Secret Clearance

FERNANDO ANDRADE, MBA

PMP, CISSP, ITILv3

(240) 426 – 0904

16920 Horn Point Dr. ~ Gaithersburg, MD 20878

fandrade@gmail.com

Program Management ~ IT Operations ~ Product & Project Management

Information Assurance ~ IT Security ~ Technology ROI Analysis ~ Systems & Network Design

Results driven IT leader well versed in designing, spearheading, planning, developing, and maintaining critical IT

and telecommunications systems for high-profile clients. Adept at using MBA and technical skills to convert

business requirements into financially warranted IT efforts. Skilled at fostering cross-functional partnerships to

align business goals to technology. Leads by example; effectively mentors teams to strengthen group

achievements. Excellent multi-tasking & time-management skills. Fluent in English and Spanish. Also skilled in:

  · Business & Metrics Analysis

  · Full Lifecycle/RAD Projects

  · Budgeting & Cost Estimations

  · LAN/WAN Architecture & Design

  · Senior Level Presentations

  · Strategic/Tactical IT Planning

  · Integration Management

  · Process Streamlining & Cost Cutting

  · Quality Assurance & Controls

  · Corporate Data Policies

CAREER HIGHLIGHTS

  · Developed and implemented plan for end-to-end system compliance with FISMA, DoD and ARMY

Information Assurance regulations. Received authority to operate needed for winning a $670 million contract.

  · Improved quality of IT products and services 35 – 40% by conducting in-depth product field tests that

effectively identified development, quality and usability issues.

  · Reduced support-call volumes by 25% and improved customer service provided to end-users by developing

CRM system that identified users’ software/hardware, usage and chronic trends.

  · Spearheaded IT operations growth from four to 40 IT engineers to support services provided to 500,000

customers and manage call volumes of 5000+ calls per month.

  · Satellite/Secure Communications

  · Product Certification

  · ALPHA/BETA Implementations

  · Regulatory Compliance

  · Vendor Management

  · Helped company gain additional 20% market share by leading satellite router project that enabled firm to sell

low-cost, stand-alone solution to US retailers, restaurant, higher-ed, and auto dealership customers.

  · Dramatically reduced IT support costs and improved client satisfaction by building a self-help technical

knowledge base for users and defining issue escalation criteria used by helpdesk and engineering teams.

  · Slashed time spent on administrative tasks, improved managers’ productivity, and allowed leads to take on

more projects by developing web-based project tracking system that automated previously manual functions.

  · Enhanced customer service by at least 25% and improved operational effectiveness by architecting network

monitoring system that evaluated network and system performance from the user’s point of view.

  · Built inventory management system that optimized budgetary controls & tracked capital equipment.

  · Recommended adoption of emerging IP multicast technologies for audio/video applications via satellite,

developed MPEG infrastructure, & integrated 3rd party hardware/software tools with company’s network.

HONORS

  · Recipient of award for implementing innovative CRM & reducing support costs by 10% in 1 year

  · Awarded for enhancing business opportunities via launch of Satellite Internet Router solution DW4020

  · Received award for dramatically improving problem resolution times, reducing support costs and increasing

clients’ ability to effectively resolve top 10 issues through implementation of web knowledge base solution

EDUCATION & CERTIFICATIONS

JOHNS HOPKINS UNIVERSITY, Baltimore, MD

  · Master of Business Administration (MBA)

  · · Master of Science (MS) in Information & Telecommunications Systems

Bachelor of Science (BS) in Information Systems

Project Management Professional (PMP)

Certified Information Systems Security Professional (CISSP)

Information Technology Infrastructure Library (ITIL) v3 Foundation

Microsoft Certified Systems Engineer Certification (MCSE)

  · Provided secure, satellite-based Internet connections for clients, and helped firm garner two new, multi-million

dollar contracts by spearheading successful development of DirecWay satellite’s VPN acceleration system.

FERNANDO ANDRADE

Page 2

PROFESSIONAL EXPERIENCE

AT&T, Oakton, VA

Sr Security Program Manager

  · Responsible for planning and execution of US Government agency-level migration to AT&T’s managed

security and data services for 35,000+ users. Managed Cybersecurity Initiatives, IT operations to Cloud

Services, Internet Data Centers, Security Operations Center (SOC) and MPLS wide-area-networks. Oversee

operations and engineers supporting contracts for National Agency customers. Manage the day-to-day

operational aspects of ongoing programs and serve as liaison between government Program Manager, AT&T

Program office, Sales, Project Managers, Service Delivery, Chief Security Organization, Enablement, and

Service Assurance. Supervise Cybersecurity service reporting, billing and management of Service Level

agreement (SLA) and Key Performance Indicators (KPI’s) metrics. Manage Agency program issues and

develop resolutions to meet project milestones, deadlines and customer goals and objectives

  · Oversee CAPEX & OPEX planning, budgeting and forecasting. Manage capital & expense budgets and

responsible for vendor management. Reduced operating expenses by 15% through process standardization.

June 2011 - Present

  · Manage the architecture, design and implementation of security solutions at the Internet Data Center (IDC) for

web & network firewalls, load balancers, Intrusion Prevention Systems IPS/IDS, forward & reverse proxies,

logging servers, advanced persistent threat (APT), Security information and event management (SIEM),

Email security, secure remote access, Virtual Desktop Infrastructure (VDI), vulnerability management, Voice

over IP, Cisco Unified communications and Distributed Denial of Service (DDoS) detection & mitigation.

  · Develop strategies to address advanced persistent threat (APT) security concerns, FISMA compliance and

accommodate future growth from OC-12 (622 Mbps) to OC-48 (2,488 Mbps) Data Center connectivity.

  · Responsible for Internet Data Center security design reviews, change management, testing, operational

readiness as well as capacity planning and technology roadmap.

Comtech Mobile Datacom, Germantown, MD

Oct 2005 – June 2011

Director of Systems Engineering & IT Security / Deputy Program Manager

  · In charge of systems engineering, IT security and operations for two multi-million DoD contracts providing

secure tracking solutions for the ARMY. Provided global tracking turn-key solutions with a high-availability

service level agreement (SLA) integrating terrestrial and wireless networks (Fixed Ku/C satellite & mobile Lband).

Lead the network global expansion to support the ARMY’s Movement Tracking System (MTS) and

FBCB2 Blue Force Tracking (BFT) growth in multiple war theaters worldwide. Implemented multiple

tracking and geographic information systems with high availability and site redundancy to support war fighter

situational awareness and logistic inventory management requirements. Oversee network operations, program

status, P&L, system deployments, vendor agreements, system management & monitoring.

  · Responsible for bringing the ARMY’s outsourced networks into compliance with Information Assurance

policies and procedures (AR 25-2). Managed certification and accreditation (C&A) using DITSCAP and

DIACAP methodologies and achieved Authority to Operate (ATO). Identified system threats, vulnerabilities,

shortcomings and developed solutions to address gaps. Created project plans, allocated resources, directed

project security teams and tracked the overall project’s delivery on time and budget. Implemented an

Information Assurance Vulnerability Management (IAVM) process to address security vulnerabilities in a

mixed Cisco, RedHat and Windows environment. Created a disaster recovery plan and addressed Sarbanes

Oxley & FISMA compliance issues.

  · Established security team to detect and respond to cybersecurity events and reduce network security risk.

Managed internal and external IT security audits, established security baselines and reviewed security metrics

to determine security risks and develop POAMs with recommendations.

  · Responsible for SOW & contract negotiations with the ARMY, global satellite providers, international

teleports and support contractors. Oversee budgets, forecasts, and performance metrics to manage program

expenses, revenues and profitability. Interfaced with Government PMO to provide program status, delivery

orders progress and contractual deliverables.

  · Provide senior level guidance and leadership regarding information security for identifying and analyzing

vulnerabilities, threats, risks, and recommending countermeasures.

  · Lead the auditing and security remediation of network equipment (routers, switches, firewalls) platforms

(Redhat/Windows), databases, web servers and applications. Implemented an ARMY approved Intrusion

Prevention System (IPS) to recognize and address cyber-attacks in real time. Completed server, databases,

network and application hardening per DoD Security Technical Implementation Guide (STIG). Improved

enclave and network perimeter by implementing Cisco’s ASA firewall solution, Intrusion Prevention System,

end-point security, proxy access, and a security information and event management (SIEM) platform.

Combined multiple FreeBSD and Linux server directories to a centralized architecture using Lightweight

Directory Access Protocol (LDAP) to simplify user management, improve auditing and provide single logon

FERNANDO ANDRADE

Page 3

  · Provided governance, program portfolio management guidance, and best practices. Redirected process

changes from tactical toward industry best practice Information Technology Infrastructure Library (ITIL)

framework.

capabilities. Cisco Security Manager was deployed to centrally provision all aspects of device configurations

and security policies for Cisco firewalls, virtual private networks (VPNs), etc. RSA tokens, Active Directory

and Cisco TACACS+ were deployed to provide two-factor centralized authentication.

  · Managed L-band satellite operations for Comtech’s global mobile services at Thuraya, UAE; Telespazio,

Italy; Inmarsat, Netherlands; Skyterra, Canada, AcES, Thailand; Stratos Global, New Zealand & Hawaii, and

Optus, Australia. Responsible for bandwidth management, monitoring, and billing.

  · Participate in the Systems Development Life Cycle as a security liaison, recommending secure software, host

and network based designs to protect information confidentiality, integrity and availability.

  · Implemented a security review board for managing ongoing security compliance issues and improve network

& systems security.

  · Deployed Comtech’s Network Operation Centers (NOC) at multiple US ARMY locations for providing Geolocation

tracking and RFID inventory management.

  · Deployed a global wide area network using Very Small Aperture (VSAT) terminals and MPLS to provide

worldwide connectivity between multiple USA locations and international satellite earth stations. Responsible

for VSATs located in the teleports in UAE; Italy; Netherlands; Canada, Thailand; New Zealand & Hawaii.

  · Implemented an Independent Verification and Validation (IV&V) process for review of new products such as

hub equipment, transceivers, geo-location & RFID software releases. Process reduced hardware and software

issues by providing early detection of problems before release to production environment. Hardware and

software quality issues where reduced, system downtime decreased, and customer satisfaction improved.

  · Manage VMware data center virtualization to reduce server footprint, expedite provisioning and reduce

power, hardware and hosting costs. Environment was designed to provide high availability services and

system scalability.

HUGHES NETWORK SYSTEMS (HNS), Germantown, MD

Project Manager (2000 – 2005)

  · Spearhead IT development efforts and provided final approval for launches of VoIP and wireless

appliances/services that provided satellite-based broadband Internet connectivity to over 500,000 customers

worldwide. Lead Alpha and Beta project management efforts for all DirecWay software and hardware

releases. Conducted stakeholder, cost benefit, and return on investment (ROI) analyses for projects.

Collaborated closely with stakeholders to gather business needs & provided technical consulting throughout

software development life cycle & national service launches to ensure requirements were properly

implemented.

1998 – Oct 2005

  · Managed outsourced/tiered helpdesk environments, and developed quality assurance processes to maintain

service level agreements with vendors. Oversaw QA monitoring operations of support calls & tickets.

Implemented knowledge base system and feedback processes for customer service agents using

scripts, application notes, and training modules. Provided technical troubleshooting articles to call centers

to reduce call times and increase first call resolution.

  · Screened, hired and managed an IT engineering solution team that provided tier-three help desk and problem

resolution support to outsourced helpdesk and internal/external customers.

  · Lead Windows 2003 and Active Directory migration in order improved operations, user

authentication/authorization and combine multiple Windows NT and Novell directories.

  · Completed implementation of network monitoring and management tools to provide visual status and alerts to

network operators using SNMP.

  · Managed implementation of Storage Area Network (SAN) to address growing storage needs and scalability

issues with existing file server architecture.

Team Lead (1999 – 2000)

  · Lead AOL broadband-over-satellite system integration efforts. Responsible for product and service end-to-end

testing, usability, feature functionality and delegation of corrective action to help reduce technical support

calls.

  · Created business/technical requirements for CRM and DirecWay network security systems.

  · Integrated all Network Operation Centers (NOC) systems to provide secure, wide area access over satellites.

  · Evaluated hardware/software solutions and provided management with final implementation

recommendations.

  · Installed, tested, and operated data communications network devices, led selection of all network diagnostic

tools, and installed network quality/performance monitoring software.

  · Trained teams on proper installation, use, and tools needed to support DirecPC and DirecTV implementations.

FERNANDO ANDRADE

Page 4

Product Engineer (1998 – 1999)

  · Installed, administered, and managed Windows domain servers, Unix systems, Cisco routers, switches, as well

as email, Web, FTP, SQL and Oracle database servers.

  · Represented HNS at trade show events, such as Comdex, CES, & SBCA; conducted demos for media/press.

  · Provided tier-three support to 90,000 DirecPC customers, including telephone-based technical

hardware/software troubleshooting of installation/configuration issues and support of nationwide VIP clients.

  · Managed system requirement phase for order management system for more efficient product inventory

management.

  · Coordinated satellite system installations with local companies; visited clients to QA installation/operation.

TECHNICAL SKILLS

Programming Languages & Software Tools:

C & C++

MS Office

iDVD /iMovie

PCAnywhere

Ghost

FTP

Adobe Photoshop

System Commander

VNC

Java & JavaScript VB & VB Script

MS Visio

MS Project

Starlight & Minerva Optibase

Final Cut Express Winzip/Winrar

IE & Netscape

MD DOS

Apache

DreamWeaver/FrontPage Lotus Notes/Outlook Flash

Oracle Forms/Reports

Telnet/SSH

Pascal & HTML

Adobe Acrobat

Vantive

Serviceware

Iris/Etherpeek

AOL IM

Operating Systems, Server Software & Database Systems:

Windows (Win) XP Win 95/98/ME Win NT/2000/2003 Apple OS X

Sun Solaris

Oracle 8i

IIS & DNS Server

Networking:

LANs/WANs

IPX & IP Multicast TCP/IP

RIP 1 & 2

VoIP & SIP

Vision & SMS

IPv6

Routers & Hubs Bridges

BGP

Satellite

MPEG 1, 2, & 4

VPN & IPsec

Switches

SQL & ASP

Adobe Premiere

Photoshop

IRC & MSN

Nero CD/DVD

Neotrace

Proxy/Router Servers Firewall Servers Win Media Server

DHCP & FTP Server SQL 7.0

Linux

What’s Up Gold

DSL, T1 & Cable

LDAP

SmartCard Info Assurance Firewalls

HP Openview

Active Directory

OSPF

ISDN

NAT/Proxy

Sniffers