SUSE Certified Linux Administrator

LPIC-1

CISSP – NLT July 2016

Professional Experience

Sr. Systems Security Engineer/Information Assurance Manager/Information Assurance Officer/IA Project Lead (2011 – Present)
Salient Federal Solutions and DEI, FT Belvoir, VA

Responsible for Information Assurance and Administration for a critical War Fighting System that are made up of 109 Linux Servers, Cisco Nexus switches  and 6 Window Servers while successfully achieving first ever projects IA accreditation resulting in a 3 year(s) renewal of a 4.5 million dollar performance contract.

-Architected and re-designed a cluster of Linux servers from physical to virtualization for cloud computing while saving program 130K.

-Engineered Clustering services from open source HA to Veritas.

-Installed and configured Host Base Security Software suite.

-Engineered over 350+ lines of firewall rules that increased security at layers 3 and 4.

-IA Project Lead over a team of 4, that was responsible to enforce new IA requirements and projects resulting in multiple IA accreditations resulted it a 96% security score.

-Hardened successfully software’s such as Mysql 5.5, Oracle 11 and 12, Tomcat, Apache, Red Hat, Window Server, SLES 10, java, hbss agent, windows explorer and cisco switches and firewalls.

-Successfully designed and written projects first ever Multi-Tier Service Level Agreements (SLA) and System Security Plan (SSP) that resulted in the sponsored Government Agency IA Department to adopt.

-Re-wrote System Security Plan (SSP) in a format which was adopted by the Sponsored Government Agency.

-Successfully trained a team of 4 on all aspects of security ranging from Networks, policy, Linux, Windows, Cloud, Vmware, Databases etc..  

IA Security Engineer (2010 – 2011)

EmeSec, Inc, Air Force Contractor, Falls Church, VA

Followed DoD Information Assurance Certification and Accreditation Process (DIACAP) and Air Force Certification and Accreditation Program (AFCAP) guidelines and regulations for Airforce Surgeon General Office.

Executed security testing and evaluation on numerous Air Force specific software/applications for recommendations of approval.

-Versed with assessment tools such as DISA Gold Disk, Retina, Web Inspect, AppDetective, DISA STIGs checklists, Unix and Database SRR’s in performing IA Vulnerability Assessments.

-Compared customer’s enterprise computing environment to DIACAP standards and thoroughly documented compliance.

-Reviewed security documents for information system security plans, information system security risk   assessments, and information system security test plans.

-Executed security test and evaluations, established test guidelines, performed system security and vulnerability scans, and reported findings discovered in all security related activities.

-Tested and Certified Commercial off the Shelf (COTS) software for Air Force Medical enterprise wide.

UNITED STATES NAVY, Active Duty (2000 -2010)

Information Assurance Technician (IAT) (2000 – 2010)

USS Nimitz; Naval Communication Telecommunication Station Bahrain; Carrier Air Wing Seventeen; White House Communication Agency (WHCA); & Navy History and Heritage Command (NHHC)

Examine potential security violations to determine if the DoD policy has been breached, software IA problems pertaining to the commands network. Install, test, maintain, and upgrade network operating systems software and hardware to comply with IA requirements.

-  Experienced with mitigating findings by utilizing vulnerability scanning tools such as Retina, Unix   SRR, DISA STIGs and Gold Disk according to Information Assurance Vulnerability Management (IAVM) reviews which played a huge role in successfully receiving an Authority to Operate (ATO).

-  Patched and proactively assess the security of 500+ computers ranging from Linux, Windows 2003, 2008, XP, and 2000 with 0% security incidents.

Information Assurance Manager (IAM) (2008-2010)

Navy History and Heritage Command (NHHC)

Manage all Information Security aspects enterprise wide. Developed System Security Plans, Interconnection Security Agreements, Memorandums of Understanding, system categorization, system test and evaluation performed security configuration reviews performed risk assessments.

-  Excellent in written and communication skills which was a key strength in developing and documenting findings in a DIACAP C & A Package and Plan of Action and Milestones

-  Coordinated Information Assurance IA efforts with systems administrators and other operations and engineering staff.

-  Provide support to multiple government agencies such as 13 Echelon III commands by maintaining the security of their IT systems and DoD environments and performing C&A efforts according to DoD guidance’s

-  Work independently to complete tasks and coordinate with command resources as necessary.

IT Network Administrator (2003 – 2008)

White House Communication Agency (WHCA)

Responsible for the configuration, implementation, maintenance, and troubleshooting of the local and wide-area network; including 208 switches and 141 routers valued at over $8 million, supporting 120 servers and 1500+ customers worldwide.

-   Key member in the configuration and testing of 20 Cisco routers with a new operating system, improved productivity by 30%.

-   Expert in configuring and managing an automation network software Cisco works.

-   Handpicked to assist with the design, securing and installation of a local area network at a $32 million continuity facility; provided 99.9% redundancy.

  Experience in configuring 200+ multiple vendor’s routers, switches, firewalls, Host Based Security System (HBSS) and concentrators according to DoD security requirements.