Audited Risk Management Framework (RMF) controls self-assessed by Information Systems Security Officers (ISSO) and Information System Security Managers (ISSM) to determine compliance based on guidance from NIST special publications such as 800.30, 800.37, 800.53, DODIs, AFIs, FIPS, OWASP, SANS Top 20, and others. Audited the security of applications, servers, operating systems, and databases to obtain an Authorization to Operate (ATO) on the Air Force Network (AFNET). Assessed enclave’s ability to host classified and non-classified information while protecting CIA. Ensured the security of the Air Force network by identifying and presenting risks to Security Personnel decision makers.

• OWASP Top 10
• Risk Management Framework (RMF)
• eMASS
• Xacta
• NIST
• FIPS
• DODI
• AFI
• STIG Viewer
• OWASP 10
• Auditing
• Assessment and Reporting

Created the Information Technology company specializing in Vulnerability Assessment, Penetration testing, and Software Development.

Contract with Hexagon US Federal

React Software Development Supported the National Geospacial Intelligence Agency in creating custom mapping software.

• React
• Node
• Leaflet
• AWS

Contract with Chenega

Java Software Development Supported the Department of Health Agency (DHA) to maintain healthcare software.

• Java
• Eclipse

Contract with Up and Running, Inc

CMMI Appraisal Team Member. Attended the Introduction to CMMI for Development Course and acted as a member of the certifying team to recertify Up and Running’s CMMI Level 3 certification. I was tasked with going through documentation and mapping evidence to required process areas to demonstrate compliance. I led discussions, documented interviews, and was responsible for knowing which paragraphs and sentences evidenced compliance with specific areas of audit.

• CMMI
• Audit
• Process Improvement
• Policy and Documentation

Software Developer. Developed and maintained the Combat Ammunition Systems (CAS) web application that tracks munitions both in transit and in storage. Wrote several AngularJS modules focused on tracking and procuring inventory with respect to chain of command and proper request procedures in order to allow the distribution of arms and parts.

• Custodian Requests. Allowed 1) custodians to request issuance of munitions from MASOs 2) Custodians requesting munitions from MASOs to be removed from 1 DoDAAC and to their DoDAAC, formal requesting of munitions to be expended or turned in. 3) Custodians to view and print requests within their DoDAACs 4) MASOs to view and print, accept/reject all request for any DoDAACs that they were authorized. The module would create a Blob PDF of request and await MASO approval upon which the document would be given a print signature from the MASO. The MASO would then be directed to the Expend or Turn In modules with inventory populated ready for them to review and either expend or accept the turn in of said equipment.
• Regrouped Lots: Module allowed lots of munitions and parts to regrouped into larger lots and torn down into individual lots.
• Container Movements: Created module to view all containers such as Trailers, Aircrafts and Structures in a DoDAAC, its contents, and a chain of contents within contents. Authorized users were also able to move containers to different DoDAACs.
• Organization Shops (OrgShops) Allowed authorized users to add or deactivate OrgShops for DoDAAC which they administer.

Each module was broken down with one route file, multiple controllers, and HTML5 pages. Responsible for creating entities, view models, controllers, service classes, and sending objects in JSON to JavaScript services that linked to AngularJS controllers. Responsible for interfacing with Functional munitions SMEs to gather and interpret requirements to better develop code tailored to the end user. Coded unit tests for continuous monitoring and created documentation of system in Confluence. Utilized:

• Java
• Hibernate
• JPA
• RestAngular
• Oracle
• AngularJS
• Bootstrap
• TortoiseHg
• Jira
• Confluence
• Quality Center
• TomCat

Lead Developer. Worked in an Agile Environment to help develop an extensive and highly critical eligibility system for Medicaid, Medicare, DHR and other federal and local government systems.

• C#
• WebAPI
• MVC
• Angular
• Knockout
• Inrules
• JSON
• AJAX
• TFS

Lead Developer. Created an Active Directory web service for the enterprise to efficiently query the LDAP server. Created a centralized intranet design with a consistent look and feel. Produced templates for test scripts, and site and access point documentation. SharePoint lead. Provided direction on licensing and converting COTS products to SharePoint. Trained new developers in C#, MVC, Unit Testing, SQL (writing stored procedures, creating tables/views/functions, etc.), Visual Studio, etc. Migrated applications from Server 2003.

• C#
• MVC
• SQL
• JSON
• AJAX
• JavaScript
• Bootstrap
• FontAwesome
• VBA
• Splunk

Developed the syllabus for each course assigned based on ACICS and department criteria including learning objectives expressed in behavioral terms. Made all course materials including daily schedule, PowerPoints, assignments, certification objectives, instructional videos, etc. available via my self-funded, self-designed web application. Also, the web application allowed automated grading and storing of all homework, quizzes, and tests, in HTML in an SQL database. Related the instruction to careers and employer expectations. Prepared and graded examinations based upon course objectives and published exam schedule. Returned all assignments instantly through the site. Maintained a 50% higher certification pass rate than both full-time and part-time instructors teaching the same subject.

• C#
• Instructing
• Networking
• PC Repair

Lead Developer for 33 projects written in Classic ASP, and C# .NET. Uplifted, recoded, and recovered multiple applications. Responsible for entire SDLC. Gathered requirements, wrote documentation, gained approvals from management and customers, completed change notices, and provided continuous support and maintenance. Provided timely status reports and completed projects on time if not ahead of schedule. Created and maintained databases in both SQL and Oracle. Used SQL Management Studio 2014 to write stored procedures, functions, and custom types. Used SSRS to create custom reports.

• Web Forms
• MVC
• C#
• Classic ASP
• SQL
• Oracle
• Documentation