data center and cloud hosting security lead resume example

Responsibilities:

• I manage a team of 15 personnel that provide technical and operational Subject Matter Expertise (SME) in the following specialties: Wide Area Network (WAN), Local Area Network (LAN), Route/Switch, Cryptography, Network Security (Access Controls, Firewalls, Intrusion Detection and Protection), Automation, Network Management, and Configuration Management, and Security Information Event Management (SIEM).
• Cyber Security focused leader responsible for implementing the policies provided by DoN and other cyber agencies. In my capacity I also create policy, develop programs, establish procedures, and manage the planning of systems and processes that directly support our customer base. I lead a team of cyber engineers in the securing and prevention of any unauthorized access or misuse of Mission Owner data by installing access controls on a vast array and in-depth security configuration throughout our enterprise. I maintain a close working relationship with our Divisions Information System Security Manager, to provide rapid and reliable remediation to any internal or external threats.
• Maintains a vast portfolio of network and security technologies including Cisco (IOS, FXOS, NXOS), Linux, Firepower, Juniper, Palo Alto, Forigate; Layer 2/3 Virtual Private Network (VPN) solutions; Multi-Protocol Label Switching (MPLS); Network Management (SNMP, SFTP, NTP, NetFlow); Enterprise Email Relay Services; Type-1 Cryptography (KG-175, KG-250); and Routing Protocols (BGP, OSPF), Solarwinds Event Manager (SIEM), Stealthwatch and Splunk.
• Performed duties as a Network Security Engineer assigned to the administration of Cisco Data Center Security Operations Center (SOC); Managed a Hosting Fabric infrastructure, Cisco WAN and LAN environments including a variety of network routing and encryption protocols including BGP, OSPF, LISP, IPSec, Dynamic Multi-Point Virtual Private Network (DMVPN).
• Responsible for Risk Management Framework (RMF): network security compliance using DISA Security Technical Implementation Guides, audit, and sustainment of patching to mitigate or remove risk threats.
• CRYPTOGRAPHY: DC2HS Lead Element (LE) for a COMSEC account that supports several disparate Government agencies. In this capacity provided extensive knowledge of FIPS 140-2 compliance requirements as well as the management of 16 KG-175 TACLANEs providing critical Wide Area Network, secure communications to Defense Information Systems Agency (DISA), Navy Marine Corp Intranet (NMCI) and Research Development Test Evaluation (RDTE).

Key Accomplishments:

• Effectively managed a team of 15 personnel across multiple states including Charleston, NOLA, and Kansas City, including on-site and remote workers. Personnel included Active Duty, Contractor and DON Civilians. I provided the day-to-day objectives, activities, schedules, and priorities for each person using collaborative tools, calendars, rosters and daily sync meetings. I was also responsible for millions of dollars in network assets in support of unclassified and classified enclaves, in multiple geographic locations including Cloud facilities (Cloud Access Point), Charleston On Prem, NOLA and Kansas City.
• In conjunction with training readiness, I also placed a large emphasis in Security. I have dramatically improved the security readiness across every RMF package assigned: CSA, CNDS, DCI, and CPC in both the unclassified and classified security enclaves. My security readiness plan included integrating our package owners into the day-to-day operations and activities of my team, ensuring security was at the forefront of everything that we do. I used Project Management and Risk Management Framework (RMF) principles to minimize vulnerabilities and risks. Our team’s readiness has improved the overall readiness of our entire division and ensured that our network’s security posture is at its highest readiness state.
• Beginning December 20th, 2021 through March 15th, 2022 my team was instrumental in the identification, isolation and remediation of the LOG4J vulnerability which infected thousands of DoN assets. I was directly responsible for creating a LOG4J playbook in which my team members were able to rapidly and systematically provide a firewall between infected servers and the DISN backbone network. As a result of my leadership and the success of my team, I was awarded the 59370 Competency Employee of the Month for December, 2021.
• For five consecutive years maintained a 100% readiness rating for our command as the COMSEC Lead Element, responsible for a joint COMSEC account including multiple organizations, stakeholders and projects including NMCI, RDTE, DC2HS, and STACCS. I was personally accountable for over 15 Type-1 cryptographic devices, including cryptographic key management. There was not a single COMSEC or security incident throughout my tenure in this position! Using excellent oral and written communications techniques, I managed the training and readiness of multiple DoN agencies.