Experience

eGlobalTech (eGT)

• Cybersecurity SME & Technical Lead

  • Aug 2018 - Present

  Manager, Technical Lead for ISSO, SCS, and SCA contractors and subcontractors within the HHS Enterprise Security Services (ESS). ESS Security Consultant Services (SCS) analyst for development of ATO package documentation for on-premise systems, and FedRAMP-accredited Cloud Service Provider systems.ESS SCA Analyst, and SCA Technical Vulnerability Tester (continued in role from below after contract change to eGlobalTech).Conduct security control assessments (SCA), following guidelines in NIST SP 800-30, SP 800-37, SP 800-53R4, of HHS and ESS customer GSS, Systems, Major Applications, and Cloud-hosted XaaS migrations.Review of HHS Information Security & Privacy Policy (IS2P), and HHS OS Information Security Policy & HHS OS Procedures. Review and development of HHS/OS and ESS customer information system security architectures, component inventories, and ATO documentation (SSP, Control Implementations, CMP, CP/CPTest, IRP, RA, BIA, FIPS199, etc).Conduct and analyze host, network, cloud, and web-based application security vulnerability scanning and testing with Tenable Nessus, Fortify WebInspect, Burp Suite Professional, Nipper Studio, Wireshark, Nmap, Fiddler, and other assorted scanning tools.Conduct physical security assessments of data center environments, and review/assessment of FedRAMP documentation for cloud environments.



Blue Canopy Group, LLC

• IT Services and IT Consulting
• 1 - 100 Employee

• Cyber Security SME & Technical Lead

  • Oct 2016 - Aug 2018

  SCA Team Lead, SCA Analyst, and SCA Technical TesterConduct security control assessments (SCA) following guidelines in NIST SP 800-37 and NIST SP 800-53R4 of HHS and customer GSS environments, Systems, Applications, and Cloud-hosted XaaS migrations.Conduct and analyze host, network, cloud, and web-based application security vulnerability scanning and testing with Tenable Nessus, Fortify WebInspect, Burp Suite Professional, Nipper Studio, Wireshark, Fiddler, and other assorted scanning tools..Review of information system and security architecture, component inventory, and ATO documentation.Conduct physical security assessments of data center environments, and review FedRAMP documentation for cloud environments.Test, review, and advise on RSA Archer implementation at HHS.



Summit Technologies, LLC

• Computer Networking Products

• Cybersecurity Technical Lead

  • Dec 2015 - Oct 2016

  Provides technical/management leadership on major C&A tasks and technology assignments. Establishes goals and plans that meet A&A project objectives. Responsible for supporting the junior engineers with various challenges. Implement cybersecurity assessments, vulnerability and penetration testing.



Hewlett-Packard

• United States
• Information Technology & Services
• 300 - 400 Employee

• Information Solutions Architect

  • Jul 2010 - Oct 2015

  Hewlett Packard Enterprise Services*Development & Technical Team Lead, USAccess/HSPD12 Program*-Review, prioritization, assignment of software development tasks-Change, configuration and release frameworks management and code promotion-Build, configuration of Virtualization (vSphere) environment, VMs (Windows/Linux), and virtual appliances-Build, configuration of F5 devices and capabilities (APM/LTM)-Support for SAN storage, Juniper firewalls, and various other network components.-Configuration of HP C7000 Chassis/Blade Environment-Development, planning of architecture for build/migration to Virtual Private Cloud-Facilitator, advocate for moving to agille development, DevOPS, and overall business process improvements-Sales and Management support for RFQ proposals-Delivery of status and technical presentations to customer and management-Support for WebInspect, IP360, Nessus security scans, assessment and remediation*Solution & Enterprise Architect, USPS ITO*-USPS pursuit, solution and cost model development-High level and detailed requirements gathering and elucidation for alignment and management of requirements and assumptions -Create solution design for proposals, working with geographically distributed SMEs for integration and build/support costs.-Presentation of solution design and cost models for Leadership approval.-Specified hardware (HP) to meet solution/operational requirements, along with hardware cost quoting-Review of business processes for alignment with technical solution implementations.*Information Solution Architect, Federal/S&L Consulting*-Architect, design and delivery of custom solutions and integrations for project, program, and/or operational scope-Assist Sales and Management with solution opportunity approval and review of services offerings-Performed qualification reviews and technical interviews of HPES position candidates



TriVir LLC

• United States

• Partner

  • Apr 2003 - Aug 2009

  *Managing Partner*-Business management, development and marketing-RFI/RFP/RFQ response development and delivery-Resource planning and talent recruiting-Contract and SOW development, negotiations and award-Technical and business liaison between customers, company, and vendors*Consultant*-Technical Project Manager-Solution architecture, technical design development and delivery-Conduct online/onsite training sessions for implemented solutions and product capabilities/features-Technical consultant and subject matter expert-Integration engineer for numerous solutions, applications, and web services



Novell

• United States
• IT Services and IT Consulting
• 700 & Above Employee

• Consultant & Senior Technology Specialist

  • Jan 1999 - Apr 2003

  Consultant & Senior Technology Specialisto Technical lead, consultant, and subject matter experto Project management, scope/SOW and WBS developmento Solution architecture, development and deliveryo Technical liaison between customers and company



Electronic Data Systems

• United States
• IT Services and IT Consulting
• 1 - 100 Employee

• Nework & Communications Engineer

  • Oct 1996 - Dec 1998

  Technology Infrastructure Project and support for US Immigration*Network and Communications Engineer*-Technical consultant, Subject Matter Expert-Global Systems Administration-Development of Y2K remediation strategies -Development, testing, pilot and deployment of strategic technologies and systems