AF standard system engineering tools like IBM’s DOOR and Active Risk Manger.

• Supported a mission & goal of security solution for DoD & US Air Force telecommunication switch and network security deficiencies. Evaluated communications systems, subsystems, and algorithms for communication network, data links, and command and control systems such as local and wide networks, point-to-point systems, secure systems, signal coding and modulation schema, digital radio communication technology and network architecture design to determine vulnerabilities associated with systems.• Conducted DISA Information Assurance (IA) testing lead for DoD Approved Products List (APL) – DoD networking product security assessment process including technology review in-brief meeting, phase I test (Security Technical Implementation Guides (STIG)s, Telcordia Generic Requirements for Network Element / Network System (NE/NS) Security – GR-815 Review) , phase II test (IP/Telecom Penetration Testing), out-brief meeting with DoD sponsor, FSO, VCAO and vendor, proposing mitigation strategies for vulnerabilities findings, and final IA test final report to DISA.• Presented white papers on findings and engineering slides presentation in the areas of VoIP, VTC, SS7 and wireless to assist in training government personnel on new technologies and securities.• Developed AFCA VoIP security technology assessment project plan in a short and long-term goal and delivered a result of vulnerability and security assessment initial studies for the AFCA VoIP kit (V1) TDC (Theater Deployable Communications) and studied AFCA Cisco VoIP products and security issues.• Conducted a security assessment task for the Polycom VTC (Video Teleconferencing) system per the AFCA request and delivered tests result.

Monroe, La, Us

• Developed the high-level transport network architecture design (SONET, DWDM, and Optical Switch) and created project directives to change the Qwest’s nationwide optical network with minimizing implementation costs through optimally engineered network solutions to fulfill both external and internal customer satisfaction. Presented network design recommendations and technical solutions to the Leadership Team (V.P. level) to justify feasibility and obtain approval and funding. Worked with vendors to determine the technology to be used and the equipment feasibility in order to meet the company and customer requirements. Responsible for the due diligence of power, space, fiber optic feasibility to accomplish required projects.• Vendor and technology management (cost & functional integration, interoperability, strategic alignment, feasibility, life cycle analysis, facility requirements)• Transport network convergence (Optical Ethernet, RPR, OC-768 solution) and emerging technology trends studies.• Development of future IP network convergence roadmap, architect, and strategy in the four different convergence areas (Premise, Access, Network, and Service); Last-mile, NGN, IP-Enabled Service Platform.• Developing convergence strategy requirements for the new technology selection. New vendor and technology review and evaluation.• Developing strategy & migration plan for Qwest & US WEST network architectural changes.

• Development of data/voice integration and new IP telephony products/services; RFP, vendor selection and technology evaluation for NGN IP Packet Platform (Trunk/Media Gateway, Signaling Gateway and Softswitch), IP OSS, QoS, SLA, VPN, MPLS, security technology investigation, VoIP market strategies study and product development.• Deployment of NGN platform and integration into exiting network infrastructure with development of new NGN platform features (Internet Offload, Class 4 Replacement, Class 5 Replacement and API – Application Platform Interfaces).• Development of TWTC technical network requirements for the new technology selection; Industry standards research and investigation (ITU, IETF, ISC, MSF), IP Packet Platform specifications and requirements.• Development of RFP for TWTC Softswitch, responded vendor comparison matrix, and involvement in the reviewing and decision – making process.• Development of NG Packet switch Lab test plan, white papers, and technical documentations (VON, SS7/SS8, IP Packet Switching Architecture, Unisphere SMX-2100 Test Plan, Sonus GSX9200 System Application Guidelines).

London, Gb

• Development of Network Plans for the new SS7/IN/AIN/LNP/NG Network Infrastructure, AIN/LNP NGP ISCP Deployment, Accelerated Deployment of AIN ISP Deployment, NDB/LIDB Deployment, NDB/800 Deployment, IN Toll Free Service Expansion, AIN Market Expansion, PRI Expansion I & II, Second AIN ISCP Deployment, SS7 and Database Network Consolidation over IP network.• New service forecast and network capacity study and planning forecast of SS7/IN/AIN/LNP network capacity exhaustion and growth switch (Lucent 1AESS/5ESS, Nortel DMS 100/200) generics and features.• Understanding of the current network infrastructure and development of the new network infrastructure, network transition strategy and plan. Migration AIN to NGN, IP/IN Integration, CTI, VCC.• New STP and NDB/LIDB & 800 Technologies. Development of network plans for the new AIN services. Writing U S WEST Tech Pub 77432 (SS7 Interface Specification).• Vendor and technology selection through RFP process.

• SS7/IN Network Engineer – Traffic provisioning engineer for signaling link utilization monitoring and trending; CCD and TNC load balancing; link augments and network optimization. CC7 network design and engineering service to support various projects such as LNP, switch augments, switch decommission, advance intelligent switch, next generation service node switches, NEXTWAVE/Wireless, Control Networks, ACCESS/BACKBONE STP Port Expansion, International STP Port Expansion.• Control Network Engineer – Perform complex circuit design and full servicing for MCI’s various internal command and control data networks (RTR, DCR, NCS/DAP, ISN/ACD, BBDXC, WBDXC, EPL, OSSNET X.25, C3, etc.) with monitoring and analyzing network-performance data, maintaining network database files and ancillary documentation and reporting on network infrastructure and capacity utilization.• Private Network Provisioning Engineer – Perform complex private line circuit designs and multiplex channel provisioning voice and data applications, Digital Data Service, Non-ISDN Switched 56/64, Fractional T1, Non-ISDN Switched FT-1, DS3 services for large customer account projects. Interface with account teams, program management, RBOC coordination and MCI network management center to ensure on time completion of all projects.

• Analyzed customer’s business, educational, scientific and engineering problems for the application of electronic data processing systems and recommended hardware/software solutions to the customer to achieve most efficient operations and maintenance according to their needs.• Planned, designed and installed PC networks and implementation the LAN/WANs.• Provided technical supports to the customers in all facets of high-end PC inclusion system configuration, upgrade, service and hardware/software applications.• Perform new products analysis and evaluation in compatibility and adaptability of high-end PC systems.