Thomas M. Email & Phone Number

Washington, Dc, Us

Washington, Dc, Us

Washington, Dc, Us

• Establish and reaffirm working relationships between the Office of Cyber Security (OCS) and House Information Resource (HIR) business units. • Manage and support various OCS projects (e.g., Privileged Access Management (PAM); Web Application Firewall (WAF) policy reassessment; Firewall upgrade) by being a liaison between OCS and HIR business units; requesting for status updates from impacted parties; communicating project statuses, roadblocks, and risks to engineers, management, and directorates; and monitoring project metrics (progress, statuses, workload) via ClickUp. • Facilitate OCS’s Internal Review Board (IRB) by ensuring that potential topics meet IRB criteria and requirements; preparing presenters on how best to present their topic; and drafting meeting minutes for the IRB to review. • Manage the lifecycle of change requests (CRQs) using BMC Remedy. • Prepare and present communications to a diverse audience group (engineers, senior management, directorates, c-suite members) through various forms: ClickUp project plan; ClickUp dashboards; presentations; briefs; and plans. • Provide enhancements and improvements to further define and emphasize the importance and purpose of the Project Management Office (PMO) in the OCS. • Communicate effectively with cybersecurity client points of contacts (POCs) on project topics, manage expectations, and establish and maintain effective working relationships• Effectively communicate with technical and non-technical users in both oral and written formats (to include technical documentation).

Rockville, Md, Us

• Establish security standards—determine, static and dynamic security scanning tools; create scanning requirements and procedures; and define security and risk thresholds—to ensure security compliance for the BHSIS IT system. • Create architectural diagrams describing data flow, security authorization boundaries, and network interactions using Microsoft Visio and Draw.io. • As a developer, understand Play1 and Play2 framework and reconfigure configuration files to deploy BHSIS IT applications to the lower environments (e.g., development, testing, mirror) for internal development and testing. • Assist in migrating BHSIS IT applications to the AWS cloud by creating the cloud infrastructure following security best practices. • As a scrum master, manage the BHSIS Infrastructure team Jira board –outline sprint goals, track issue tickets, close sprints bi-weekly, and provide weekly team project reports for the Project Manager’s review and distribution. • Prepare and deliver presentations, reports, recommendations, and/or alternatives for improving processes in operational models and workflow procedures; and monitoring tools to monitor the health of BHSIS IT applications (e.g., Pingdom, CopperEgg, Uptime Robot, site24x7). • Develop project plans using Microsoft Project and Excel to track various activities in reference to contract transition—data center transition, DNS cutover, transition day checklist tasks. • Assist the Business Analyst team in writing detailed functional requirement documents for each BHSIS IT application.

Arlington, Virginia, Us

ATO Process • Successfully achieved an ATO from the HHS/ACF Accreditation officers. • Actively participated in and drafted meeting minutes of weekly client meetings with HHS/ACF/OHS/HSES Accreditation officers and Cloud.gov personnel to discuss ATO progress, raise roadblocks, and determine action items for the following meeting. • Utilize online tools—LucidChart, Draw.io—to design system architecture, boundary, and topological diagrams. • Composed System Security Plan (SSP) components—e.g., Contingency Plan (CP), Incident Response Plan (IRP), Configuration Management Plan (CMP), Privacy Impact Assessment (PIA) and Interconnection Security Agreements (ISAs). • Led discussions and presentations with the Project Manager, Operations Manager, System Architect, Network Administrator and Database Administrator to accurately describe the system’s technical, operational, and managerial compliance. • Mentored and trained 3 team members on the ATO process and the NIST RMF. • Developed NIST SP 800-53 Rev 4 security and privacy control statements to demonstrate compliance with regulations and standards; and cross-collaborated with Operations, Developers and Testers to create and gather ATO artifacts. • In a team of 3, organized and administered annual role-based training and awareness program for employees within the contract to complete; and created a SharePoint document library to store and archive training documents per policy requirements.Code Builder• Using Jenkins, worked with the Build Manager to deploy patch and major releases to internal training, development and testing environments after code releases to the production environment. Post-Mortem QA Testing • Coordinated with Post-Mortem QA Team to schedule weekly meetings to review release features in preparation for post-mortem QA testing. • Worked with QA and Developer Team Lead to resolve discovered discrepancies in software behavior. • Develop a post-mortem results summary for the Project Manager.

College Park, Md, Us

• Worked closely with the professor to develop material for the course, such as sample constituent letters and presentations to prepare students for their internship at the MGA the following semester. • Developed resources for students to assist them during their internship experience, such as a tutorial on mail merge. • Shared internship experiences with students to coach them on internship etiquette.

College Park, Md, Us

• Managed daily operations in the office such as: work with confidential documents, organize and assist during office events, administer make-up exams for students, and close the office and associated seminar rooms at the end of the day. • Created a Microsoft Excel database to simplify daily functions and organize pertinent data for daily office use.

Baltimore, Md, Us

• Transcribed notes from meetings with other government offices and agencies.• Contacted various stakeholders on promising practices throughout Maryland.• Condensed information into a 200-300 word blog post to be posted on the back-end of the website.• Updated the community events page of the website by researching events throughout Maryland and contacting stakeholders to confirm events.• Pinpointed and organized necessary documents for the back-end of the website.• Participated in meetings with local stakeholders on how their agency/company and the OOCC can work together to combat the opioid epidemic.

Annapolis, Maryland, Us

• Conducted extensive research on the incorporation of computer science into MD public school curricula. • Developed documents to assist office functions such as: responses to constituent inquiries, testimonies in support of and in opposition for bills, weekly memos to provide updates for constituents, meeting notes following bill hearings, and research material for current and future bills. • Represented my office and delegate at various events such as during session, constituent nights, and bill hearings.

Washington, D.C., Us

• Worked closely with office staff to develop, plan, coordinate and execute activities to develop community with the intern cohort such as: lunches and dinners with Congress members, karaoke nights, and community events. • Represented my office at lunch talks and intern events to increase visibility for APAICS and show appreciation to the APAICS board members.• Planned and executed a film screening, where 70 interns and 10 officials from the Filipino Embassy learned of the role the Asian American Pacific Islander community played in forging this country.• Mastered administrative tasks, like Excel and mail merge, as well as Facebook and Twitter pages.• Prepared information for a long term project to create an infographic displaying Asian American and Pacific Islander (AAPI) elected officials throughout the country in all levels of government.

Master Of Science - Ms, Cybersecurity Policy And Risk Management

Bachelor Of Arts - Ba, Political Science And Government (International Relations)

Bachelor Of Science - Bs, Computer Science (Cybersecurity)