WORK EXPERIENCE:

Confidential

• Provides LAN/WAN and border protection interface maintaining a complete defense in depth security architecture through configuration, operation, integration, and maintenance of existing and future network, computer, application, and information defense tools
• Provide recommendations for enhanced security architecture and infrastructure for a large enterprise security operation
• Perform cost analysis, and implement different equipment models for comparative analysis of performance characteristics, and update equipment configuration
• Assist end-users with connectivity issues, troubleshoot problem calls through Remedy, and monitor traffic flow, preparation, installation of new equipment, and conduct Tech-refreshes
• Serve as an advisor for management of the network services department. Provide daily hands-on implementation and enforcement of DoD information assurance requirements on assigned Enterprise systems. Develop, implement, and ensure compliance with plans, policies, standards that establish the DLA Information Systems Security programs. Provide LAN/WAN expertise and guidance on planning, design, documentation, acquisition, implementation of STIGS Security Technical Implementation Guide . Able to identify threats and vulnerabilities, intrusion detection, fixing unprotected vulnerabilities, and improving the security and compliance of access points, systems, and networks. Conduct maintenance, modification, operation, and best practices to promote appropriate systems security policies. Ensure availability, data integrity and confidentiality through the planning, analysis, development, implementation, maintenance, and enhancement of information systems security programs, policies, procedures, and tools.
• Install perimeter defense systems including intrusion detection systems, firewalls, grid sensors, and enhanced rule sets to block sources of malicious traffic
• Conduct Continuity of Operations COOP and Disaster Recovery DR operations in accordance with customer plans and guidelines evaluate COOP and DR exercises and incident response training for personnel
• Plan and conduct Certification and Accreditation process from start to finish.
• Update the organization's systems security contingency plans and Disaster recovery procedures, then implement required plan testing
• Examine potential security violations to determine if the policy has been breached, assess the impact, and preserve evidence
• Install, support, monitor, test, and troubleshoot hardware and software upgrade network operating systems, software, and hardware to comply with IA requirements
• Provide leadership, education, management oversight, and technical guidance to all users on assigned legacy systems
• Experience with smart cards, certificates and public key encryption
• Configure, optimize, and test network servers, routers, and switches to ensure they comply with security policy, procedures, and technical requirements

• Educate and Enforce DoD/DLA Information Assurance security policies and procedures
• Develop plans and standard operating procedures as needed and directed
• Manage enterprise appliances to include:

• NETWORKING: Cisco, Enterasys, Aruba, routers, switches, and wireless InfoBLOX DNS
• WAN ACCELERATION: Riverbed Steelheads
• NETWORK MONITORING TOOLS: eNgenius Sniffer and Performance Manager, Enterasys NetSight, What's up Gold, IBM Intrusion Detection systems IDS , Wireshark, Solarwinds
• FIREWALLS: Checkpoint
• SCRIPTING LANGUAGES: Python, Bash, Powershell
• ETHICAL HACKING TOOLKIT:Google, WHOIS, Internet Archive, HTTrack, Netscan, NMAP, Netcat, Burpsuite, SQLmap, OpenVas, Nessus, Retina, Snort, John The Ripper, Cain and Abel, Ettercap, p0f, KaliLinux, Metasploit, Armitage, WebInspect, Aircrack, Solarwinds, Wireshark, and many more.

Confidential

• Integration of a variety of COTS and GOTS products in a mixed environment 2003/2008
• Utilize Remedy for trouble tickets, support requests and project statuses.
• Hardware installation and configuration within the Data Center Replace failed hard disk drives, power supplies, read-only memory ROM batteries and dual in-line memory modules DIMMs within the Data Center in accordance with technical support and maintenance agreements with various vendors
• Perform security vulnerability scanning and patch management of 100 information systems utilizing Retina, DISA Gold Disk and DISA's Vulnerability Management System VMS
• As an Applications Systems Engineer with the Enterprise Service Support Team, I maintain a premier all-source data fusion center supporting 24/7 operations managing various information systems in a multi-level security environment. I am responsible for implementing hardware and software upgrades, monitoring and generating reports for overall systems performance, troubleshooting LAN/WAN issues, maintaining various applications, and ensuring that patch management systems are up to date. Specific Tasks include:
• Manage the Active Directory structure and resource structure to include group policies, permissions, and exchange integration
• Manage multiple servers, workstations and Network Appliance configuration ensuring proper integration within the infrastructure
• Maintain ESX server clusters and all associated virtual machines VM's across multiple mission networks at various classification levels
• Ensure systems availability of all network systems TLAN, SLAN, and NLAN utilizing Solarwinds

Confidential

• Support the Secure Voice Program for a Secure Work Environment within the Federal Bureau of Investigations by maintaining accountability, inventory, and management of Enhanced Crypto materials for units. Assist with maintenance of Secure Terminal Equipment STE , various Fax machines, and KSV-21 Fortezza, Enhanced crypto cards.
• Expert knowledge of secure terminal equipment, fax machines, cryptographic equipment, electronic equipment, telecommunications systems, and telephone services
• Responsible for the installation, upgrade electronic devices, maintenance, and maintaining records on Secure Communication devices used by the DOJ, FBI and similar government agencies
• 11 years providing technically sound and consistent guidance for policies and guidelines to ensure protection of National Security Information provided by National Security Agency NSA on Communication Security COMSEC Programs
• Ensure appropriate security measures are set in place and followed on all cryptographic materials, equipment, documents, aids, and facilities in accordance with applicable governing directives, rules, regulations, policies and procedures for data and voice cryptographic equipment used on Bureau-wide network
• Liaison contact with external Satellite installations and coordinates work with Bureau components, Department of Justice DOJ , officials and representative or other intelligence agencies in order to facilitate guidance on Standard Operating Procedures SOP , and ensure all COMSEC material is shipped out, packaged in compliance with National Policy

Confidential

• I plan, develop, design, coordinate, modify, adapt, tailor, employ, integrate, and troubleshoot strategic and tactical telecommunications and electronic equipment. As the technical consultant planner, advisor, and coordinator on over 800 successful missions, I was able to advise management on the coordination, planning, and direct utilization of communications equipment, based on its tested and technical data. I apply my intellect to independently perform the most extraordinary, urgent, complex, and priority varied technical assignments. All time sensitive assignments are completed before required deadlines. Through conducting maintenance on all electronic equipment, all maintenance deficiencies are resolved and fixed within a 24 hour period to maintain fully functional mission essential equipment. Some specific maintenance tasks include:
• Manage the installation, testing, operation, maintenance, troubleshooting and performance of Non-classified Internet Protocol Router Network NIPRNet and Secure Internet Protocol Router Network SIPRNet computers and all associated pieces of peripheral equipment including high-speed printers and cryptographic equipment that comprise the Tactical Operation Center TOC
• Technical support for 40 users Provide technical support and assistance to the TOC users with installation, software, updates, and revisions as required. Configure hardware and software for optimum performance Develop technical and Standard Operating Procedures SOP for Local Area Network LAN development, implementation, and assist all soldiers in hardware and software capabilities and use of computers
• Data networking: Configured Cisco Layer 2/3 devices Routers and Switches . Virtual Local Area Networks VLAN , Virtual Private Networks VPN . Routing Protocols, EIGRP, OSPF, RIP, IGRP
• Firewalls
• Wireless: Wireless network interface Cards NIC , Wireless Access Points WAP 802.11, Network Access Control NAC , Wireless Loop back Redline AN-50, Enhanced Position Location Reporting System EPLRS , and Harris Wireless 7800
• Telephone Networking: Strong knowledge of PBX, including network design, installation, and troubleshooting. Spanning Tree Protocol STP , VLAN Trunking Protocol VTP , T-1, T-3, PSTN, ISDN, BRI, PRI, and Analog telephone lines. CISCO Voice over Internet Protocol VOIP , Secure L3 STE and STU III/ SECTERA, Mobile Subscriber Radio Terminal MSRT , Digital Non-Secure Voice Terminal DNVT , TA-312-PT Field Phone , and Cryptec secure fax
• Cable Installer: Inspect and test lines and cables, and record and analyze test results, measure signal strength in order to assess transmission characteristics and locate faults and malfunctions. Splice cables using hand tools, epoxy, or mechanical equipment. Set up service for customers through installing, modifying, adapting, tailoring, connecting, testing, and adjusting equipment Install equipment such as amplifiers and repeaters to maintain the strength of transmissions. Cables: CAT 5, UTP, STP, Coaxial, WD-1, Fiber optics and various electrical wire
• Video Teleconference: Tandberg MXP Codecs, Multiconference Unit MCU , Gatekeeper, Gateway, and Border Controller, Polycom Codecs, and MGC-100. H.320, H.323, H.239. One System Remote Video Terminal OSRVT , Tacticomp 1.5
• Computer Software: Win/XP/Vista, Microsoft Visio, MS Word, Works, Excel, Power Point, Access, Project, Outlook, Symantec Endpoint, Situation Awareness, Computerized Maintenance Management System CMMS software, Maintenance management software, and various diagnostic software
• Operating Systems: DOS, MS Windows NT/2000, Windows CE.netT 4.2 , and LINUX
• Programming: JAVA, JavaScript, HTML, and XML

Confidential

• Review complex data from multiple sources and determine relevant information to advise management on the coordination, planning, and direct utilization of network/communications security and equipment, based on policy, guidelines, Standard Operating Procedures SOP , and tested technical data
• Direct, supervise and train soldiers on security policies in accordance with AR 25-2 to ensure proper handling, usage and safeguarding of classified material.
• Organize audits to ensure compliance with directives and policies on Operation Security OPSEC , signal security SIGSEC , communications security COMSEC , Information Awareness IA and physical security
• Maintain all COMSEC subaccounts and issue Electronic Key Management System EKMS , Controlled Cryptographic Item CCI receive, receipt, and securely store, transfer, and maintain accountability of all COMSEC materiel issued
• Ensure that any incidents of suspected, possible or actual, physical security breach of COMSEC material is reported in accordance with SOP and Army regulations Conduct quality control checks to provide complete accountability at all times
• COMSEC material, publications, and aids are readily available to operations center personnel maintain a technical library of COMSEC and administrative publications, and ensure that all publications are current
• Develop communication emergency plans in order to safeguard assigned crypto systems and materials during an emergency
• COMSEC EUIPMENT: TACLANE /KG-175, KG-84, KYK-13, KOV-14, Data Transfer Device DTD , Automated Net Control Device ANCD , Simple Key Loader SKL , KOI-18, Electronic Key Management System EKMS