Steve Boddy Email & Phone Number

Chantilly, Va, Us

•Industry consultant and leading manager for the Federal Risk Assessment Management Program (FedRAMP) certification and accreditation process on the Department of State's Global Talent Management Applicant Tracking System for Avature. Design and implement automation for partner trust, assurance, compliance, and regulatory activities. Oversee security controls, risk assessment frameworks, policy development, and compliance programs. Evaluate risks and develop security standards, procedures, guidelines, and policies for information and data governance in collaboration with the business areas.•Develop reporting metrics, dashboards, and evidence artifacts demonstrating FedRAMP security risks. Create, optimize, and support cross-functional working groups and projects to enhance the efficacy and effectiveness of policy and guidance across the organization. Document and report assurance failures, inconsistencies, and gaps to stakeholders. Integrate Governance, Risk, and Compliance (GRC) systems with cross-functional stakeholder systems to ensure accuracy and consistency. SME for policy development and control alignment. Enterprise risk management and business continuity leader to keep essential functions up and running during a disaster and to recover with as little downtime as possible.

New York, New York, Us

•Act as the FedRAMP compliance SME, advising cross-functional teams, and ensuring alignment with NIST SP 800-53 Rev. 5 and NIST SP 800-37 frameworks. Guide technical teams on meeting relevant compliance requirements and updating necessary documentation. Manage internal and external FedRAMP audit activities, act as the liaison between auditors and internal stakeholders, assist with evidence collection and interviews, and oversee artifact creation and submission.•Support the ConMon initiative by performing ongoing assessments, tracking POA&Ms, and generating required reports for significant change requests (SCR), vulnerability management and system status. Maintain all FedRAMP documentation including policies, procedures, SSP, Security Assessment Reports and other required deliverables for security compliance. Facilitate cross-team discussions to ensure compliance with security impact levels as defined by FIPS 199 and FIPS 200.•Write SOPs, incident response plans, disaster recovery plans, and contingency plans for FedRAMP compliance. Work with internal teams to ensure accurate, detailed documentation of compliance efforts. Conduct gap assessments, identify risks, and develop remediation strategies. Ensure continuous alignment with FedRAMP, DoD, FISMA, and other applicable regulations, conducting thorough reviews to address system vulnerabilities and risks.•Oversee vulnerability assessments, analyze infrastructure, data flows, access controls, encryption methods, and security frameworks to ensure alignment with FedRAMP and public sector security control baselines. Provide mentorship to team members, assisting in the development of skills related to FedRAMP, NIST compliance, and cloud security controls. Facilitate the public sector compliance processes, ensuring artifacts and evidence are managed to FedRAMP standards. Manage relationships with third-party assessment organizations (3PAOs) and coordinate external audits and assessments for compliance.

Herndon, Va, Us

•Create customized training courses for Security University, www.securityuniversity.net. Courses are designed to provide the lab and classroom experience in order to fulfill the National Security Agency (NSA) and Committee on National Security Systems (CNSSI) 4011, 4012, 4013A, 4015, 4016A educational requirements to become a Navy Qualified Validator (NQV) Level I, II and III. These courses provide the cyber workforce with an overview of a methodology for managing risk within the Risk Management Framework (RMF). The RMF was developed by the National Institute for Standards and Technology (NIST) to standardize IT risk management.•Courses expose learners to a comprehensive examination of the RMF with selection and specification of security controls for an information system. Management of organizational risk is a key element in the organization's information security program and provides an effective framework for selecting the appropriate security controls for an information system.•Other topics covered in the course include: maintaining compliance with FISMA, guidance on OMB Exhibit 300, NIST Special Publications, FIPS, Certification and Accreditation, Platform IT (PIT) and more. Learners acquire hands-on experience using common port scanning, packet sniffing and penetration testing tools such as Nessus, Wireshark, Nmap and other tools in the Kali Linux toolbox. The course also includes labs to gain mastery of eMASS, HBSS, ACAS and dashboard management for CYBERSAFE.

Arlington, Virginia, Us

•Responsible for the implementation and management of Quality Management System (QMS) and Information Security Management System (ISMS) for the company’s technology solutions business. Ensure that the QMS and ISMS processes are established, implemented, and maintained in accordance with corporate policies and ISO 9001 and ISO 27001 standards. Champion for quality management and information security management principles and compliance.•Responsible for maintaining the QMS, ISMS, and associated ISO certification. Serve as the point of contact for the ISO certification body (registrar). Work collaboratively with all team members to collect Quality Management System (QMS) and Information Security Management System (ISMS) input, update existing process, procedures, work instruction and guidance documentation.•Execute company quality management plan as it relates to ISO internal audits, management reviews, and risk assessments. Serve as the Management Representative, as well as develop, maintain and facilitate the management review process. Oversee and monitor continuous improvement opportunities for the QMS and ISMS.•Develop auditing plans and oversees internal audits conducted to support the QMS and ISMS. Advise senior management on a periodic basis on the overall health of the QMS and ISMS, identifying critical issues and continuous improvement opportunities. Collaborate with personnel in customer account management roles to ensure that the business identifies and documents customer requirements for quality and information security.

Arlington, Virginia, Us

•Administer the security and privacy requirements for the Cloud.gov platform as a service (PasS) hosting for the Head Start Enterprise System (HSES). Provide continuous monitoring activities for high value enterprise systems at the Department of Health and Human Services (HHS). Manage platform security aspects of the underlying network to give HSES customers a virtually isolated network environment.•Establish strategic program goals geared towards deploying threat management and information protection capabilities and standards, strengthening the cyber security workforce, and increasing stakeholder engagement. Provide secure solutions and enterprise services to programs across HHS.

Washington, Dc, Us

•Cyber Security Program Manager at the Small Business Administration (SBA) Headquarters. Led day-to-day contract requirements with a team of seven Information System and Security Officers (ISSO). Aligned the Office of Chief Information Officer with cyber security cross-woven into dynamic changes in policy based on the priority of the cyber threat landscape for 40 major and General Service Systems (GSS) level systems valued at over $70 million.•Spearheaded an ambitious plan to migrate into Windows 10, Azure, Office 365, OneDrive and SharePoint. The SBA will become the first government agency to complete this modernization. Organized pilot projects for incremental modernization. Built the security plan and identifying solutions for risks to increase mission performance without compromising security. Offered a comprehensive suite of risk management framework services designed to protect enterprise-level networks by pre-empting cyber security threats and providing solutions to cyber security challenges. Created dashboards, heat maps, risk vulnerability comparisons and risk analysis stoplights to compare risks based upon likelihood and impact.•Managed change requests to bring locally hosted systems into FedRAMP certified cloud-based systems hosted on Amazon Web Services, Salesforce, Datapipe and Azure. Assessed the impact of changes to cost, performance and schedule for seven systems joining http://www.certify.sba.gov and seven other cloud-based systems. Prepared project status reports and financial reporting in support of FISMA, local audits and congressional information requests. Created and delivered presentations containing risk profiles and solutions plans with scheduled implementation rollouts to senior management at SBA on project goals and plans, progress reporting, updates, milestones and risk-based metrics. Organized and facilitated project planning, create charters and minutes for security status meetings, program reviews, and software release planning.

Reston, Virginia, Us

•Principal oversight of Naval Facilities Engineering Command (NAVFAC) Risk Management Framework Security Control Assessor (RMFSCA) Support at CI06. Provided CYBERSAFE, DIACAP & RMF support to systems currently accredited in the NAVFAC systems of record (SOR). Updated and communicated information systems security requirement compliance using HBSS, ACAS and eMASS. Provided technical input for DoD and IA related data calls for compliance or status verifications. Produced system and configuration documentation required for C&A and A&A of enterprise enclaves. Developed structured models, inventory baselines, assessment SOPs and other artifacts in support of Mission Assurance (MA).•Led teams of Navy Qualified Validators (NQV) for security control assessment, RMF implementation, ashore ICS C&A process standardization and technical risk assessment, certification determination and other RMF CYBERSAFE lifecycle processes. Addressed project specific issues or risks, including: delays to sprint deadlines, deliverable or milestone delays and mitigating risks.•Provided reports of the findings for existing systems that are used to measure performance against service level agreements (SLAs). Coordinated the update, tracking and communication of Plan of Action and Milestones (POA&Ms). Produced documentation, reports and maintained project schedules required to achieve or sustain IATT/IATO/ATO for supported systems. Provided briefings and reporting metrics to customer to meet contractual requirements via in progress reviews, Executive Steering Group (ESG) and CYBERSAFE Working Group (WG) meetings and monthly reporting.

Washington, Dc, Us

•Plank owner at the new Security Exchange Commission (SEC) headquarters office in the CyberWatch Office with the Technology Control Program (TCP), Office of Information Technology (OIT). First responder to disruptions, intrusions and compliance events regulated by Systems Compliance and Integrity (Reg SCI), 17 CFR Parts 240, 242, and 249. Integrated multiple data feeds of external data sources to evaluate risks to threat management, policy, audit/assessment, compliance and self-reporting. Analyzed reports from commercial and government cyber intelligence feeds into the platform. Teamed with security SMEs to develop dashboards that produced key information for executive and leadership reporting for just-in-time decision making.•Worked with teams to harvest information from key security metrics in order to produce real-time trending and analytics. Produced reports on demand using a combination of cyber and financial data for stakeholders including security resources and senior leadership. Engaged with the customer to implement ratings, risk rankings, and prioritization from both internal and external sources. Coordinated audit teams to validate security findings to maximize the security posture of all forward facing systems. Collaborated with external vendors to enhance performance of the global delivery of complex data for world markets on enterprise-level systems.•Led teams and influenced decisions to mitigate risks. Encouraged best practices from entities to bring SEC to the forefront of cyber security on the global financial market. Implemented security objectives with state-of-the art tools that maintained security mappings exceeding NIST, PCI-DSS, COBIT and ISO standards.

Washington, D.C., Us

•Applied all government mandated security standards incorporating private sector industry best practices to General Services Administration's most progressive open source platform developed within an agile DevOps environment. Maintained the assessment and authorization of the Common Services Platform enterprise system, a cloud-based Platform as a Service system launched in FY2015.•Developed and deployed a long list of the most modern open source COTS vendor-supported third party applications including ForgeRock OpenAM, IBM Security Identity Manager, Chef, Docker, GitHub, Jellyfish, Logstash, Kibana and others. Maintained all security requirements and the security posture of the GSA enterprise systems hosted on Amazon Web Services (AWS) using new updates to policies and guides for information systems security, security plans, continuous monitoring, briefings, vulnerability scans and security documentation in alignment with NIST, FICAM and FedRAMP standards.•Led small teams of government and contractors running agile projects with WBS and project planning in MS Project. Used JIRA and Confluence to organize and execute epics, features and user stories. Developed all FedRAMP and NIST security documentation including boundary diagrams, architectural frameworks, System Security Plans, AWS service level agreements and other artifacts in support of the hosting requirements.•Provided program and project management support in the following areas: risk management, integrated schedule management, performance metrics, document management, and change management. Supported the facilitation of effective governance, cross-project integration, performance monitoring and the implementation of agile security processes.•Guided self-forming teams that executed work in progress. Integrated their input to manage user stories for the best estimation of time to completion and planning upcoming work in future sprints. Executed innovation and creativity when problem solving.

Washington, Dc, Us

•Consultant to Federal Emergency Management Agency. Executed a wide portfolio of technical assessment services associated with A&A, cyber security control assessments, accreditation package development and all other services required for final accreditation for FEMA’s IT Resiliency effort.•Conducted vulnerability scans using approved automated security tools to build security plans. Captured IS hardware and software inventories, identified and verified host names and internet protocol address domains. Mapped assets to verify accreditation boundaries, and developed network architecture diagrams.•Worked closely with internal and external clients in order to maintain cyber awareness for all systems. Initiated the re-accreditation process and maintained documentation for enterprise-level systems throughout all stages of the system life cycle, including anti-virus/anti-malware administration services, operations and maintenance (O&M). Performed risk mitigation by employing Plan of Action and Milestones (POA&Ms), and maintained the IA posture and all requirements for a comprehensive service delivery.•Created ATOs for multiple enterprise systems preparing to enter virtualized hosted systems in an Infrastructure as a Service (IaaS) environment. Created Personal Identification Validation (PIV) compliant login solutions using Passlogix. Provided risk mitigation analysis to threats and compiled POA&Ms for open vulnerabilities. Configured intrusion detection systems (IDS) and security event and incident monitoring systems (SIEM).•Explored Agile methods to overcome new risks created by enterprise-level IA system interoperability changes. Led teams to have a maximum focus on events leading up to full rate production at most competitive cost.

Bethesda, Md, Us

•Lockheed Martin Cybersecurity Manager supporting Joint Personnel Recovery Agency (JPRA) Communications Directorate (J6). Worked closely with internal and external clients on NIPRNet, SIPRNet, and JWICS systems for all classification levels up to Top Secret (TS) through all stages of the risk management life cycle. Managed teams that performed anti-virus/anti-malware administration services, Host Based Security Systems (HBSS), Assured Compliance Assessment Solution (ACAS), COTS-based application management, security operations and maintenance (O&M), configuration/change management, data cleansing. Evaluated customer needs in continuous improvement cycles. Performed comprehensive requirements analysis including root cause analysis for a comprehensive service delivery process.•As Deputy Project Manager, successfully executed a complex recovery plan in order to bring JPRA back to a stable baseline. Performed root cause analysis, integrated master schedule planning, resource/schedule alignment, mind mapping, RACI charting, and a variety of other best practice activities exercised from the Project Management Institute©, Project Management Body of Knowledge (PMBOK 5®).

Silver Spring, Maryland, Us

•Provided information assurance expertise to the Information Assurance Manager supporting the Military Health Systems (MHS) of the newly created Defense Health Agency (DHA), Infrastructure and Operations Department in order to ensure the confidentiality, integrity, and availability of information systems that carry PII and PHI sensitive information.•In 2014, our major operational goal was to work with DHA, SPAWAR, and DISA to institute Host Based Security Systems (HBSS), Assured Compliance Assessment Solution (ACAS), Enterprise Mission Assurance Support Service (eMASS), Encase and Splunk. These changes propelled DHA to the forefront of Federal agencies into the risk management framework (RMF). Current work supporting this initiative included: construction of HBSS technical architecture diagrams and procedural requirements with defined resource requirements and creation and distribution of an HBSS Order that codified the Command & Control structures.•Managed all information assurance requirements of the following enterprise-level MHS networks: MHS Intranet (MHSi), MHS Virtualization (MHSV), Network Management System (NMS), Network Protection Suite (NPS) 1.3 & 2.1, Network Security Operations Center (NSOC), Enterprise Blade Service (EBS), Application Virtualization Hosting Environment (AVHE), and System Virtualization Hosting Environment (SVHE) and connections to Veterans Administration networks.

•Supported Military Health System centrally managed Clinical, Resources, Logistics, and Executive Information and Decision Support, and Theater systems. Maintained information assurance packages in accordance with DIACAP standards. Designed the development of critical operations issues and integrated evaluation framework (IEF) for operational testing.•Integrated risk management approaches that communicated and managed Information System Security Officer (ISSO) as a Service, Identity, Credential and Access Management (ICAM) technical risks across the Agile development iterations and parallel releases. Fostered active collaboration across teams, enterprise architects, and stakeholder communities. The risk management approach was based on both Government and industry standards and best practices. Identified future ICAM Program risks and mitigation strategies. Provided support to the Risk Management Program processes and tools.•Assisted with writing POA&Ms and providing layer of security for software vulnerabilities. Interpret monitoring results and identify false positives produced from COTS software scanning tools including, App Detective, Web Inspect, eEye Retina, Fortify, McAfee ePolicy Orchestrator (ePO) and other tools.•Led security engineering teams to document system security posture using eMASS, Trend Analysis Database and other repository query tools. Developed customized security artifacts such as CONOPS, System Security Plans, hardware and software lists, and network topology diagrams throughout the product life cycle from cradle to grave.•Consultant in the development of system and security designs. Construct briefings for Milestone Decision Authorities, DSAWG, and Engineering Control Boards. Executive IA support team member to the engineering support team.

•Capture Manager for five multi-million contracts and task orders to DISA, NAVSEA, SPAWAR PMO 142, Dept. of Education, and DIA for a total value of over $70M over a 20-month period. Managed all business aspects of three 5-year FFP contracts valued at $59.5M. “Exceptional” CPARS.•Directed enterprise-wide strategic systems planning activities at the Department of Education Office of the Chief Information Officer and Defense Information System Agency (DISA) PEO-MA/IA2 programs. SME for all matters relating to certification and accreditation. Led teams responsible for the development of analytical tools and methods for complex problem solving. Provided risk strategies to maintain DIACAP compliance within budget.•Provided Computer Security Awareness Training (CSAT). Maintained, coordinated, and conducted the Security Awareness Outreach (SAO) training activities on a monthly basis including the administration and reporting of the security training as well as the development, coordination, and management. Reviewed and developed CSAT training content and CSAT mailbox oversight. Conducted role-based training for personnel designated as privileged users and executive level information security awareness training specifically focused for SES and Flag level with incremental learning activities based on Agile methodologies.•Provided oversight, planning, and support activities to the Joint Information Management System (JIMS), Global NetOps Information Security Environment (GNISE) and Defense Industrial Base Network (DIBNet) for enterprise data center consolidation into facilities hosted by JITC, Defense Enterprise Computing Center, and Rapid Access Computing Environment.•Pioneered the development of a non-disruptive method for continuous visibility between multiple network vulnerabilities using a sophisticated out of band (OOB) network connection.

•Short-term security consultant and business developer specializing in SPAWAR contracts under SeaPort-e (SeaPort-enhanced). Led Red Team/White Glove to compete for $240M Cyber Warfare Defense Command GENSER Contract (N66001-09-R-0079).•Pioneered a series of changes that successfully integrated the best practices of Carnegie Mellon Software Engineering Institute Capability Maturity Model Integration (CMMI) Model/framework to increase efficiency and win rates into business development. Best practices included two representations of business cases: staged and continuous. The method was widely adopted throughout the company with similar outstanding win results. Focus goals were tailored to produce quality products, on schedule, within budget with significant cost benefits every time they were used compared to the competition. •Classification Code: A -- Research & Development•NAICS Code: 541 -- Professional, Scientific, and Technical Services/541330 -- Engineering Services

Mclean, Virginia, Us

•Sole support to the Information Assurance (IA) Technical Authority and Technical Process Owner for SPAWAR 5.0.2 (Office of the Chief Engineer).•Coordinated enterprise-level network planning and IA technical reviews for ACAT Level I – IV programs including AMF JTRS, NTCSS, N-GEN, CANES, ISNS, ADNS, MOC, Link-16, GCCS-M, Navy-ERP, DCGS-N, and other non-ACAT programs.•Implemented C&A processes to provide guidance to Fleet authorities using Agile techniques with Kanban boards to improve IA best practices. Many successful portions of IA programs were modified and implemented in subordinate regions to develop robust solutions to complex technical challenges.•Expert level understanding of all Tier II Echelons organizational priorities, policies, and procedures. Provided IT-centric development services.•SME for the Integrated Defense Acquisition, Technology, and Logistics Life Cycle Management System, a complex acquisition process that lasts up to a decade for program costs in excess of $340M. Reviewed and assessed the feasibility of IA-related products throughout all milestones. Implemented beneficial changes to IA projects that reduced impacts on cost, performance, and schedule IAW DoD 5000 and 8500 series.•Supported technical area experts at SPAWAR System Center (SSC) San Diego, PEO SPACE, PEO JTRS, and PEO C4I by reviewing C4I related programs across system commands.•Identified, vetted, and mitigated risks to cost, schedule and performance in view of currently established policies, standards, and processes.•Explored methods to overcome new risks created by enterprise-level IA system interoperability changes.•Led teams to have a maximum focus on events leading up to full rate production at most competitive cost using ASN RDA Systems Engineering Technical Review process, IATS, DOORS, SPIDER, Naval Systems Engineering Resource Center risk exchange tool, Visio, Project, OneNote, InfoPath, SharePoint, Wiki, and other web-based software collaboration tools.

Mclean, Virginia, Us

•Analyzed multi-million dollar business capture opportunities. Wrote executive-level summaries that cross-matched customer needs to internal organizational manpower resources in a "best fit" approach. Minimized manpower fees to maximize opportunities for winning bids at cost competitive pricing.•Developed execution of marketing strategies for targeted opportunities. Introduced a series of changes that successfully integrated the best practices of Carnegie Mellon Software Engineering Institute Capability Maturity Model Integration (CMMI) Model/framework to increase efficiency and win rates into business development. After executive level buy in, the methods were widely adopted throughout the company with outstanding win results as predicted by the forecasted outcomes. European lean models were customized for US markets that became the wireframe for best practices throughout all of the company's West Coast offices for more than 3,000 personnel. Led focus groups that increased the production of high quality products.•Successfully led teams on four occasions from the entire sequence of RFI to final orals presentation with net wins over $750M.•Team Leader for cooperative efforts between prime and sub-contractors for creating business solutions to overcome IT issues with cross-integration of C4ISR, system implementation, IA, and technical management.•Systems Specialist in developing business support opportunities for IA, cyber defense, and training.•Integrated cost efficient and practical solutions to solve complex enterprise-level network challenges.

Dallas, Tx, Us

•Senior Instructor for the Center for Information Dominance Information Assurance Manager course NEC IT-2779, and Network Security Vulnerabilities Technician course NEC IT-2880.•Facilitated computer-based training.•Extensive background in information systems course development and implementation into on-line environments. Led strawman evaluation analysis, created Instructional Design Documents (IDD), and made adjustments to migrate the IT-2779 course into the on-line learning environment. The process became the schoolhouse model to assist in the migration of four other Information Systems Technicians courses into the on-line learning environment.•Resident IA SME for the curriculum development of Network Continuum in systems security and accreditation processes, and risk analysis.•Managed up to twenty learners per course and 450 learners per year.

Falls Church, Va, Us

•Coordinated planning, implementation, and health plan security assessment for 2.7 million beneficiaries over a twenty-one state region via a five-year, US$10B managed care support contract while supporting TRICARE-Regional Office West (TRO-West).•Served as the lead authority on privacy policies and regulations on how to protect, handle, and secure Personally Identifiable Information (PII) and Sensitive but Unclassified Information (SBU). Co-chaired the Initial Agency Response Team and the Full Agency Response Team for Breach Notification. Completed the Senior Agency Official for Privacy (SAOP) section of the Federal Information Security Management Act (FISMA) report. Involved in the C&A process. Responsible for ensuring system owners complete a Privacy Impact Assessment (PIA). Monitored all agency PIAs, System of Record Notices (SORNs), and Computer Matching Agreements (CMAs). Served on the agency’s Open Government Working Group, the agency’s Cloud Computing Working Group and on the FedRamp Security Working Group. Leading FOIA contact in the Human Relations group. Developed agency policies to ensure informed consent when providing PII, to protect PII during data sharing, and to determine disclosure risk when PII is involved. Developed training materials for employees and contractors and oversee the privacy training program. Communicated TMA’s privacy policy to internal and external audiences. Lead investigator and adjudicator for privacy complaints.•Created and implemented twelve organizational policies and procedures that enhanced security for data at rest for electronic patient health information (ePHI), and physical security.•Participated in national level decision-making policy to create HIPAA's National Provider Identifier (NPI) program to integrate provider identification for medical billing.

Dallas, Tx, Us

•SME for technical aspects for installation and maintenance of hardware and software for network-based information systems. •Maintained training projects on time and within budget. Managed multiple courses that were taught simultaneously using web-based resources.•Curriculum administrator & instructor for the DoD Information Assurance Manager and Network Security and Vulnerability Technician schools.•Developed state-of-the-art training curricula with colorful visual aids to enhance training.•Set up and maintained Windows and Linux network systems in virtual machine (VM) environments with multiple simultaneous operating systems for student training.•Provided logistical support to students and instructors in Network Continuum training courses.•Installed Micro SNAP, a Windows 2000 PC server version of the Fleet’s SNAP II system at 27 sites for the Navy’s Construction Battalion (Seabees). Six sites were located OCONUS.•Developed curricula, study guides and user guides for 3-M training. Conducted 3-M classroom instruction to more than 400 Seabees ranging from system administrator, super user and user. Used MS Project and logistics software deployment tools to plan site installation dates, training, installation budgets, and deployment budgets.•Wrote detailed progress reports for each installation that was briefed to executive level. The installation metrics and lessons learned enabled a significant cost reduction per installation that resulted in over a $1M savings in the final six months of installations.

Washington, Dc, Us

•Developed and installed modernized Naval Tactical Command Support System (NTCSS) computer systems with customized lesson plans and detailed training materials. Effectively managed personnel and resources with Project and DOORS on over 14 concurrent projects with extremely sensitive installation and training deadlines.•Provided 24/7-customer support to the Fleet for database analysis and testing. Created more than 100 solutions for system and application problems that occurred with the Organizational Maintenance Management System - Next Generation (OMMS-NG) utilizing the Software Maintenance Tracking System (SMTS), a Citrix-based application.•Tested three major revisions of the optimized NTCSS Force Level cycle support for Pacific Fleet units on NTCSS and Shipboard Non-tactical Automated Data Processing II (SNAP II) systems onboard 12 Force Level ships, each costing more than US$1M for design and installation. Trained over 2,000 personnel in the updated OMMS-NG systems.•Awarded the Navy Commendation Medal for meritorious service and extraordinary contribution to the Navy in recognition of the successful worldwide installations of modernized NTCSS systems on time and on schedule.

Washington, Dc, Us

•Initiated a state-of-the-art oil spill protection system for 63 United States Navy and Coast Guard ships and submarines based out of San Diego, Coronado, and Point Loma. The system resulted in measurable decreases in oil spills. The system was copied and successfully implemented nationwide at seven other sites on the West Coast and Hawaii.•Taught over 3,000 Federal employees the First Responder Guidelines from the National Environmental Protection Act, Clean Water Act, Clean Air Act, and other Federal, State, County, and local laws and requirements for oil spill response and recovery.•Created enterprise-level database tracking systems to fetch customized reports for every accidental oil spill release in San Diego for the previous ten years from a military source. Materials, manpower, and logistical support were pre-positioned for maximum effectiveness and least cost based on analyses from the database.•Received national attention and local awards when our team produced a 15% water pollution reduction in San Diego Bay over a three-year period.•Wrote dissertation for M.S. in Environmental Management. Dissertation was based on ad hoc reviews of the results of risk analysis, cause and effect relationships, and the risk mitigation results from previous oil spills.•Awarded the Navy Commendation Medal for meritorious service and extraordinary contribution to the Navy in recognition to maintaining a safe and clean environment.

Washington, Dc, Us

•Managed all shipboard equipment maintenance onboard the USS George Philip (FFG 12), a United States Navy warship, using integrated Preventive Maintenance System (PMS) database systems. Upgraded the hardware and software of the existing legacy SNAP II system to a ported SNAP II system.•Qualified over 100 personnel in complex shipboard maintenance procedures within a ninety-day period. Won three consecutive “Battle Efficiency” and "Golden Anchor" awards. In cooperation with the South West Regional Maintenance Activity.•Saved $1.2M over a nine-month period by pre-planning or deferring maintenance at optimized time periods to match operational schedules and logistic support availabilities. Scheduled maintenance activities in close cooperation with the South West Regional Maintenance Activity.

Washington, Dc, Us

•Continuously monitored all occupational and safety activities onboard the USS Cape Cod (AD 43), a Navy supply and support tender and afloat ship IMA. A deployable Naval Industrial Activity, capabilities included a licensed Nuclear Repair Facility, foundry, electronics calibration and repair laboratory, shipfitter shop, machine shop, carpentry shop, technical library, and specialized repair shops. •Directed all safety operations and training of the1,500 person crew to increase safety posture for a myriad of industrial hazards. 50% of crew self identified as minority where English was not their first language. Training was adjusted to incorporate color codes and international symbols to enhance comprehension.•Accountable for $500M of assets and execution of a $130M annual operating and maintenance budget. Directed safety aspects of 6800 repairs to Navy ships, totaling more than 560,000 man hours. The repairs spanned the globe from Bahrain to Hawaii on a 42,000 mile voyage.•Ship won sixth consecutive Repair "R" award for repair services to 17 ships in Yokosuka, Japan, including 2 CVs, 12 combatants, and 2 auxiliary ships. More than 2,900 jobs were safely completed in 23 days.•Monitored crew to protect them from industrial hazards: radiation, lead, asbestos, ambient noise, heat, and HAZMAT.•Supported Safety Departments on 20 other combat ships with support services such as ambient noise measurement, heat stress monitoring, and laboratory testing for lead, asbestos, and safe drinking water. Assisted other ships to modernize their command policies by using templates approved by the Naval Safety Center.•In 1995, Chief of Naval Operations declared USS Cape Cod as Navy’s "safest ship." To date, no other warship this size has had a lower number of injuries on a Western Pacific cruise.

Ph.D. (Abd), Organizations And Management

M.S., Environmental Management

B.S., Physician Assistant, The George Washington University School Of Medicine And Health Sciences

B.S., Nuclear Undersea Medicine, The George Washington University School Of Medicine And Health Sciences

B.S., Technical Management

H.S., English, Mathematics, Physics, Chemistry, Biology, Geography, History, French