IT Security, Operations, and Projects

• Mechanical Engineering Technology, Hawkeye Tech 1977
• Computer Programming, Marshalltown Community College 1982
• C Programming, Sperry Corp, Dallas, TX 1985
• Project Management, Planning, Scheduling, & Control, Univ of Maryland 1985
• Contracting Officer Technical Rep (COTR) Training, Univ of Maryland 1987
• Action Officer Course, Arlington, VA 1988
• Warrant Officer Advanced, 251A, FT Gordon, GA, 1993
• Basic Information Engineering Principles (New Paradigms), Arlington, VA 1995
• Computer Aided Software Eng., EDS, Herndon, VA 1995
• Supervisory Development Course, FT Pickett, VA 1999
• Army Planning, Programming, Budgeting, Execution System, FT Pickett, VA 1999
• Administering Microsoft SMS 2.0, Des Moines, IA 2000
• Sidewinder Firewall Advanced Trng., Secure Computing, St Paul, MN 2001
• SQL Server 2000 Administration, FT McCoy, WI 2001
• Network Manager and Security Course, FT McCoy, WI 2001
• Information Operations 101, FT McCoy, WI 2002
• Incident Response Handler Course, FT McCoy, WI 2002
• IA Operational Training Exercise, Camp Douglas, VT 2002
• Harris STAT Vulnerability Assessment Software Training, CBT, 2003
• US Army Vulnerability Assessment Team Certification, Arlington, VA 2003
• ITIL v2 Foundations, Rock Island, IL 2003
• National Security Agency Information Assessment Mgmt., Omaha, NE 2003
• ITSM Course, Rock Island, IL 2004
• Encase Computer Forensic Training, Des Moines, IA 2005
• Information System Security Monitoring Course, Rock Island, IL 2006
• Retina Scanner Training, Rock Island, IL 2006
• Leadership Education and Development (LEAD) Course, Rock Island, IL 2006
• Army Mgmt. Staff College, CES, Intermediate Course, FT Leavenworth, KS 2007
• Wi-Fi Flying Squirrel Training, Rock Island, IL 2007
• Army Mgmt. Staff College, CES, Advance Course, FT Belvoir, VA 2008
• Websense Training, Des Moines, IA 2008
• CISSP Course, North Little Rock, AR 2008
• Planning and Implementing Active Directory Infrastructure, Rock Island, IL 2009
• Planning and Implementing Group Policy, Rock Island, IL 2009
• Juniper Networks Design Fundamentals, Mobile, AL 2012
• Blue Coat Essentials, Mobile, AL 2012
• Fortinet FortiGate Security Systems I, Mobile, AL 2012
• BeyondTrust Power Broker 101, Mobile, AL 2012
• VMware vSphere, Washington, DC 2013
• ITIL 2011 Foundations, Rock Island, IL 2013
• Security+ CE, Rock Island, IL 2014

APK-L Services, Davenport, IA                                                                                     Mar 2014-present

Owner

• Owner and sole employee of APK-L Services specializing in information technology analysis and security systems for retail operations and large farm operations in eastern Iowa.
• Develop and present PowerPoint briefings, Microsoft Project tracking files, technical specifications, network drawings, standards, processes, and procurement documentation.
• The project work involves developing relationships with customers, equipment and software vendors, network providers, suppliers, banks, and accountants.
• Conduct system scans; and setup appropriate firewall and antivirus capabilities.
• Telework from Davenport, IA, home office to conduct remote support.
• Train customer staff on new systems, and assist in process and policy development and documentation.

DRS-TSI, Rock Island, Arsenal, IL                                                                                Sep 2013- Feb 2014

Technical Manager, Information Technology

• Assigned as the hands-on Manager of the Rock Island Arsenal Network Operations Center (RIA NOC) for 24/7 support, 365 days a year.
• The over 600 Federal government and military customer base is spread across 55+ locations (mobile and fixed) CONUS and OCONUS.
• Customers include Army Sustainment Command, Corps of Engineers, and others. Supervise a staff of 16 employees (with 4 direct reports), including Tier 1 and 2 Help Desk network service analysts, satellite and telecommunications engineers, system administrators, and information assurance analysts.
• Coordinate with multiple satellite bandwidth providers, and their multiple teleports; and with the onsite Government COR.
• Lead the staff in maintaining and supporting all network devices, servers, satellite modems, encryption equipment, and VOIP phones.
• Chair weekly VTCs with downrange staff and major customers. Utilize the NOC team’s talents to manage multiple projects to upgrade software and equipment, close sites, and open new sites while maintaining an operational tempo.
• Chair the Configuration Control Board to manage all changes to infrastructure.
• Wrote and managed service agreements (SA) in accordance with ITIL with major customers.
• Maintained records of security incidents, and ensured investigation and analysis of incidents.
• In preparation for an Army Information Assurance inspection, managed and assisted in evaluation against DIACAP controls, DISA STIGS, FISMA, NIST, and Sarbanes-Oxley (SOX).
• Participated in monthly DISA eMASS teleconference.
• Managed the refinement and development of 37 policies and 30 procedures. In response to the Army inspection, developed a Plan of Action and Milestones (POAM) with over 50 checklist items.
• Used Retina Network Security Scanner to scan network and led information assurance vulnerability management (IAVM) response, scans, and mitigation efforts.
• Utilized system logs to assist in forensics.
• Provide reports, status updates and metrics to various military and government customers, as well as company stakeholders and senior management.
• Manage NOC staff, including recruitment, supervision, scheduling, development, evaluation, and disciplinary actions.

HQ, US Army Corps of Engineers                                                                                 Feb 2012 – Aug 2013

IT Engineer, GS-2210-13

• Tele-worked from Davenport, Iowa home; and traveled as IT Engineer for all Corps of Engineers classified network projects.
• Ensured service agreements (SA) were in accordance with ITIL.
• Assigned to multiple projects that included the Army CIO/G6 directed USACE Crypto Modernization; USACE Emergency Operations Command and Control; USACE SIPRNet (classified network) redesign from dedicated circuits to a tunneled environment (from link encryptors to network encryptors); and engineering of zero-client and virtual desktop infrastructure (VDI) on HQ USACE SIPRNet.
• The project work involved developing and using relationships with customers at all levels of USACE, and DOD, Army, and industry points of contact; and the authoring of PowerPoint briefings, Microsoft Project tracking files, technical specifications, Visio drawings, standards, processes, and procurement documentation (statements of work – SOW, and bills of material – BOM).

US Army Corps of Engineers, Humphreys Engineer Center, Alexandria, VA                 Mar 2011 – Feb 2012

District IT Chief, GS-2210-14

• District Information Technology Chief (ITC) for US Army Corp of Engineers at Humphreys Engineer Center Support Activity (HECSA) and Institute for Water Resources (IWR-NCR).
• Served as the principal consultant to the Division IT Chief and the site Director.
• Provided advice and assistance in technical mission accomplishment over a wide spectrum of operations that include day-to-day operations, tactical planning, organization, operational command and control, and readiness.
• Managed the development of policies and procedures.
• Developed Plans of Action and Milestones (POAMs).
• Provided IT oversight for 400 users; and roughly 20 network devices and server farm.
• Wrote and managed service agreements (SA) in accordance with ITIL with major customers.
• Maintained records of security incidents, and ensured investigation and analysis of incidents.
• In preparation for an Army Information Assurance inspection, managed and assisted in evaluation against DIACAP controls, DISA STIGS, FISMA, NIST, and Sarbanes-Oxley (SOX).
• Used Nessus Vulnerability Scanner and Retina Network Security Scanner to scan network and led information assurance vulnerability management (IAVM) response, scans, and mitigation efforts.
• Utilized system logs to assist in forensics.
• Used GFI Languard to map network, and Wireshark packet sniffer to determine sources, destinations, ports, and packet types.
• Served as project manager and engineered the implementation of wireless network, fiber infrastructure improvements, and inside plant restructure.
• Provided senior management with Microsoft Project tracking files, Visio architectural drawings, and PowerPoint status briefings. Supported District contracted support negotiations (i.e. plans, seat management, etc.).
• Coordinated closely with the contracted Lockheed-Martin (LM) Regional Manager and Site Lead. Managed the Operations Officer, the five people LM team, and the onsite Verizon technician.
• Acted as the Contracting Officer Representative; and managed the District IT $12M budget. Initiated weekly meetings with customer senior staff. Documented the current IT architecture (AS-IS); and engineered multiple proposals for site technology strategies and investments (TO-BE).
• Managed process improvement, IT services delivery, COOP support, and life-cycle management.
• Worked with the ACE-IT network team to engineer the implementation of redundant routes, and the internal physical layout of the expanded MPLS circuits.
• Led the project and engineering teams to design and implement the tunneling of network connections for ARCYBER and SOCOM from Humphreys Engineer Center to the FT Belvoir network.
• Led the ACE-IT team in reacting to an extended power outage in July 2011, and computer room flooding in September 2011.
• Was formally recognized by management and customer base for achieving significant customer relations improvement through my proactive communications, requirements gathering, documentation, and project completion.
• Deemed “FY11 Most Effective IT Chief” by my direct supervisor and the Deputy for Regional Management.

US Army Corps of Engineers, Gulf Region District, Victory Base Camp, Iraq               Aug 2010 – Mar 2011

Chief, Information Management, GS-2210-13

• As Chief of IT for Corps of Engineers in Iraq, managed classified and unclassified networks, VOIP, VTC, information assurance, system patching, helpdesk, and satellite services for 13 sites/900 users.
• Planned and managed the implementation of switch port security, and motion detection video cameras in all switch rooms.
• Maintained records of security incidents, and ensured investigation and analysis of incidents.
• Assured compliance with DIACAP controls, DISA STIGS, FISMA, and NIST.
• Managed the development of policies and procedures, and best business practices.
• Developed Plans of Action and Milestones (POAMs).
• Oversaw customer IT requirements, and assured alignment with standards and enterprise architecture.
• Wrote and managed service agreements (SA) in accordance with ITSM and ITIL with major customers.
• Used Retina Network Security Scanner to scan network and led information assurance vulnerability management (IAVM) response and mitigation efforts.
• Used GFI Languard to map network; Wireshark packet sniffer to determine sources, destinations, ports, and packet types; and Netcat to assist in debugging and investigation.
• Presented solutions to senior leadership, and served as project manager for all new initiatives.
• Managed contract personnel, fulfilled all supervisory functions for the 12 IT staff members, planned and managed departmental budget of $3M, and reported to the Deputy for all staffing functions.
• Coordinated with US Forces (Iraq), Dept of State, and foreign national representatives.
• Recognized by the Commander as a self-starter, team player, valued asset, and person who consistently accomplished the tasks on time or earlier, within budget, and in alignment with customer/mission requirements and enterprise standards.
• This resulted in being highly recommended for promotion to the ACE-IT HECSA IT Chief position by the Commander.

TACOM, Rock Island, IL                                                                                               Aug 2009 – Aug 2010

Computer Specialist GS-2210-12 Rock Island Arsenal

• Assigned as senior regional IT advisor for plans and policies for continuity of operations plans (COOP).
• Led IT staff in annual COOP exercise and grading of capabilities at Crane Army Ammunition Activity.
• Engineered IT solutions for identified weaknesses in the COOP processes.
• Coordinated with contractors, administrators, and other planners. Regularly assigned as Acting Chief, IT Business Management Team.
• Member of Army Materiel Command Communications IT Working Group. Collected, reviewed and briefed command wide metrics for IT user support and services.
• This was a temporary assignment because of Base Realignment and Closure affecting NETCOM.
• TACOM was also affected and prompted the acceptance of an assignment in Iraq.

NW Region CIO, Rock Island Arsenal, Rock Island, IL                                                  Dec 2002 – Aug 2009

Computer Specialist, GS-2210-13

• As an Army senior leader, was responsible to US Army NETCOM Regional CIO for projects, planning and policies for information technology (IT) related to base realignment and closure (BRAC/BCA), re-stationing, disaster recovery, homeland security, and force structure.
• Maintained professional contacts in the IMCOM Regions, NETCOM, and Army HQ.
• Assisted senior staff in force development, life-cycle management (AOLCM), joint strategic planning, developing best business practices (BBP), budget (PPBES), training, and acquisition management.
• Regularly assigned as Acting Chief, RCIO Customer Support Center.
• Exercised responsibility for formulation, development, preparation, presentation, and administration of regional IT objectives, personnel, funding, policies, programs, plans and projects.
• Administered, monitored, reviewed and analyzed projects.
• Guided installations in implementation of SCCM, Remedy, Websense, and enterprise anti-virus.
• Managed surveys and design charettes, oversaw and assured funding processes, and maintained oversight of contract development for installation infrastructure.
• Coordinated mission requirements and IT engineering, development, implementation, and operation with engineers, contractors, and others in USACE, FEMA, NSA, Reserves, and the National Guard.
• Wrote and managed service agreements (SA) in accordance with ITSM with major customers.
• Assisted Army CIO with revision of Information Assurance regulations (AR 25-2).
• Designed and implemented a program for vulnerability assessment of Regional Army installations. Developed guidance for all COOP in the region.
• Graduated Army Management Staff College (2007).
• Attended bootcamp, tested, and awarded Certified Information System Security Professional – CISSP #323145 (2008).
• Transferred to TACOM Rock Island because of Base Realignment and Closure (BRAC).

Joint Forces HQ, Computer Network Defense Team                                                      Dec 2000 – Dec 2008

Iowa National Guard, Camp Dodge, IA

Information Sys Tech, Chief Warrant Officer Four

• Attended monthly drills and was on call for response to network intrusion incidents.
• Second in command of the Computer Network Defense Team for a seven state region. Conducted IA assessments of the National Guard networks; provided reports, and briefings to commanders; and participated in mitigation of network vulnerabilities.
• Assured with DIACAP controls, and DISA STIGS.
• Scanned and mapped network with Visio and SNMP; and used Nmap to enumerate network and devices.
• Monitored network device logs, server and PC logs, and recommended configuration changes.
• Installed and conducted scans with Harris STAT; used Ethereal (later Wireshark) and Snort packet sniffers to determine sources, destinations, ports, and packet types during threat periods; and used Flying Squirrel to detect wireless systems.
• Also assigned to the Joint Incident Communications (JISCC) team to provide “command and control” via a satellite based communications solution for “first responders” that included 1.2 M fly-away antenna, a complement of VHF/UHF/800 MHz/ HF radios, IP phones, IT equipment and laptops, and video teleconferencing capabilities.
• Awarded the Meritorious Service Medal (second award).

DBS-IM, B1941, FT McCoy, WI                                                                                      Dec 2000 – Dec 2002

Computer Specialist, GS-2210-12

• As Information Assurance (IA) Manager for FT McCoy – Provided IA guidance and oversight as the primary advisor to the installation Commander.
• Developed, implemented, enforced and evaluated plans, policies, and procedures of the installation IA program.
• Scanned and mapped network with Visio and SNMP; and used Nmap to enumerate network and devices.
• Developed and implemented IA architecture, and installation-wide IA awareness programs for users, network managers, system administrators, and executives.
• Planned for and implemented SMS.
• Wrote and managed service agreements (SA) in accordance with ITSM with major customers.
• Managed the IA budget, and provided guidance to subordinates.
• Maintained records of security incidents, and ensured investigation and analysis of incidents.
• Met with investigative personnel and advised the Commander of security violations.
• Conducted assessment and compliance surveys as required.
• Installed and conducted scans with Harris STAT; used Ethereal packet sniffer to determine sources, destinations, ports, and packet types; and used Netcat to assist in debugging and investigation.
• Setup network DMZ; and designed and implemented redundant routes.
• Maintained records of security incidents, and ensured investigation and analysis of incidents.
• In preparation for an Army Information Assurance inspection, managed and assisted in evaluation against DIACAP controls, DISA STIGS, and NIST.
• Led information assurance vulnerability management (IAVM) response, scans, and mitigation efforts.
• Provided network and systems certification and accreditation/re-accreditation services.
• Reviewed and evaluated the security impact of new systems or system changes.
• Responsible to DOIM for the installation network and server farm; and multiple domains at 3 remote locations.
• Led IT staff in annual COOP and Force Protection exercises, and grading of capabilities.
• Engineered IT solutions for identified weaknesses in the COOP processes.
• Planned, coordinated, and assessed IT contractor support; and prepared solicitations, selections, plans, and cost estimates.
• Managed the fiber infrastructure, Cisco routers and switches, CacheFlow, Sidewinder firewall, and Net Watch system monitoring software.
• Monitored network device logs, server and PC logs, and recommended configuration changes.
• Represented FT McCoy on project to rebuild infrastructure ($20M), and coordinated with USACE and the contractors.
• Installed and conducted scans with Harris STAT; and a packet sniffer to determine sources, destinations, ports, and packet types during threat periods.

HQ Virginia National Guard, FT Pickett, Blackstone, VA                                               Aug 1999 – Dec 2000

Computer Specialist/Network Manager

Supervisory GS-0334-12

• Responsible to DOIM for statewide and installation networks that included multiple domains at 130 geographic locations.
• Planned implementation of SMS.
• Managed the Network Control Center. Directly supervised 5 people.
• Developed policies and procedures to secure network.
• Planned coordinated, executed, and assessed networked IT solutions and programs; including contractor support.
• Programmed and maintained budget, participated in PBAC, and managed all network-related acquisitions ($1M/yr).Prepared solicitations, selections, plans, and cost estimates.
• Assigned as Contracting Officers Technical Representative. Conducted project related meetings with contractors.
• Developed and implemented network security, risk management, and quality assurance policies.
• Provided solutions and policies to 20 regional information management officers (IMO).
• Wrote and managed service agreements (SA) with major customers.
• Developed, and executed short-range and long-range plans.
• Engineered changes to infrastructure of ATM, FRASI, and frame relay circuits in a statewide backbone.
• Configured and managed Cisco routers and switches, Hewlett-Packard remote monitor (RMON), CacheFlow,
• Foundry switches, Gauntlet and Sun Netra firewalls, Real Secure intrusion detection system, and WhatsUp Gold system monitoring software.
• Setup first implementation of DMZ.
• Used Harris STAT, ISS Scanner, and System Management Server 2.0 to resolve vulnerabilities; and managed the Microsoft Exchange services, Norton Antivirus, McAfee, and the Defense Messaging System (DMS).

Intermec Technologies, Government Systems Division, Chevy Chase, MD                   Apr 1997 – Aug 1999

Account Executive/Project Manager

• Responsible for government accounts in the National Capitol Region.
• Analyzed requirements, and recommended solutions.
• Managed multiple projects including the first smart card use in the federal government (GSA), a wireless network for Veteran Affairs, a parcel system for the Department of Energy, a wired/wireless labor tracking system for the US Air Force, and a help desk for the US Army.
• Drafted statements of work, BOMs, ROMs; managed subcontractors; wrote progress reports; and chaired project meetings.

National Guard Readiness Center, Arlington, VA                                                          Feb 1993 – Apr 1997

Project Manager, Chief Warrant Officer

• Project Manager for development of two National Guard logistic automation systems (ASSSC/ACIP).
• Accomplished nationwide survey of systems, submitted proposals to senior management, secured funding ($5M), and evaluated new equipment.
• Wrote contracts, expended funds, developed fielding plans, and coordinated hardware shipping.
• Designed and implemented the communication infrastructure.
• Wrote and managed contracts for computer aided software engineering (CASE). Coordinated installation of new systems, and developed COBOL and C application code.
• Managed subordinates in fielding, training, and testing.

• Information Assurance
• DoD
• Army
• Air Force
• COMSEC
• Network Security
• Active Directory
• Physical Security
• Special Operations
• Operational Planning
• Intelligence
• DIACAP
• Government Contracting
• Force Protection
• ITIL
• Contingency Planning
• Vulnerability Assessment
• Project Management
• Network Architecture
• Computer Forensics
• Strategic Planning
• Budget Process
• Supervision
• Personnel Evaluation
• Disaster Recovery

AFCEA, Infragard

English