Resume

• Directed the authorized deployment of 39 applications across IL2/4/5 environments in accordance with NIST 800-53.
• Led the execution and management of the Assessment and Authorization process for 5 classified and unclassified systems in accordance with Risk Management Framework (RMF) process.
• Mapped NIST 800-53 controls to technical implementations within cloud-native architectures, successfully securing 6 ATOs for AWS GovCloud environments implementing Zero Trust models.
• Translated complex government compliance mandates into actionable engineering requirements by integrating security tooling, SAST, and DAST directly into development workflows.
• Authored clear Body of Evidence (BoE) and core security documentation (SSP, RAR, SAR, PIA), facilitating seamless collaboration among executive management, stakeholders, and technical teams across the federal ATO ecosystem.

• Supported DOJ cloud computing architecture to meet FedRAMP compliance, successfully acquiring 6 ATOs for AWS GovCloud systems, including Zero Trust models.
• Led stakeholder and executive management meetings regarding mission-critical systems and initiated the coordination for 4 additional ATOs.
• Performed annual FISMA assessments, maintained core security documentation (SSP, RAR, SAR, PIA), remediated 30 POA&Ms across 6 systems.
• Performed security assessments of web applications, APIs, and mobile applications.
• Documented security processes and operational procedures for vulnerability and application security programs.

• Managed the Special Operation Forces (SOF) IT RMF Continuous Monitoring program, integrating NIST 800-53A to improve the Cybersecurity program.
• Audited compliance for 20 programs of record, including System Security Plans (SSP) and Security Risk Assessments, ensuring operations aligned with USSOCOM’s risk posture.
• Directed cybersecurity privacy and control verifications for 175+ unclassified systems, networks, and cloud service offerings.
• Conducted vulnerability scans and assessed the effectiveness of security controls.
• Managed enterprise vulnerability assessment tools including ACAS, Nessus, and Qualys.

Details to be added.

Details to be added.

Details to be added.