ENTERPRISE AND HIGHER-ED
Cyber Security Consultant, FSS Technologies (FSST), Durham, NH | 5 Years
Highlighted clients: Attorney Virginia Towler, ESQ
Conducted CyberSecurity Assessments and IT Audits for small businesses under the NHTA and NH SBDC federal grant, made recommendations to improve the security of the business's data, and triage technical issues to implement data protection and privacy controls
• Optimize and upgrade systems, redesign wireless networks, implement authentication and encryption policies on the network devices and databases in the business processes of clinicians
• Conduct user security awareness and training on effective methods of securing Personal Identifiable Information, credit cards and banking information, and electronic health information.
• Leverage security scanners and network tools to test networks and databases for vulnerabilities, mediating security threats in networks and databases to prevent breaches

Principal IT Auditor, (University of Kentucky), Lexington, KY | 2 Years
Assessed security vulnerabilities and tested controls for the university's IT audits. Gathered and wrote requirements from stakeholders and process owners in IT audits: leveraging tools such as Tenable Nessus, Nmap, and Wireshark.
• Leveraged various risk assessment frameworks: COBIT 2019, NIST CSF/800-53, IIA GTAG CSF, US-CERT CRR, COSO, to create flowcharts of data aggregation and business process data flow to solve issues and inform BI
• Analyzed IT controls, policies and procedures in the various colleges, and recommended safeguards for secure ETL integration to protect the integrity and accuracy of the EDW data, from colleges and business units' data lakes
• Assessed security controls adequacy for various data types; to meet the requirements for compliance to FERPA, PII, HIPAA, and the European Union’s GDPR.

CyberInfrastructure Research Engineer (CIE), University of New Hampshire (UNH) | 2 Years
Expanded access to High Performance Computing (HPC) resources at UNH, an R-1 university, helping researchers and faculty use the university's and XSEDE national computing system for data-intensive research and teaching.
• Gathered requirements across five major colleges and library services, assessing distinct research-data needs and the regulatory mandates and privacy requirements applicable to each.
• Researched and recommended high-performance computing (HPC) solutions aligned with those requirements to support data extraction, transformation, and loading (ETL) and analytics.
• Served as XSEDE Campus Champion, connecting the university community with national supercomputing resources through the Extreme Science and Engineering Discovery Environment.
• Developed and taught an introductory HPC module for faculty and graduate students, covering account setup, system access, and job submission using resources available through the Campus Champion Allocation Project.
• Created the university’s CyberInfrastructure Awareness Plan and led monthly lunch-and-learn sessions to build understanding and adoption of available computing resources.
• Presented on HPC and big data at major conferences and online workshops, facilitating discussions with data scientists and faculty from institutions nationwide.

Lexington Fayette County Health Department (LFCHD), Lexington, KY | 5 Years
Electronic Health Records Technical Project Manager
Led network infrastructure modernization supporting a $12M federally funded Electronic Health Records implementation across 12 locations, overseeing LAN/WLAN design and upgrades from equipment recommendations through configuration and installation of network devices and client hardware.
• Trained HealthFirst physicians on Dragon cSpeak software and the GE CPS EHR platform to support adoption and effective use.
• Gathered requirements from clinicians across medical specialties and developed customized Patient Encounter Forms using Visual Form Editor (VFE).
• Served as Master Security Officer, overseeing safeguards for protected health information (PHI) to support compliance with HIPAA's mandate for federal-qualified health centers (SQHC).

Information Security Lead
Lexington Fayette County Health Department (LFCHD) | 3 Years
Implemented Incident Response best-practice protocols, disaster recovery and business continuity procedures, by assuming the responsibility of managing an external InfoSec incident on employer-owned IT asset, resulted in retrieval and successful cleanup of the asset, and on-scheduled restoration of the IT asset.
Ensured the security, integrity, and availability of Cloud IT asset, by implementation and enforcement of data loss prevention (DLP) policies on the asset serving as web server administrator.
Administered McAfee ePO server, improving virus mitigation by 97%, through automated installation of the Agent, VSE versioning, DATs updates, and access protection policies on windows clients and servers

Firewall and VMware Administrator (LFCHD) | 3 Years
Technical liaison and Lead with WAN providers, AD, DNS, DHCP Teams on the LAN/WLAN expansion
Vested with ensuring the security of the agency’s IT assets and customers’ data: effectively recommended, procured, and spearheaded the corporate LAN security project through the configuration and implementation of Cisco ASA Firewall Access Rules and Context Security Policies.
Improved Information Security awareness and knowledge capacity within the agency by developing tutorials, making them available to the employees via the Intranet
Provided CyberSecurity training to new hires, distributed and posted Information Security pamphlets and posters throughout the agency, resulting in a 97% improvement of the Agency’s security posture.
Administered the VMware vSphere 5.0 Datacenter, improving the availability of the network resources