Tiffany Nesmith Email and Phone Number

Remotely provides a structured process for managing security and privacy risk for USTRANSCOM’s cloud-based Global Air Transportation Execution System (GATES) utilizing NIST 800-53 Rev 5 standards. Maintains accurate documentation of risk management activities, including risk assessments, mitigation plans, and audit findings, to facilitate effective reporting and compliance efforts in Enterprise Mission Assurance Support Service (eMASS). Creates detailed security related system and application documentation. Collaborates closely with operations teams to ensure that system controls align with established security requirements and standards. Assists in managing and following up on the results of audits conducted on system security, ensuring identified vulnerabilities or weaknesses are promptly addressed. Creates Plan of Action and Milestones (POA&Ms) that identify tasks needing to be accomplished and resources required to accomplish the elements of the plan, any milestones in meeting the tasks, and scheduled completion dates for the milestones.

(Dec 2022-Jan 2024)Responsible for installing, managing, maintaining and configuring the Trellix Host-Based Security System (HBSS) remotely for the US Army SDDC at Scott AFB, IL. Ensured all signatures, policies and module versions remained in compliance with NIST 800-53 Rev 4 standards. Monitored HBSS for intrusions, failures and other issues. Ensured that the clients/servers were operational and reporting properly to the electronic policy orchestrator (ePO). Conducted analysis of malicious events and modified policies accordingly. Provided detailed reports on system status, module deployments and event trends. Performed monthly security technical implementation guide (STIG) checks on enterprise systems.(May 2017-Dec 2022)Remotely managed the Trellix Host Based Security System (HBSS) and electronic policy orchestrator (ePO) for the US Army at Fort Belvoir, VA. Attended daily meetings with higher level command members to stay abreast of outages, upcoming infrastructure changes and software/OS releases. Reviewed IA vulnerability reports gathered via Tenable Nessus to determine the applicability of the alert on IT assets and assures the required security features, procedures, patches, and updates are implemented in a timely manner to meet all suspense dates and to mitigate vulnerabilities. Tested, implemented and tracked changes required to support system’s DISA STIG compliance. Documented information for peers and leadership by creating and maintaining standard operating procedures (SOPs). Identified risk management framework (RMF) issues and concerns through continuous tracking, monitoring, mitigating and working the numerous controls families assigned to the division. Assisted during the Command Cyber Readiness Inspection (CCRI) by running Security Content Automation Protocol (SCAP) scans and uploading results to eMass to create or close POA&Ms.

Performed system administration using Microsoft System Center Configuration Manager (SCCM). Responsible for configuring and maintaining the Windows environment by deploying software, managing patches, and ensuring security compliance. Provided senior level software and hardware support for VIP staff. Engaged Microsoft as needed for additional support. Created weekly status reports for management. Assisted with new employee training and onboarding.

Administered user accounts for the Global Air Transportation Execution System (GATES) at Scott AFB. Performed daily system monitoring, verifying the integrity and availability of all relevant software and hardware. Verified completion of software backups. Tracked and monitored all requests and incidents in Remedy. Created training program for new hires to streamline the on-boarding process.

Applied Windows updates and configuration changes via SCCM to Sallie Mae Bank systems. Managed domain accounts via Active Directory. Processed requests for RSA 2-Factor accounts and fob devices. Created a knowledgebase on SharePoint along with all documentation related to standard operating procedures.

Managed domain accounts via Active Directory for the U.S. Coast Guard. Provided file/print server support. Assisted with new employee training.

Led the deployment, monitoring, maintenance, and upgrade of all enterprise systems, application software, database management, networking hardware and software, servers, and desktop PC systems. Evaluated the company’s IT needs, established IT strategy, refresh cycles and procured the necessary hardware and software. Oversaw the delivery of end user services, including help desk and technical support services.

Analyzed, diagnosed, and resolved complex IT-related issues for Monsanto employees world-wide from their company headquarters in St. Louis, MO. Performed troubleshooting of all computer hardware and Microsoft software-related issues. Provided training and technical assistance to end users on Microsoft software applications. Responsible for Active Directory domain user account creation and modification.

Implemented and supported IT equipment, including but not limited to network equipment, servers, terminals, personal computers, printers, cabling, related software products. Planned and coordinated the installation, testing, operation, troubleshooting, and maintenance of hardware and software systems. Provided advanced, hands-on technical support across a broad range of technical user problems; repaired computers and peripherals and performed preventative maintenance. Logged and tracked incidents and requests in the Remedy ticketing system. Acted as the main point of contact for advanced application support and troubleshooting for software, such as, MS Office, Internet Explorer and Windows. Served as an Active Directory (AD) administrator by creating and managing all user/computer accounts.