Scott Smith Email & Phone Number

CT&E, ST&E, C&A/IA, and system engineering/configuration for information systems

IA/C&A for SPAWAR Systems Center Pacific supporting NAVFAC AT/FP

Information Systems Security Engineer, based in Kettering, OH.

C&A analyst for WCI

Part of a two person Information Assurance team, acting as the lead Certification & Accreditation testing engineer for an information system that was to be utilized by the Navy Explosive Ordnance Disposal teams located in the US and overseas. In this role, responsibilities included analyzing the system to ensure compliance with applicable DoD, DoN, and Joint Service guidelines for system/application architecture, design, and operation. Technical responsibilities included conducting DISA Gold Disk scans on Windows servers, UNIX SRR scripts on Linux servers, and Oracle Database SRR scripts on Oracle database servers. Additional component testing included routers, switches, firewalls, storage area networks, and load balancers. DoDAF work products were also created to support the DITSCAP package being generated for IATC/IATT consideration.

A member of a large engineering and installation team that was tasked with building four regional data centers (RDCs), which would house Air Force Materiel Command's (AFMC) electronic communications systems - including Microsoft Exchange and Microsoft Windows Messenger (instant messaging). The RDCs would also host other information systems within a Network Operations Center (NOC). These RDCs would house mission-essential and mission-critical applications for the Command. A total of 16 different sites would be supported by the 4 RDCs. Primary focus was to serve as the senior subject matter expert for certification and accreditation of the overall project; several DITSCAP packages were created and submitted for review (Microsoft Exchange and Windows Messenger, Regional Data Center, Microsoft Active Directory Upgrade to Server 2003). To further understand the overall project and the level of effort involved, I volunteered to take on additional duties - including "racking and stacking" equipment, assisting with email migration activities at various AFMC bases, and acting as the lead Blackberry Enterprise Server (BES) administrator.

Acted as a contributor to an application project that would automatically provision network and application access for employees based on the assigned job role. The focus of this effort was to identify risks associated with the effort by acting as a liaison between the Information Security Department and network engineering staff. As the project moved into later phases of development and testing, the duties shifted to an enterprise information risk management role - identifying the risks to the organization (and its information) as a result of workstation and server configuration, worm and virus activity, as well as end user behavior characteristics. Created a cross-functional team ("Security Compliance Team") responsible for ensuring business unit compliance with corporate security policies. Based on reports and tests conducted, analysis was performed to determine whether or not the identified finding was due to a configuration issue, business need, or other factor that would need to be addressed prior to any audits being performed by the Corporate Information Security Department.

Master'S, Information Assurance

Master of Science, Information Assurance Capitol College Class of 2011 GPA: 4.0

Post Graduate; Master Of Science, Information Assurance

Completed Master of Science, Information Assurance

B.S, Management And Marketing

Bachelor of Science, Management