| | | 20,000+ Fresh Resumes Monthly | |
|
|
| |
Click here or scroll down to respond to this candidateCandidate's Name
Street Address
Phone PHONE NUMBER AVAILABLE EMAIL AVAILABLE20+ years of progressive professional experience in Infrastructure Engineering, Change Management, Network and Systems Engineering and integration, Automation and Configuration Management, PKI and Identity and Identity Access Management Solutions, Elevated Privilege Account management, DevOps, and ITIL Problem Management. Knowledge and in depth understanding of full life cycle software development projects. Hands on experience with IAM administration, provisioning, and multi factor authentication implementation. SDD, SRD, SSP, Build Plan construction while leading PDRs, CDRs, and associated reviews in Federal and Government sector. In depth knowledge of Linux and Windows administration, monitoring and security tools, as well as various integrations of COTS applications in on-prem and various cloud platforms (GCP/Azure/AWS).EDUCATIONThe College of William & Mary B.B.A-Information Systems and Operations ManagementCertifications: VSA (Venafi Security Administrator), nCSE, CASP+, Sec+, CCNA, ITILv3, RHCSAClearance: NACI, Basic Background Investigation, Public TrustProfessional experience8/2023-3/2024 TEKSystemsPKI Architect - Arvest BankLead the enterprise strategy, roadmap, and implementation of Keyfactor Command ensuring seamless integration and migration from on-prem Microsoft ADCS environment (CAs, CRLs, CDPs) in multi domain Azure and GCP environment. Deployed containerized, beta version of Keyfactor Command into Kubernetes cluster to supplement certificate scanning and CI/CD code signing capabilites.Provided technical expertise and hands-on engineering support throughout the implementation process, including stakeholder engagement and requirements gathering, architectural design, Orchestrator and Gateway configuration, documentation, and API integrations with 3rd solutions; Splunk, Digicert, ticketing system, Intune, as well as various web server and load balancers.Collaborated closely with internal cross-functional teams and external vendors to onboard enterprise applications and network devices for auto enrollment utilizing SCEP, ACME, Ansible, NDES, as well as managed keys with CipherTrust Manager.Performed daily troubleshooting of SSL/encryption related issues, designed continuous monitoring and discovery jobs for certificate visibility and remediation, and presented monthly trending and risk mitigation progress to leadership board.7/2021 8/2023: The Home DepotCybersecurity Sr Staff Engineer - PKIArchitected, designed, deployed and maintained high availability, automated solutions to establish the usage of digital certificates and cryptographic keys for machine-to-machine identity and access management with cross functional teams within THD Enterprise and affiliates; Venafi, PKI Spotlight, Qualys, Stealthbits, Wavefront, along with external certificate solutions, Digicert, Sectigo, and Entrust.Designed and implemented powershell-based automation workflow to provision and renew X.509 certificates to all 2300+ stores for POS systems, registers, and wireless devices. Resulted in 22% (excess of 1million) store downtime decrease and renewal duration decrease from days to hours.Collaborated with stakeholders and vendors to enable trusted cert/ssh based authentication and encryption of various applications and network devices with on-prem Microsoft ADCS and Azure AD ecosystem utilizing rest API, SCEP, NDES, ACME, EST, and UEM solutions.Architected, configured, and deployed high availability Venafi solution and designed ongoing certificate discovery effort to mitigate risk (legacy hardware and software, misconfigured systems, gaps in security controls) within the THD enterprise; Monthly progress and trending presentation to executive leadership. Managed off-shore engineer team and streamlined json based cert expiration notification system to minimize risk and cert related outages by 45%, while reducing technical debt by $2.5 million across enterprise.Configured and maintained nCipher and Safenet Luna HSMs along with PKI peripherals; CRLs, CAs, and responders. Conducted key ceremonies as well as integrated certificate lifecycle intake with ServiceNow.Served as engineering level of escalation for encryption and PKI incident management and root-cause analysis outages, patching and upgrades, CIS/NIST hardening, and design of new client onboarding.12/2019 7/2021 DigicertSr Sales Engineer/Professional Services Engineer: PKI-Washington DCManaged the technical aspects of on-prem, cloud based, and hybrid DigiCert PKI and /IoT solutions delivery during pre-sales, on-boarding, and post-sales activities for global, federal and commercial client base. Analyzed customer specifications and architect/develop potential solutions based on DigiCert PKI/IoT solutions and services.Assessed customer FIPS compliance readiness of hardware and recommended and configured viable HSM solutions.Performed onsite, remote, and in-house deployments and troubleshooting of SSL/TLS, S/MIME, Code Signing, Wi-Fi Access, MDM/UEM, and Document Signing solutions to include Active Directory and peripheral solution and device integration (Card Management Solutions, Venafi, Keyfactor, AppviewX, ITSM, SOAP/REST API driven apps, Yubikey/Safenet token, VOIP and Network Devices, Ncipher and Safenet luna HSMs). Utilized python and OpenSSL to generate key pairs and automation.11/2018 12/2019 Freddie MacLead Information Security Engineer: PKI-Tysons Corner, VAWorked closely with technology and business stakeholders to implement key and certificate automation and upgrade goals, determine security requirements, design and implement solutions to meet business objectives, IT strategic initiatives, corporate and regulatory requirements.Executed enterprise-wide FIPS-142 and ISO 27001 PKI and certificate management governance processes in collaboration with Information Security and Enterprise Architecture to plan, communicate and deploy enterprise configurations for PKI and incident management.Provided technical guidance, developed design documents for Qualys, Venafi, Intune deployments, upgrades, and troubleshooting support as well as root cause analysis related to key and certificate management issues within Microsoft Enterprise ADCS, Entrust, and Digicert PKI.11/2017- 12/2018 GE TransportationPKI Architect: Chicago/Washington DCArchitect responsible for POC design and implementation of secure, high performance/availability, scalable Enterprise-wide PKI solution to include PKI requirements gathering and documentation, CA hierarchy and x509 certificate profile design, managed PKI solution selection, Active Directory and Service Now integration, and deployment, and administration.Created enterprise manuals, and provided guidance to key stakeholders on PKI lifecycle, processes and procedures, policies (CP/CPS), standards, business continuity management, automation, and governance of Digicerts SAS, MPKi, and Cert Central PKI solutions, along with Keyfactor Command for discovery and remediation.Responsible for day to day support of secure remote access, 802.1x auth, secure Wifi Access, Document Signing, Secure email, mobile device support, smart card logon, and support of hybrid cloud deployment architecture and on prem HSMs.11/2016 11/2017 IBM/NewGenSolutions Architect: PKI/IAM-Washington DCHands on architecture design and integration of solutions across SDLC to include solution requirements gathering, proof of concept, analysis, design, stakeholder CDR, deployment. Associated creation of; build plans, SDD, Requirements Documents, road maps, various models and flow diagrams.Engineering lead for full Axway Validation Authority Suite solution design and enterprise-wide integration into FEMA PKI Infrastructure that allowed multi-agency MFA authentication using FBCA cross certification. Supported design and deployment of full cycle Privileged Access Management and Audit/Reporting/Recording solution using Centrify, ForeFront TMG, and CyberArk, as well as IBM Webseal integration.Enterprise Identity Access Management and PKI integration; Hands on familiarity with Microsoft Certificate Services, on-prem and cloud based active directory, Rest and SOAP APIs, Certificate setup for Wi-Fi, routers, load balancers, SSL Inspection Devices, and various web services (Apache, Tomcat, IIS). Hands on experience with FIPS compliant hardware security modules, Smart Card solutions, USB and token certificate deployment, as well as provided sys admin support for Docker containerized dev environment with automated configuration management (Ansible, Puppet).10/2015-11/1016 Widepoint Security SolutionsSenior Systems Engineer: PKI/Identity Management-Washington DCProvided middleware engineering and management to identity and authentication internal systems including; Probaris ID, PIV-I Card, certificate on device, federated e-authentication, as well as managed root certificate authority HSMs.Installed, configured, deployed, and maintained various LAMP stacks and provisioned vms in a mixed Solaris/Linux and Windows PKI environment, hosted on Citrix XenServer and Vmware ESXi 6.0 farms. Implemented configuration management, privileged identity management, automation, patch management, backups, and disaster recovery using; Puppet, CyberArk, Spacewalk, Bacula,, Zenoss, bash and python scripts.Managed various projects to include CRL to Axway OCSP Responder solution design and migration, Axway Validation Authority Suite configuration deployment, RSA AA deployment, and certificate based authentication implementation to internally hosted middleware.5/2014-9/2015 Department of Commerce-National Oceanic and Atmospheric Administration (NOAA)Linux Solution Architect: Silver Spring, MDMaintained and streamlined enterprise Redhat 5/6/7 dev-prod physical and virtual server farm hosting various Geospatial applications (ESRI, Matlab, IDL, ArcGis, Geoserver, PostGis, ESRI), svn repositories, Apache-Tomcat, JBoss middlwares, Drupal and bootstrapped webapps, and integration with Oracle and PostGreSQL databases.Responded to various NIST STIGS, ISO 27001 Assessments, CIS compliance, remediated vulnerabilities, and deployed/maintained compliant environment using Puppet, Redhat Satellite Server.Developed long-range strategic IT infrastructure capacity planning in selection of hardware, software, tools, and application architecture. Translated business requirements into technical solutions, evaluated application architecture, recommended implementation of business logic and interfaced with executives and stakeholders.Created and deployed full disaster recovery strategy and COOP plan, CAC Enforcement/(Centrify, PuttyCAC), multi-factor authentication solution, patch management and configuration management solutions Redhat Satellite Server and Puppet, AD/Kerberos integrated authentication, KVM and Hyper-V virtualization, and Azure deployment with managed SAAS applications.6/2013-4/2014 Hewlett Packard (HP)/Ntelicor-Department of Housing and Urban Development (HUD)Senior Systems Engineer: Charleston WVResponsible for the design and implementation of HUD enterprise migration strategy from Solaris 9/10 to Linux (RedHat 5/6, CentOs) in support of HUD application infrastructure. Migration consisted of system identification, sizing and requirements analysis of distributed, multi-tier, clustered, systems running JBOSS, Weblogic, SunOne, Tomcat mid tiers and MySQL and Oracle 10/11g databases (2500+nodes).Configured, deployed, and managed, Oracle Exalogic and VMware compute nodes/virtual machines, Solaris zones and containers, ldoms, ILOMs. Experience implementing VMWare and Exalogic virtual infrastructure environment that consisted of ESXi Server, multiple virtual centers, vMotion, HA, DRS, VCB, Update Manage. Managed storage in coordination with storage team. Experience configuring, maintaining NFS, LDAP (PAM), Samba, and Puppet.Developed and executed disaster recovery plan for HUD critical and non-critical VMs and application data.Achieved $200k cost reduction in creation and implementation of enterprise network monitoring software and resource consolidation plan.12/2010-3/2013 KSJ & Associates-Military Health Systems /Defense Health Systems ServicesSystems Architect: Washington DCLead Systems Engineer/Architect managing enterprise SDLC of MHS applications (Solaris, Windows, RedHat, AIX); creating and translating technical requirements, documentation and design, builds and prototyping, testing methodologies, deployment and sustainment of Service Oriented Architecture based systems within DISA hosted environments. COTS product integration. Familiarity with ALTHA, EAS IV, CCQASInteract with Information Assurance, Project Management, Testing, Security Engineering, Enterprise Architecture, and various vendors as the govt technical lead to make recommendations for improvements to design, strategies, and deployment of solutions, while ensuring MHS SOA standards, Waterfall and Agile Scrum methodologies are supported and maintained.Created and prepared DHSS Design Requirement Worksheets (DRW), System Engineering Plan (SEP) ICD9-ICD10 conversion analysis and requirements gathering, HL7 interface analysis, Root Cause Analysis of system outages, coordinated DIT/SIT test scripts, process automation using shell and perl scripts, and conducted various TR/PDR/CDR presentations to executive clients.Successfully architected and deployed Oracle upgrade strategies, patches, iavas, and releases. VMware ESX 4.1/vsphere and RedHat KVM hypervisor admin. Middleware admin. Lead CAC/PKI/SSO implementations and various information assurance (ATO/RA/C&A) efforts, and was selected to nine member team that integrated standalone EAS IV system into Business Objects Common Services (multiple healthcare applications) environment that lead to 39.41% reporting time decrease within functional community (received DHSS recognition award as well as KSJ Employee of the Quarter).2/2008-12/2010 CGI Federal-US CourtsSenior Systems Engineer: Reston, VA/Washington DCManage and maintain Administrative Office of US Courts Compaq and HP server farm to include, VMware vsphere admin, project management, server builds, troubleshooting, migrations, tuning upgrades, hardening, and patching in a Solaris7-10/Red Hat 5/Windows Server 2003-08 environment.Architected and deployed solution that drastically decreased the US Court client downtime by building and deploying in-house hosting of redundant Informix instances and implementing high availability disk and tape backup solution, DB upgrade (Informix 7 to 11), optimized, streamlined, and consolidated database export process, thus enhancing export and backup process by 24%.Implemented data center green initiative with RedHat KVM virtualization deployment and administration, utilizing monitoring tools (Nagios), creating disaster recovery and COOP procedures, automating processes with shell and perl scripts incorporating sendmail, and documenting various processes for SOP catalog.8/2007-12/2008 Netstar-1/Federal Aviation Administration-FAASystems Engineer: Herndon, VASystems Administrator for central repository archive Air Traffic Control System Command Center data related to the control and flow of all national and international air traffic (20+Terabytes). Parsed, threaded, and archived all data.System administration (Windows/Unix) duties in to include; Active Directory (5.2) user management and troubleshooting, intranet and Lab WIKI creation and maintenance, DNS sub domain management, shell scripting, minor Oracle database admin, COTS and proprietary hardware/software support, sql queries, server tuning, patching, and upgrades.Backup administration using Veritas Netbackup, ArcServe Backup, EMC/Clariion management in association with configuration and maintenance of various libraries/arrays and web interface software (CAM, Insight Manager), Exabyte Ex80, Quantum PX510, StorEdge Tek 6100 series, HP 6100 series.Deployed and managed several enterprise systems/tools and application servers; network monitoring inventory management (EM7, Big Brother, BMC), network security, and revision control systems (Sharepoint, CVS, Subversion)03/2006-7/2007 Computer Sciences Corporation-CSCAlexandria, VA-Unix Systems Engineer/ Military Traffic Management Command/SDDC: Washington DCTeam provided technical assistance and guidance to over 200 DOD installations running Sun Solaris 6-10. This task included remote LAN/WAN support and troubleshooting, router ACL creation/modification, software and hardware firewall configuration, VPN support, and daily remote troubleshooting of TOPPS servers and WPS systems.Provided system performance tuning, storage management, and network troubleshooting expertise in administering standalone and network installations, file system management, backups, process control, user administration, and device management.Provided project management expertise coordinated deployment of resolution kits to sites, development of technical requirements, task scheduling, progress reporting, project budgeting.03/2005-3/2006 United States Navy-Naval Medical CenterTelemedicine Systems Engineer: Bethesda, MDFacilitated enterprise-wide Radworks to MedWeb PACS Teledermatology and Teleradiology systems migration that consisted of new product research, identification and analysis, software/hardware compatibility testing, acquisition of software and associated hardware, and deployment aboard Navy fleet vessels, hospitals, and facilities.Liaison between the Clinical Staff in Radiology (supporting all levels of users) and the Radiology Technologists aboard the vessels. Ensured accurate and timely transmission of images and data to the appropriate destinations. Managed enterprise level symmetric encryption, cryptographic solutions, and key storage.Member of four person team responsible for project management (Sharepoint MOSS/WSS,Visio, MS Project) and issue resolution of image transmission (network, desktop, and application) and PACS related issues aboard entire Naval fleet and select shore facilities.01/2005-3/2006 SI InternationalSystem Administrator (part-time/evenings); Rockville, MDProvided Active Directory system administration support to evening staff at corporate headquarters. Provided support for Outlook 2000, 2002, and 2003 in an Exchange 2000 environment.Administered Veritas back-up jobs, exchanged tapes, and monitored logs on a daily basis.Manage Active Directory user account contact objects, created and archived Exchange 2000 mailboxesImaged and setup laptops and desktops for onsite and remote users.06//2004-03/2005 Dept of Veterans AffairsCentral Incident and Response Capability-CIRCSecurity Engineer: Silver Spring, MDPerformed vulnerability and attack & penetration assessments in Internet, Intranet and Wireless environments.Conducted discovery and scanning of ports and services, responded to network and system intrusive activity, analyzed network traffic and concentrator logs to determine corrective action using tools such as netForensics and Snort 2.1-3.Created and compiled training materials to include Knowledge Base and current S.O.P documentationSupported VA network with installation, connection, and troubleshooting of Cisco secure VPN and related software; Anti-virus/ePO, Firewall, Dial-up, Citrix, CPRS, and Vista. Utilized Remedy ticketing system to track security events, incidents, and inquiries. |
