Feb 2024 – Jul 2025 · 1 yr 5 mos · United States · Remote

Feb 2023 – Feb 2024 · 1 yr · United States · Remote

May 2022 – Feb 2023 · 9 mos · Remote

Oct 2020 – May 2022 · 1 yr 7 mos · Remote

Jan 2019 – Oct 2020 · 1 yr 9 mos

• Directed the design and implementation of a strategic Cyber Assurance Assessment framework, integrating NIST 800-171, CSF, 800-53a, FedRAMP, CNSSI, CSA, and OSCAL standards to drive a 40% increase in compliance efficiency and enhance executive-level visibility into cloud risk.
• Championed enterprise-wide security documentation and knowledge management practices, leveraging Confluence to institutionalize cybersecurity program management guidance for internal stakeholders and external federal audit teams.
• Served as a senior subject matter expert (SME) for enterprise cloud assurance, defining and institutionalizing baseline controls based on NIST SP 800-53, CIS Critical Security Controls, and FedRAMP, resulting in a measurable uplift in regulatory alignment and security maturity.
• Advised federal stakeholders on secure cloud migration strategies, conducting deep technical assessments to align cloud service provider capabilities with DHS Continuous Diagnostics and Mitigation (CDM) requirements, directly contributing to secure federal data migration initiatives.
• Led enterprise cybersecurity risk assessments across classified and unclassified cloud environments, identifying systemic vulnerabilities, informing executive risk decisions, and deploying scalable remediation strategies that ensured NIST and FedRAMP compliance across the organization.

Aug 2017 – Jan 2019 · 1 yr 5 mos

• Designed and executed a comprehensive cyber assurance program, enhancing regulatory compliance across mission-critical systems.
• Served as a trusted advisor, fostering partnerships with security teams to ensure consistent governance.
• Developed standardized cybersecurity control baselines, improving audit readiness and compliance scores.
• Directed the implementation of an enterprise-wide eGRC tool, enhancing real-time security monitoring capabilities.

Apr 2014 – Aug 2017 · 3 yrs 4 mos

• Designed and implemented automated cybersecurity solutions, enhancing vulnerability detection efficiency by 40%.
• Led efforts to remediate vulnerabilities across Sandia’s enterprise network, significantly reducing security gaps.
• Developed innovative automation tools that improved scanning processes, decreasing false positives and boosting incident response.
• Conducted risk assessments for all corporate firewall exception requests.

Apr 2010 – Apr 2014 · 4 yrs

• Designed and implemented the Cyber Assurance Assessment Program Plan, enhancing risk visibility and compliance.
• Developed system security plans aligned with NIST and DOE standards, ensuring federal compliance.
• Conducted risk assessments for emerging technologies, proactively mitigating security threats.

Aug 2002 – Apr 2010 · 7 yrs 8 mos · United States · On-site

• Designed and implemented NIST SP 800-53 security controls, enhancing compliance for the Intelligence Community programs and improving regulatory adherence by 30%.
• Led the enterprise-wide deployment of Certification and Accreditation (C&A) processes, reducing compliance turnaround time by 40% and streamlining audits.
• Designed a virtual Active Directory environment, increasing system reliability and scalability while reducing infrastructure costs by 25% through optimized resource utilization.

Mar 2000 – Aug 2002 · 2 yrs 5 mos

• Migrated a Windows NT 4.0 domain to Windows 2000 Active Directory, including domain restructuring, upgrading domain controllers, and ensuring a smooth cutover with minimal downtime.
• Administered Microsoft Exchange Server 5.5, managing mailboxes, distribution lists, public folders, and troubleshooting mail flow and connectivity issues.
• Managed Active Directory and core network infrastructure, including DNS, DHCP, and WINS, along with group policies, system security, and backups.

Jan 1998 – Mar 2000 · 2 yrs 2 mos

• Installed and maintained hardware and software on Windows 95/98 and early Windows 2000 systems, including troubleshooting desktops, printers, and basic networking issues.
• Configured and supported dial-up and LAN-based internet connections, often setting up modems, network cards, and IP configurations.
• Provided on-site user support and training, helping employees navigate Office 97/2000, resolve Y2K-related issues, and manage data backups using floppy disks, ZIP drives, or tape storage.