PKI Engineer

Responsible for PKI solution delivery in support of the Department of Defense (DoD) Navy and Marine Corps Intranet (NMCI). Network consists of 2 separate Windows Active Directory (AD) forests, 600,000 users, and 400,000 client machines. Operating systems include Windows 2003, 2008, and W7. Infrastructure PKI solutions include Axway Validation Authority OCSP responder and repeater servers, and Microsoft Certification Authority servers which provide internal support for x.509 revocation checks. Infrastructure servers leveraged the Thales nCipher/nShield Hardware Security Modules (HSM) technology to protect server certificate private keys while meeting FIPS-140 standards. PKE integrations include Windows smart card logon, Web (IIS/Apache), Outlook Web Access (OWA), SSL/VPN, CITRIX, Hosted Virtual Desktop, thin client, wireless (802.11i), and Network Access (802.1x). Client applications enabled for PKI include Smart Card readers, Outlook email certificate signature and encryption, Internet Explorer, and various applications using the Microsoft cryptographic interface. Solution delivery required extensive coordination with Operations, Program Management, and Helpdesk. Current project: Migrate current PKI to an all Windows 2012 infrastructure using Microsoft Certification Authority (CA) and Microsoft Responders. Solution is fully operational in the lab, server installs are automated using PowerShell scripting.

Assigned to Commander in Chief, Pacific Fleet, Regional Information Technology Services Center(RITSC), San Diego. Responsible for Windows infrastructure and troubleshooting in an enterpriseenvironment on three separate Ethernet and fiber-optic (ATM) Base Area Networks (BANs). Environment consists of 260 Dell/Compaq servers and 8,000 Dell workstations maintained through the use of Microsoft Systems Management Server (SMS) 2.0 and NetIQ AppManager.Co-developed policy, architecture, and concepts for control, management and operation of serverinfrastructure. Co-authored standard operating procedures for daily operation, maintenance and backup of all server farms.Supervised six server team engineers responsible for supporting 30,000 customers in 53Navy commands. Lead troubleshooting engineer for all infrastructure and application servers.

Same contract position and duties as above. SDS took over the CACI contract in July 2004.

Active duty service ended 1998, continued service as a Navy Reservist until retiring December 2006.