Alex Faieq 
2333 Dulles Station Blvd. #333
Herndon, VA 20171 
Home: (571) 278-5533    Work: (703) 539-1314
alexf0001@gmail.com

 

OBJECTIVE: To obtain a position as a Senior Information Assurance Engineer in a growing technologically driven organization that will challenge my skill’s and utilize my analytical and problem solving abilities.

 

 

Education: Computer Information Systems Northern Virginia Community College

CompTIA Security+

Cisco Certified Network Associate (CCNA)

Cisco Certified Network Professional (CCNP)

Microsoft Certified Professional (MCP/Microsoft Windows 4.0/2003)

Microsoft Certified System Engineer (MCP/MCSE Microsoft Windows 4.0/2003)

Certified Novell Administrator (CNA) ATI Virginia

Currently pursuing my CEH exam

Currently pursuing my CISSP exam

 

Experience Summary

·  19 years of experience in computer software and hardware, installation, maintenance and troubleshooting

·  Manages Information Assurance (IA) activities for network infrastructure, Windows, and Linux/Unix based systems across the NGA enterprise

·  Supports Certification & Accreditation (C&A) efforts on IC projects using DCID 6/3.

·  Develops CONOPS for continuous monitoring activities for ICD 503.

·  Utilizes VMS and XACTA database tools for managing accreditation efforts

·  Strong customer service orientation; excellent rapport with Government representatives

·  Security clearance:  Active TS/SCI with CI polygraph

 

Employment History

 

General Dynamics - Information Technology, Springfield, VA

February 2014 to Present
Senior Principal Information Assurance (IA) Engineer

 

Senior team member conducting Command Cyber Readiness Inspections (CCRIs) on behalf of National Geospatial-Intelligence Agency (NGA)/Office of the Chief Information Officer (OCIO). Currently leveraging my expertise in Security and Technical Implementation Guides (STIGs) & Computer Network Defense (CND) directive compliance to provide vulnerability and root cause analysis for NGA customers.

·   Design and implemented the Assured Compliance Assessment Solution (ACAS) Nessus SecurityCenter 4.8.1 across the NGA Common Operating Environment (COE) for Active Information Technology (AIT) program.

·  Responsible for initial loading, STIGing and patching the ACAS Security Console (SC) servers.

·  Maintain the ACAS data feed using the Assets Publishing Service (APS) to DISA (Tier I).

·  Direct and assist SC Administrators with applying patches, ACAS updates, STIGS, and plugins.

·  Generate and deliver Authority to Operate (ATO) C&A artifacts for ACAS and Continuous Monitoring Risk Scoring (CMRS) capabilities.

·  Provide Subject Matter Expert (SME) level support for SC Administrators and Host Based Security System (HBSS) Support Administrators.

·  Conduct and present technology reviews in support of Command Cyber Readiness Inspections (CCRI) and C&A efforts.

·  Recognized by General Dynamics and NGA customer base as the resident SME for ACAS.

·  Proficient with Security Content Automation Protocol (SCAP) tools (HBSS Policy Auditor, SCAP Compliance Checker (SCC), STIG Viewer) to analyze security compliance across the enterprise.

·  Conduct Site Assistance Visits (SAVs) in multiple technologies to prepare NGA sites for upcoming CCRIs.

·  Have detailed knowledge of CCRI Phase III scoring system and self-assessment procedures

·  Analyze vulnerabilities and provide root cause analysis.  Derive actionable recommendations for improving site security postures.

Utilize DISA STIGs and run SRRs for Linux/Unix systems as required.  Provide scan results and Plan of Action & Milestone (POA&M) documents to engineering staff.  Analyze scan results and assign findings to Internet Service Provider (ISP) and to Application Service Provider (ASP) groups. Track remediation efforts through final scans and receipt of Approval to Operate (ATO) and transitional ATO (ICD 503). 
Investigate vulnerabilities and download and install patches as required.  Edit registry as required.
Provide status & security recommendations to NGA program managers and developers.  Advise Program Managers (PMs) on security relevant changes by interpreting OCIO policy. Manage IA projects and report status using XACTA database tool.

 

Defense Information Systems Agency, Field Security Operations (DISA FSO) (INFOSEC) Senior Information Assurance (IA) Engineer
May 2009 – Feb 2014 – Hewlett-Packard (HP), Herndon, VA
 

Lead Senior information security reviewer reporting to the Compliance Assessment Section performing Information Assurance Reviews (IAR), Security Readiness Reviews (SRR) and Information Assurance Readiness Review (IARR) assessments at COCOMs and Components, Joint Task Forces, OSD, DISA activities, Services and Defense Agencies for the Joint Task Force – Global Network Operations (JTF-GNO), Unclassified Connection Approval Office (UCAO) and Classified Connection Approval Office (CCAO) providing an assessment of information assurance readiness and compliance to DoD policies and configuration requirements as well as providing the DoD Component and local leadership with actionable recommendations for improving information assurance readiness. Provide On-the-Job-Training (OJT) and Check Ride certification to candidates from all DoD CCRI inspection teams (DISA, Navy, Army, DLA, DSS). I brief the outcome and results to the leadership which may include Flag-level Officers. As a Senior Network reviewer he routinely compares customer's enterprise computing environment to DIACAP standards and documents compliance against those standards. His job responsibilities also include reviewing System security plans (SSPs). Alex also utilizes his advanced skills to analyze and review Firewalls, Perimeter Routers, Network Policy, Layer 2 and 3 switch configurations to discover possible security vulnerabilities and develop mitigation plans. Alex also has hands on experience in creating and maintaining assets in DoD's Vulnerability Management System (VMS) NIPRNet and SIPRNet. I provide training to new contracting employees, the Services, COCOMs, components and Defense Agencies for conducting assessments. I also conduct security assessments on a variety of Window Servers and it’s components to include Blackberry, and VoIP. I completed SRR for the following technologies: DSN, DRSN, VoIP, Network Security Reviews and DSS National Industrial Security Program (NISP). As a Senior IA engineer on the HP Enterprise Services DISA account, Alex leads team’s who are engaged in conducting Security Readiness Reviews (SRR) of various DOD systems on both NIPRNet and SIPRNet undergoing the DOD Certification and Accreditation (DIACAP) processes at various military installations worldwide. Alex is technically proficient and has hands on experience utilizing Security assessment tools such as DISA Network STIG, STIG Viewer, ACAS and Eye Retina.

 

Electronic Data Systems (EDS), Herndon, VA

05/10/2005 – 4/30/2009

AMPP (AppManager Performance Profiler)

Senior Network Engineer

Lead Engineer on a project for the United States Air Force which will provide them the capability to monitor the performance of the servers and applications deployed across the Air Force enterprise network using the NetIQ AppManager Performance Profiler software application. Responsibilities included Identifying Requirements, analyzing Requirements and developing the operational, functional and security architecture for the system. Responsibilities also included meeting with the software vendor to communicate Air Force specific security requirements and coordinating modifications and designing configuration changes to the existing software applications.  Developed the System Design document and the Installation and configuration procedures to be used by the field engineers to deploy the system at various Air Force locations.  Wrote a test plan to test and demonstrate the compliance of the system with the baseline set of system requirements.  Presented the system design to a delegation of Air Force representatives to obtain approval for fielding across the Air Force enterprise network.

 

Surface Deployment and Distribution Command (SDDC)

Worldwide Information Systems Administrative and Technical Support (WISATS), Alexandria, VA

01-10-2005 – 02/10/2005 TDY

Senior Network Engineer

 

Responsibility included:

·  Created new VLAN’s for IBM Contractors on Cisco 4507 switches

·  Updated port security configuration for all interfaces on Cisco 4507 and Cisco 4510 switches by restricting access to only approved MAC addresses

·  Performing daily network monitoring tasks using Cisco Works 2000 and Network Management software to ensure all routers/switch are up and operational

·  Reported any new device that has been detected on the network to IA group

·  Performing scheduled backup of all the configurations of the routers and switches on SDDC network

·  Quality monitoring and network improvements (using Cisco Works 2000 and 3COM Network supervisor)

 

Electronic Data Systems (EDS), Herndon, VA

05/10/2005 – 02/02/2006

NETCOP (Network Common Operational Picture)

Senior Network Engineer

 

Lead Engineer on a team which performed site surveys and implementations at CONUS and OCONUS US Air Force locations. Served as technical team lead for the development of enterprise management system solution including the Micromuse product suite of Netcool/Omnibus, Reporter, Webtop, and a variety of probes and gateways. The solutions also provide a standardized look and feel, customized to accommodate unique end-user requirements. Successfully installed and integrated NetCool Micromuse v.3.6 with a number of existing systems such as EMC Smarts Incharge v.6.0, NetIQ AppManager v.6.1, ESM v.6.0, ITA v.3.2, ISS v.6.0, NetIQ DRA v.7.0, Sirana Appanalyzer v.3.2, Cisco Works 2000, Remedy ARS v.5.1.2, and HP Network Node Manager v.6.2. This project provided data collection to support network, server and application availability and performance.

 

Keesler Air Force Base Schoolhouse Training Suite implementation
 

·  Successfully installed and implemented Blue Coat appliances 6000/800, Microsoft 2003 domain controller servers, Microsoft Exchange 2003, Windows 2003 DNS servers, and 14 SideWinder Firewalls in a Failover configuration. Participated in the Development and modification of the training courses. 

·  Participated in customer meetings to evaluate hardware platforms, software applications, and design solutions.

 

Electronic Data Systems (EDS), Herndon, VA

03/13/2002 – 05/10/2005

NOSC Foundation BLK 15

Senior Network Engineer

 

 

·  Participated in proto-type testing and evaluation of the NOSC Foundation Design.  Configured (Compaq and Dell) servers with Windows 2000 operating systems and application software.  Additionally configured the Symantec v.4.0 Mail Relay servers and implemented the DoD compliant system lockdown procedures. Assisted with the design, testing, and implementation of the Network Operations Security Center (NOSC) Foundation Solution.  Authored sections of the design installation procedures that were a contract deliverable. Specific area of expertise, Symantec Mail Relay v.40, Ciscoworks 2000, ESM/ITA, Bluecoat 3.x, Microsoft Exchange 2000 and Microsoft Windows 2000 Server. Created, updated and modified approved Acceptance Test Plan for the NOSC Infrastructure. Site Survey and Requirements Discovery

 

·  Participated in the deployment and installation of the USAF MAJCOM’s.  Primary duties included installing and configuring the Cisco 6509, 3524 and 3508 switches. Installed and configured Symantec Mail Relay v.4.0.

·  Evaluate sites, facilities, environment, and connection requirements.  Evaluate legacy equipment for re-use and the potential for upgrades.  Document the installed equipment and software.  Create a Site Survey Report.

·  On the Cisco catalyst 6509 switches configure VTP and SRM

·  Configure trunking between the catalyst 6509 and down stream 3500 series switches

 

Computer Science Corporation (CSC), Washington DC

07/11/2000 – 03/13/2002

Senior Network Engineer

 

Serve as technical lead for the development of networking management system, WAN installations and upgrade for DOJ/EEOC. Responsible for planning, designing and implementing Windows 2000 advance Certificate Server, Windows NT 4.0 DNS server, Novell 5.1 DNS Server, Cisco PIX Firewall 520, Cisco Secure, Checkpoint Firewall 4.1/2000, Checkpoint VPN, CiscoWorks 2000, and HP OpenView 6.1. Serves as a team lead for the operational of the WAN and associated WAN-connected services (Internet, DNS, Firewall, etc) with responsibility for ensuring timely maintenance and operational viability of EEOC’s WAN as primary function. Define process for the maintenance, upgrade, and monitoring of WAN links and equipment, e.g. router, CSU/DSU, firewall, etc. Develops assigned sections of the disaster recovery plan for the EEOC WAN infrastructure. Configured, installed, and tested Cisco routers for various sites. Evaluation of hardware/software products, testing of alternate products, and written recommendation for network management system.  Provide technical operational support in troubleshooting, resolving WAN issues. Remote monitoring and trouble shooting Frame Relay Circuits. Installed and configured command line Send mail for HP Open View. Successfully installed and implemented Network filters on HP Open View. Perform daily network monitoring tasks using HP Openview, CiscoWorks 2000 and Network Management software to ensure all routers/switch at both Head Quarter and all EEOC sites are up and operational. Creating Management reports from Cisco Works 2000/ HP Open View.

 

Electronic Data Systems (EDS), Herndon, VA

11/11/1996 – 08/11/2000

Network Communication Engineer

 

Responsible for planning, investigating, designing and implementing physical and logical communications network that impact individual sites. Work with the team, customer and vendors to analyze needs and provide solutions for the customer’s data communications requirements. Prepare work-prints and schematics to define and illustrate network designs and solutions.

 

Electronic Data Systems (EDS), Herndon, VA

CITS NMS/BIP

 

Lead Engineer on a team which performed site surveys and implementations in CONUS and OCONUS United States Air Force bases for the Network Management System / Base Information Protection (NMS/BIP) component of the Combat Information Transport System (CITS) program.  Responsibilities involved configuring network management products like HP Open View, Netscape Proxy Server 3.5 and Ciscoworks 2000 on a Windows NT platform and security tools like Axent technologies Enterprise Security Manager (ESM), Intruder Alert (ITA) and Internet Security Scanner. Assisted in the configuration of Secure Computing’s Sidewinder Firewall and Cisco 7000 series routers. Also provided training to the customer on configuring base specific security policies for Axent ESM and ITA.

 

EDS Government Services Group (GSG/SMC) Herndon, VA.

5/10/94 - 11/01/96

Business Analyst

 

Working closely with remote and local administrators, contractors and government agencies. Providing technical expertise on procurement, design, installation and configuration on network nodes. Primary point of contact for resolving TCP/IP network connectivity errors. And also supporting desktop PC’s for contracts such as SMC, ULANA-II, PCLAN Plus, PC1, Portable-1, NIH, and DOD. Technical Support included system installation and configuration, troubleshooting, software support including Windows NT 4.0 and 3.51, Novell 4.1 and 4.11.

 

Sitel Corporations

12/1/94 to 12/1/97

Technical Support

 

This was a part time job. Responsibilities include technical support and troubleshooting of Canon/Sony Personal computers, hardware, and software and helping customer with technical issues.

 

Security Clearance: Top Secret, SCI, SCI POLY (US Citizen).

References: Will be furnished upon request.