Charles F. Email & Phone Number

Conducts team status meetings and participates in project specific meetings to ensure readiness and determine projected completion dates. Utilize the designated tracking tools to record and report status of projects as they move thru their lifecycle. Participates in on-demand conference calls to discuss the projects and\or any security related items, ensure readiness and determine projected completion dates. Monitors through the use of designated tracking tools the status of projects as they move through the vulnerability assessment portion of the integration phase of the certification process. Monitors progress of all projects assigned to the team members from receipt of the project from the project specialist I change manager until it is passed to testing. Ensures cross team collaboration is occurring as needed during a project's lifecycle. Ensures the program manager is made aware of any deviations to scheduled completion dates as soon as the deviation is known. Participates in the creation of supporting documentation required for assigned projects such as installation guides, configuration guides, unit test plans and other documentation identified as being required. Establish packaging standards, conventions and procedures for manual and automated (silent) deployment to supported endpoints. (servers and workstations). Maintains and publishes documentation describing software packaging standards and procedures. Reviews Unit Test Plans verifying the defined functional requirements for each hardware/software update/change. Reviews Installation guides to ensure proper installation of non-silent installations. Generate monthly deliverable report. Assist with creation of 6 month self-assessment in preparation for CPAR. Performs annual evaluations for personnel in functional area. Participates in new employee interviews when required to assist in identifying replacement personnel.

INFORMATION SECURITY Assisted in the development of McAfee Endpoint Encryption (formerly SafeBoot Encryption) including writing support documentation and creation of a custom Win Tech recovery CD. Developed custom rules in Beyond Trust Privilege Manager and serve as the lead engineer on the installation and configuration of Beyond Trust Privilege Manager to deploy custom group policy settings to FDCC (Federal Desktop Core Configuration) /United States Government Configuration Baseline (USGCB) workstations. Conducted application source code scans using Ounce Security Analyst. ACTIVE DIRECTORY GROUP POLICY CONSOLIDATION. Performed the consolidation of legacy group policy settings to prepare for the migration to a new Active Directory forest. This included comparing settings from multiple group policy objects in multiple domains removing duplicate settings and make recommendations on settings which were not consistent across the forest. Deleted any group policy objects that we no longer required and deleted an unlinked group policy objects. Selected Contributions: SECURITY PATCH MANAGAMENT: Met the requirement defined by the SLA (Service Level Agreement) to have the security patches deployed by 7 calendar days from release date from the vendor. INVENTORY TOOL for MICROSOFT UPDATES (ITMU) UPGRADE: Conducted the upgrade of ITMU to allow the support of new Microsoft 0/S (Operating Systems). Integral member of team that successfully acquired ISO/IEC 20000-1:2011 certification.

ENTERPRISE PATCH MANAGEMENT SYSTEMS Developed, documented and implemented a structured security patch management process in the SMS 2003 (Systems Management Server) and SCCM 2007 via WSUS environment. Conducts reviews and staged the release of the monthly Microsoft security updates to be installed on over 45,000 XP and Windows 7 workstations and Windows 2003 servers and Windows 2008 servers including Core servers. Developed the change control process for monthly Microsoft security updates. This includes documentation that follows the Information Technology Infrastructure Library (ITIL) policies for change control. SYSTEM INTEGRATION Coordinate customization and packaging of proprietary and COTS Windows Installer Packages via direct edits, transforms and patches, ensuring compliance with International Technology Services (ITS) packaging standards. Coordinate vulnerability analysis/ remediation. Perform in-depth analysis on impact of deployed end-user environment, and generate reports on recommendations to management. Conduct security and vulnerability assessments of new hardware and software procurements. Liaise closely with vendor and agency subject-matter experts (SME) in gathering information regarding software packages and with customers in identifying requirements for change requests. Manage full life cycle of several major concurrent projects. Employ various tracking tools to record and report on progress/status of project life cycles. EVALUATE, INTEGRATE, TEST, AND DEPLOY ENTERPRISE SECURITY APPLICATIONS Serve as the lead engineer for the Bit9 Parity application. Developed and maintained the installation of both the client and server side software in the development and testing environments. Serve as the lead engineer for the BigFix Enterprise Suite. Developed and maintained the installation of client and server side software in the development and testing environments. Supported the implementation of the ITSM tool (BMC Remedy) modules.

Designed and documented deployment strategies to test and deploy patches using custom scripts to install the patches via GPO scripts, custom executables and deployment via Microsoft Software Update Service (SUS). Designed a virtual test environment for interoperability testing. Created newsflashes and end-user documentation that is sent out to 45,000 users. Developed a greater understanding of programming using scripting languages. Provide support to service desks on troubleshooting items related to security. Review vulnerability scans of the environment make recommendations for corrective actions. KEY ACCOMPLISHMENTS SECURITY PATCH MANAGAMENT: Met the requirement defined by the SLA (Service Level Agreement) to have the security patches deployed by 14 calendar days from release date from the vendor. MCAFEE NETSHIELD UPGRADE: Created SMS package to upgrade McAfee NetShield 4.5 to McAfee Virus Scan 7.1 on all servers. MDAC 2.8: Created SMS package to install MDAC 2.8 (Microsoft Data Access Components on all systems.

Managed a 5-person team providing Tier III support. Developed and documented procedures/workarounds and communicate to the appropriate support organizations via established communication vehicles. Provided Tier III support for the installation, configuration, and deployment of all deployed hardware platforms (servers and workstations), Operating Systems (Windows, Unix/Linux, Macintosh etc.) and approved software. Participated in complex IT support projects, working as a team alongside Government employees to meet critical milestones and project deadlines. Provided expertise for the support in the administration and maintenance of the infrastructure by monitoring AD replication including SYSVOL, and other services such as; DNS, DHCP, and events from Operations Manager. Provided an escalation path for problems with the enterprise Active Directory services, workstation/server environments, and infrastructure systems supported that cannot be resolved at the Tier III level. Submitted change requests as needed to support Tier IV problem resolution activities and to ensure functionality of the enterprise. Provided the necessary skill set to work directly with vendor provided experts/resources to resolve issues. Conducted preliminary QA diagnostics to test hardware and software.