An Information Security and Technology Innovation Working Group

Responsible for conducting a comprehensive assessment of the management, operational, and technical security controls employed within or inherited by an IS to determine the overall effectiveness of the controls (i.e., the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system). Able to evaluate the severity of weaknesses or deficiencies discovered in the IS and its operation environment and recommend corrective actions to address identified vulnerabilities. Possessing granular knowledge of information technology concepts used in evaluating security performance and integrity of state-of-the-art applications, communications systems, hardware, software, satellite control systems, and information processing systems.-Ensuring security assessments are completed and results documented and prepare the Security Assessment Report (SAR) for the Authorization boundary.-Perform interviews, examinations, and testing of security controls using various NIST publications.- Initiate a Plan of Action and Milestones (POA&M) with identified weaknesses for each Authorization Boundaries assessed, based on findings and recommendations from the SAR-Advising the Government concerning the impact levels for Confidentiality, Integrity, and Availability of the information on a system.-Practical experience utilizing risk management strategies for information technology solutions. Analyzes and defines security requirements for applications and systems across all technology layers.-Verify that application software, network, and system security postures are implemented as stated, document deviations, and recommend required actions to correct those deviations- Plan, execute, and report on information technology, privacy, and operational reviews to identify mission, privacy, security, compliance, information technology, and regulatory risks

Work with clients to solve complex problems and provide advanced solutions as Network and Information Security Consultant.-Acting network architect, providing comprehensive engineering life cycle process per request.Established process for procurement, installation, hardening, decommissioning, and destruction lifecycle for customer with a large and complex network consisting of over 4,500 nodes, all in a secure environment. -Provided subject matter expert resources to support security and transport audit of large out-of-band management network for design completeness and security control implementations.- Utilized expertise as Network Architect to assist mission partner in drafting contract proposals and engineering responses for potential IT contracts, consisting of a complex arrangement of network and security devices.-Served as Wireless Engineer to provide predictive wireless network survey evaluating 200+ access points, building design plans, and analyzing and measuring decibel loss throughout the environment, providing the best solution possible. -Addressed design and security requirements, including procuring all equipment, WAN links, compute, and storage, down to wired and wireless edge devices. -Oversaw security by design addressing secure data in transit and at rest and implementing of device security baseline configuration tailoring.

Gathered customer requirements, provided direct access to solutions, and defined new standards. Served as onsite EAST manager to a staff of 17 personnel. Engineered, audited, and tested end-to-end solutions and reviewed root-cause analysis reports. Worked closely with vendors to complete and validate hardware, software, and configuration validity. Handled job requirements fulfillment and business unit notifications regarding interviews, performance reviews, onboarding, and offboarding. -My team was resourced to perform continuous self-audit tasks, ensuring mandated NIST and DISA STIG frameworks controls were established and adhered to, passing all audits.-Team Lead for external communications interfaces (ECI) improvement project, revised technical security policy, premise device and transport ECI device hardening with industry compliance best practices. -As a member of the agency engineering review board (ERB), authored detailed technical engineering orders and network configurations and reviewed designs with team, a focused full lifecycle engineering process. -Worked directly with WWT business development teammates to pursue new contract and personnel opportunities. - Held role on agency ERB, authored detailed engineering orders and network configurations, and reviewed designs. - Engineered toward innovative progression taking computer networks to the next level, gathered customer requirements, and tested and implemented solutions, end to end. - Worked closely with vendors to complete and validate hardware, software, and configuration validity.

- Configured testing network real-time performance monitoring (RPM)(IPSLA) feature, allowing network operators and customers to measure performance between two network endpoints, configure and send probes to specified target, and monitor results to determine packet loss, round-trip time, and jitter.

Performed advanced level troubleshooting on Multi-Protocol Label Switched (MPLS) network, utilizing in-depth knowledge of Label Distribution Protocol (LDP), Label Switched Paths (LSPs), and layer 3 VPN's, multi-protocol BGP. - Led engineering analysis and testing mandate for the Department of Defense (DOD) Internet Protocol Version Six (IPv6) Interoperability Program.- Designed, diagnosed. and resolved issues with Open Shortest Path First (OSPF), Internal Border Gateway Protocol (IBGP), and External Border Gateway Protocol (EBGP) and other protocols. - Power user for vendor proprietary management software JunoSpace and CiscoWorks and non-proprietary management software to include HPNA.- Worked problem reports, assessed engineering orders, and implemented and wrote assigned engineering orders. - One of six engineers assigned to WAN Engineering Review Board (WAN ERB) to provide constructive and objective thoughts to engineering designs effecting WAN, providing a pass no-pass vote. - Provided ISP WAN Network connectivity and end-to-end testing, including front work, software and hardware capabilities testing with both current and new feature sets. - Transformed requirements into operational, viable, and sustainable solutions and gave non-bias feedback with real-world expectations, exceptions, and possibilities. - Coordinated and provided Tier 1-3 level of support with other administrators to address potential O&S system issues, proactively keeping all systems operational.- Resolved Technical Action Cases (TACs) related to hardware, software issues, and worked problem reports (PR), and assessed, authored, and implemented assigned engineering orders.

- Assigned to WAN Services Team- engineering and configuring Juniper and Cisco routers, EX switches, and multilayer router/switches. - Proficient in many types of routing protocols used IGP's and EGP, COS, Policy, L2VPN's, L3VPN's and all system configurations. - Facilitated WAN improvement, design, and implementation, including circuit provisioning and equipment purchasing, resulting in cumulative uptime of 99.9%. - Lead Engineer for IPv6 interoperability, responsible for engineering design and implementation for IPv6 LAN/WAN, showing IPv6 traffic transported successfully over NGA's operational network and external peers.

- Supported 24/7 Management Center (Network Operations Center), SIPR, SCI and SBU networks.- Configured, installed, and maintained ATM/Ethernet LAN/WAN switches (FORE ASX 4000/1200/1000/200BX /LE-155 Marconi BXR 4800,5000 and 1000) and Cisco Switches (Catalyst 6500's, 3500's, 2X, 3X, 7X, Juniper M/J series and Foundry/Brocade devices. - Participated and managed projects for switch OS installs, configurations, code upgrades, NSAP changes, PNNI routes, IP restructuring and subnetting, traffic management, route determination for (PVC/SPVC/PVP/SPVPC) static and dynamic DTL's VLAN, LANE, LEC and LECS implementations.- Performed implementation and troubleshooting for Layer 2, Layer 3 and Layer 4 switching and routing, frame types, Unicast, Multicast and Broadcast functions. - Configured, installed, and performed maintenance on various Crypto equipment, including Fastlane KG-75 and the KG-95. - Installed and repaired logical and hardware aspects of WAN and LAN connectivity and traffic management sustained and issues corrected promptly on NGA's large ATM backbone. - Project lead for several special projects, with emphasis on engineering designs and implementation, providing positive feedback to the customer. - Team Lead for six personnel, designing and implementing network security solution following DOD regulations, including AAA implementation and Ciscoworks with over 30 servers (unclassified and classified networks with centralized accounting logging with various user permissions). - Project lead for engineering solutions for mission-critical Point to Point, multipoint circuits and new site design and implementations, as well as Data Center design, migrations, and manageability. - Worked with service providers and internal groups to establish connectivity.

- National Imagery and Mapping Agency Managed 24/7 NIMA Network Management Center, monitored classified and unclassified networks, provided traffic management, monitored HP Open-view, and configured VLANS and ELANS on various Marconi NSX-9500/Fore-System ES-3810 Switches. - Configured ATM LANE and troubleshot various CISCO Router, cut and clamp Coaxial, Fiber Media, and copper connections. - Reloaded, reset, and re-keyed various KG’s as needed, detected and corrected signal loss between connected devices, maintained Master Station Log of events throughout shift, and applied network troubleshooting expertise within the customers ATM network.