Summary of Qualifications

• Excellent hands-on information security: developed and implemented security policies, performed certification and accreditation tasks, administered firewall rules, vulnerability assessments, penetration testing, risk assessments, performed audits based on security industry standards according to the followings: Active Directory, Code Review, FISMA Federal Information Security Measurement Act and the relevant guidance issued by the National Institute of Standards NIST including SP 800-26 -Security SelfAssessment Guide for Information Technology Systems, SP 800-34, and 800-34 Rev 1- Contingency Planning Guide for Federal Information Systems, SP 800-37- Guide for Applying the Risk
• A Management Framework to Federal Information Systems, SP 800-53-Recommended Security Controls for Federal Information Systems and Organizations.
• Used the following applications for different security tasks: SYSLOG, Nessus, Nmap, Safeboot, WebSense, WebInspect, SurfControl, MBSA, SCCM 2007/2012.
• Resolved outstanding Plan of Actions Milestones POA M based on vulnerability.
• Used McAfee Host Intrusion Prevention IDS to identify and monitor potential threats and respond to them swiftly.
• Team Lead and Senior Network Engineer in charge of three Unix/Linux servers, fifty-two Microsoft Windows servers NT40/2000/2003/2008 , Exchange 2000 and Active Directory supporting up to 2,500 user community. Have been involved in all platforms of migration.
• Test, deploy and support networks ranging from small to mid-size systems, providing professional engineering services ranging from design, implementation, features, testing, regression testing, integration testing, and feasibility studies to project management and ongoing technical support.
• Dedicated, professional with solid work ethic and commitment to excellence.
• Have used some Computer forensics tools, such as password crackers, email converters, Encase, Forensic Toolkit FTK software applications during my graduate program.

Professional Experience

Confidential

Adjunct Professor

• Teaches material from approved curriculum and develops daily lesson plans to include instructional aids IP Networking, Cisco Networking, Client-Server Networking, Security Administration, Cybersecurity.
• Participates in school retention initiatives by providing regular, accurate, and timely feedback to students and the school concerning academics, behavior, attendance, etc.
• Motivates students to actively participate in all aspects of the educational process.
• Completes professional development and in-service activities in accordance with college standards.
• Maintains expertise in subject area and recommends improvements in curriculum design.
• Instructs students in laboratory safety procedures if applicable.
• Performs duties in the Learning Resource Center as assigned, participates in core course academic support programs, certification programs, and student professional associations.

Confidential

• Ensures the development of IT security policies, architectures, standards, best practices, and guidance, including common security classification schema within the FMS Network Infrastructure.
• Track, review, and coordinate system security documentation, including security plans, annual risk assessments, disaster recovery and contingency plans, Continuous Monitoring plans and also report system and program level Plan of Actions and Milestones POA M progress.
• Identifies security risks, threats and vulnerabilities of networks, systems, applications and new technology initiatives. Provides technical support in the development, testing and operation of firewalls, intrusion detection systems, and enterprise anti-virus and software deployment tools.
• Conducts complex security architecture analysis to evaluate and mitigate issues. Develops policies and procedures for securing the system infrastructure and applications.
• Develops complex technical and programmatic assessments, evaluates engineering and integration initiatives and provides complex technical support to assess security policies, standards and guidelines.
• Develops, implements, enforces and communicates security policies and/or plans for data, software applications, hardware and telecommunications.
• Performs highly complex product evaluations, recommends and implements products/services for network security. Validates and test complex security architecture and design solutions to produce detailed engineering specifications with recommended vendor technologies.
• Used McAfee Host Intrusion Prevention IDS to identify and monitor potential threats and respond to them swiftly.
• Use Nessus, MBSA Scan and SCCM 2012 for vulnerability scanning and resolutions.
• Used netcraft, Nmap and Webinspect for penetration testing and resolutions.
• Identifies and oversees the installation, modification or replacement of hardware or software components and any configuration change s that affects security.
• Provides complex technical oversight and enforcement of security directives, orders, standards, plans and procedures at server sites. Develops manuals and ensures system support personnel receive/maintain security awareness and training.
• Assesses the impact on the business unit/customer caused by theft, destruction, alteration or denial of access to information and reports to senior management.
• Provides leadership and work guidance to less experienced personnel.

Confidential

Information Technology Security Officer ITSO

• Ensure the development of IT security policies, architectures, standards, best practices, and guidance, including common security classification schema with OAR.
• Use Nessus, MBSA Scan and SCCM 2007 for vulnerability scanning and resolutions.
• Used Netcraft, Nmap and Webinspect for penetration testing and resolutions.
• Act as the Authorizing Official's Designated Representative AODR or Certification Agent CA , as determined by the OAR CIO for all systems.
• Track, review, and coordinate system security documentation including security plans, annual risk assessments, disaster recovery and contingency plans, Continuous Monitoring plans and also report system and program level Plan of Actions and Milestones POA M progress.
• Serve as a voting member of the NOAA IT Security Council and attend regularly scheduled meetings to obtain current information on issues relating to federal, DOC/NOAA IT security laws, policies, regulations, guidelines, and/or concerns.
• Ensured the proper documentation, administration, management, and operation of all Network Resources including but not limited to Active Directory, Policy implementation Windows Server 2003, Windows 2000 Server, Windows XP, Unix/Linux servers .
• Ensures 100 OAR participation in the NOAA IT Security Awareness course.

Confidential

Sr. Network Engineer/Info Security Operations

• Communicate with a broad base of end users and multiple management layers systems management and operational tools manage distributed system architecture and multiple topologies i.e., NAS, SANs, VLAN/LAN/WAN, backup data systems conduct and prepare feasibility studies develop client proposals assess internal and external emerging technologies understand and manage network file servers, applicable software, and troubleshooting techniques solve network server problems or network infrastructure issues and manage the performance and capacity of a VLAN/LAN/WAN environment with switches, routers, Internet Protocol IP/Pv6 and video teleconferencing.
• Ensured the proper documentation, administration, management, and operation of all Network Resources including but not limited to Active Directory, Policy implementation Windows Server 2003, Windows
• 2000 Server, , Windows XP, Unix/Linux servers . Migrated 4,500 users and 300 printers from NDS to Windows Server 2003 AD then to Windows Server 2008 Active Directory.
• Monitoring server performance, utilizing MOM Manager of Managers and Insight Manager by HP.
• Planned and tested Microsoft Virtual PC, VMware ESX server and Virtual Center to provide infrastructure for utility computing services and server consolidation.

Confidential

Microsoft Certified Trainer Manager/Instructor

• Coordinate and conduct training at different Training centers and client locations and work with the sales team and management to identify client needs and assess what classes would benefit the client.
• Design, implement and maintain cost-effective, highly available and high performing telecommunications, data communications, and client/server solutions to meet new requirements and plan and execute the installation of new networking components at different Training Centers.
• Teach courses leading to the following certifications: A-Plus Certification, Network-Plus Certification, Certified Novell Engineer Certification, MCSE Windows NT 4.0 Certification, MCSE Windows
• 2000/2003 , Windows Server 2008 certification MCITP, MCTS , Cisco Certified Network Associate CCNA Certification, and Microsoft Security Comptia Security Plus.

Confidential

Sr. Network Engineer/Security Engineer

• Ensured the proper documentation, administration, management, and operation of all Network Resources including but not limited to Active Directory, Policy implementation Windows Server 2003, Windows 2000 Server, Windows XP and Unix/Linux OS . Migrated users from Windows 2000 Server to Server 2003 AD.
• Planned and tested Microsoft Virtual PC, VMware ESX server and Virtual Center to provide infrastructure for utility computing services and server consolidation.
• Worked closely with management, support staff and end-users to ensure rapid resolution of IT issues.
• Participated with other information security engineers in creating and maintaining security systems.
• Managed both operational and policy-oriented information security projects and tasks, performed NIST-based Certification and Accreditation on enterprise systems and integrated multiple IT security systems to provide comprehensive information security.
• Participated in establishing and implementing backup and recovery policies and practices.
• Maintained detailed and up-to-date documentation of product standards for infrastructure including product standards including configuration templates, approved hardware lists, OS revisions and design templates.
• Followed NIST standard practice and procedures to design, implement, and support a security vulnerability and intrusion detection methodology and process.
• Developed an operating system Windows XP/VISTA hardening guides and information security policies according to the Federal Desktop Core Configuration Standards.
• Participated in audit, compliance, testing, remediation, and assessment activities.
• Worked as a consultant to the following companies where he provided:
• Ongoing Windows Server NT, XP/2000/2003/ administration including installation, maintenance and troubleshooting on daily basis. Provide support to address the availability and reliability issues on Windows application servers across multiple locations. Operational responsibilities include remediation of daily incident tickets, system compliance responsibilities, system run enhancement testing and staging, policy/procedure enhancements and adherence, Windows bug and security patching, and strategy recommendations.