CISSP, CCSE, CCSA, VCE, VCA

Senior Information Security Consultant

QUALIFICATIONS SUMMARY:

Our IT Specialist has over 15 years of experience in Information Security, as well as 5 years experience in Public Key Infrastructure (PKI). He holds the Certified Information Systems Security Professional (CISSP) certification, as well as other industry certifications. Additionally, he has functioned as a Naval Cryptologist, Department of Defense Information Assurance Manager, PKI Program Manager,, Information Security Consultant, and has expert knowledge in the area of network security architecture, Healthcare Security, Health Insurance Portability and Accountability Act (HIPAA), Virtual Private Networking (VPN), firewall, intrusion detection and e-commerce security.

He is experienced in managing and participating in the full range of project development with a specific emphasis on PKI, encryption, data security, and architecture.  He has a proven track record in highlighting and resolving issues in diverse technical environments to include health care, financial institutions, federal, state and local governments.

He is proficient with the following:

• Operating Systems
  Windows NT and 2000 Server and Workstation (4.0/3.51), Netware (3.12/4/5), Banyan Vines (6/7), Windows (XP/NT/98/95/3.11), Solaris (2.x.x / 7), SCO UNIX (6.0/6.1), Microsoft Project, Visio
• Network Management Tools
  HP Openview, CA Unicenter TNG, NETCOOL, Cisco Policy Manager, SNMP Protocol
• Network Protocols
  TCP/IP, IPX/SPX, Frame Relay, ATM, NetBEUI, PPP, SLIP, SMTP, SNMP, BOOTP, NAT, ARP, RIP, OSPF, IMAP, LDAP, HTTP, HTTPS, DHCP, SSL, SET, IPSec, L2TP, PPTP, MPLS
• Security Management and Administration
  Security Policy, Procedures, and Standards, Incident Response and Disaster Recovery, DoD Accreditation and Certification (DITSCAP), INFOSEC Training, Awareness, and Education
• Firewall Software
  Checkpoint Firewall-1, Symantec Raptor, CISCO PIX, Proxy Security
• Network Security and Intrusion Detection Systems
  ISS RealSecure, CISCO IDS, NA Cybercop, Netprowler, Tripwire
• Security Vulnerability Assessment Tools
  ISS Internet Scanner, System Scanner, Database Scanner, Wireless Scanner, NA Cybercop, Nessus, Nmap, Portscanners, Brute force password crackers, Netstumbler
• e-Business Solutions
  Web Access Management (RSA Cleartrust, Netegrity Siteminder), Single Sign-On Solutions, Authentication, Access Control, e-Business Architecture, X.509, SSL, HTTPS, LDAP, Portal Security
• Security Protocols, Standards, Tools, and Techniques
  VPN (IPSec, PPTP, L2TP, MPLS), E-Commerce (SSL, SET), e-Business, Single Sign-On (SSO), RAS (SecureID, RADIUS, SSH), PKI (asymmetric, symmetric, and application level encryption), Encryption standards and algorithms (DES, 3DES, RSA), Secure e-mail (S/MIME, PGP), Digital certificates, X.509, E-Health (HIPAA), E-Banking (GLBA, Identrust), Perimeter Security (DMZ), Security architecture and methodology, Wireless Security Technology (WEP, 802.11a / b)

EXPERIENCE:

• Federal Government Agency, Attack Impact Prediction
• State Department of Commerce, Security Assessment
• Federal Government Agency, INFOCON Planning Guide
• Commonwealth of Pennsylvania, (Agency) PKI Security Assessment
• Commonwealth of Pennsylvania, (Agency) VPN Pilot Implementation
• Retail Customer, E-commerce, and E-learning assessment
• Managed  Security Service, Rot Certificate Policy, Senior Auditor of Certificate Authority Implementation
• Academic Institution, Security Vulnerability Assessment
• Nuclear Power Corporation, E-business Security Assessment, Recommendation and Implementation
• Major Healthcare Organization, HIPAA Assessment, Review, and ‘Gap Analysis’

EDUCATION:

• Computer Technology Institute of Pittsburgh Network Management Diploma
• B.S. Point Park College, University of Pittsburgh – Information Technology (In progress)

SPECIALIZED TRAINING:

• Introduction and Advanced Checkpoint Firewall–1 Course
• Checkpoint VPN-1 Course
• Verisign Securing E-Commerce with PKI
• Internet Security Systems Internet Scanner and Database Scanner
• DoD Electronic Keying Material System (EKMS) course and certification
• Numerous other courses, seminars, and symposiums relative to the Information Security field

LICENSES/CERTIFICATES/AWARDS:

• CISSP - Certified Information Systems Security Professional
• CCSE - Certified Checkpoint Security Engineer
• CCSA - Certified Checkpoint Security Administrator
• VCE - Verisign Certified PKI Engineer
• VCA - Verisign Certified PKI Administrator
• Master’s Certificate-Information Technology Project Management–Duquesne University
• Certified DoD Information Assurance and COMSEC Manager
• Internet Security Systems (ISS) – Internet and Database Vulnerability Scanner

PROFESSIONAL AFFILIATIONS:

• Member, Information Systems Security Association (ISSA), Pittsburgh Chapter
• Member, Internet Security Task Force (ISTF)
• Member, International Information Systems Security Certification Consortium (ISC2)

Home | About | Services | Experience | News | Affiliates | Contact

 Copyright © 1997 - 2006 SecuraComm Consulting, Inc. All Rights Reserved.