Thomas Trombley Email & Phone Number

Results-oriented and certified DoD-APL subject matter expert with a trackrecord of success in achieving DoD certifications for Avaya products.Proven expertise in cyber security and interoperability certifications,coupled with a strong ability to collaborate with development teams toenhance software quality. Adept at creating and executing comprehensivetest plans for servers, applications, operating systems, and clients.Skilled in product software development, from Alpha trials to GeneralAvailability, with a focus on quality assurance. Highly knowledgeable inWindows Active Directory, DNS, and Certificate Authority, and well-versedin NIST policies and FIPS cryptography. Experienced in managing andcreating specialized deployment guides for high-security customers.

Listed skills include Tcp/Ip, Network Security, Voip, Firewalls, and 15 others.

• 

  Senior Consultant And Architect

  Avaya

  Sep 2005 - Present - Sierra Vista Arizona

  - Spearheaded testing and evaluations of TDM and Unified CommunicationsNetworks in a challenging DoD/DISA environment.- Demonstrated vast knowledge in creating and executing test plans forcurrent and future features, covering servers, applications, operatingsystems, and clients.- Successfully managed product software development cycles from Alphatrials to General Availability, including Sanity and Verification testing.- Designed, planned, coordinated, and executed Test and Evaluationactivities for Unified Communications and Information Assurance onmultiple communication and computing devices.- Demonstrated 18 years of excellence in STIG compliance, specializing inhardening server operating systems, applications, and network gear for theDepartment of Defense.- Collaborated closely with development teams to minimize defects insoftware, ensuring successful JITC/DISA testing and evaluation.- Played a pivotal role in driving the creation of new features essentialfor certifications and customer requirements.- Led cyber security testing, scanning, and mitigation efforts for allAvaya products within the DoD-APL, ensuring compliance with rigorousstandards.- Implemented STIGs and conducted scanning using ACAS, SCAP, andSteelCloud.- Possessed a high-level understanding of PKI infrastructure, includingmulti-factor authentication, certificate creation, trust stores, andserver/client identity certificates.- Developed a high-level understanding of CVEs, IAVAs, RHSA, and othercyber security-related findings and provided in-depth analysis.- Demonstrated a comprehensive understanding of the DoD PKIinfrastructure, including Certificate Signing Requests (CSR), CertificateRevocation List (CRL), and Common Access Card (CAC) interactions withservers and devices.- Exhibited high proficiency in Windows Active Directory, DNS, andCertificate Authority.- Maintained a strong understanding of NIST policies and FIPScryptography, ensuring compliance and security.