Summary
Overview
Work History
Education
Skills
Timeline
Generic

Christian Zavala

La Mesa,CA

Summary

Information Security Analyst with an active TS and hands-on DoD NIPR experience executing RMF (NIST 800-37/53; DoDI 8510.01) from implementation through continuous monitoring. I led daily ACAS scanning and remediation, sustaining ≥95% VRAM compliance, closed IAVM/IAVA taskers with staged SCCM/PowerShell rollouts and ACAS re-scans, and served as the ACAS POC during CCRI to help the team pass that segment. I enforce DISA STIGs and SCAP to maintain network eligibility, contribute evidence and implementation statements for eMASS via the ISSM to support ATO maintenance, and keep endpoint/security tooling healthy (AD/GPO/SCCM, Trellix ePO, vSphere). Cloud-literate, with AWS Certified Cloud Practitioner and Linux Essentials; currently 72% complete with a B.S. In Information Systems (expected 2026).

Overview

10
10
years of professional experience

Work History

Senior System Administrator

D3 Technologies
San Diego, CA
11.2022 - 02.2025
  • Executed daily ACAS scans; triaged CAT I/II/III; sustained ≥95% VRAM; ran weekly remediation reviews with Cyber to drive closure..
  • Owned IAVM/IAVA remediation: packaged KBs and scripted deployments via SCCM/PowerShell; used staged pilot rings (canary → OU/site → wider wave) before enterprise rollout; validated via ACAS re-scans; logged exceptions and created POA&Ms when required.
  • Contributed RMF evidence (implementation statements, scan results, screenshots) and coordinated submissions with the ISSM for eMASS; supported ATO maintenance with current artifacts and traceability.
  • Enforced DISA STIGs (Adobe Acrobat Reader DC, Microsoft Office, Microsoft Defender AV, Windows baselines) using STIG Viewer/Evaluate-STIG and GPO/SCCM; SCAP scans required for network connectivity.
  • CCRI impact: served as ACAS lead answering assessor RFIs; mobilized teammates to complete checklists and remediation; passed ACAS segment for the team.
  • Maintained Trellix (ePO) agents (remote/manual updates, clean re-installs when needed); performed routine vSphere updates; automated small-batch fixes/checks with PowerShell; tracked client issues in Jira.

Systems Administrator

D3 Technologies
San Diego, CA
05.2021 - 11.2022
  • Managed and maintained secure systems across Navy networks, applying STIGs and security patches to protect sensitive data.
  • Performed daily ACAS/SCAP scanning and troubleshooting, ensuring the system's security posture was compliant with DOD standards.
  • Led efforts in vulnerability tracking and system audits, providing detailed reports on security measures and risks to leadership. (VRAM)
  • Assist server admin. As directed in basic software packaging and deployments using the labs SCCM server.
  • Experience working in an Active Directory environment.
  • Perform needed hardware or software configuration changes, physical repairs as needed and coordination with applicable vendors for replacement parts.
  • Create & maintain system images of client systems and deploy client systems to end users as directed. Perform moves of client systems as directed.

Windows System Administration

Information Systems Solutions (ISS)
San Diego, CA
02.2021 - 05.2021
  • Re-imaged and deployed 100+ secure systems for Navy RDT&E networks, ensuring that all systems met security requirements.
  • Conducted over 100 vulnerability assessments using ACAS and mitigated security risks for workstations across the network.
  • Applied STIGs and security controls to protect classified and unclassified data on SIPR/NIPR networks.
  • Worked closely with security teams to optimize system performance and ensure compliance with NIST/RMF standards.Familiarity with the Jira ticketing system

NMCI Field Services Mid Level Technician

Perspecta
San Diego, CA
10.2020 - 02.2021
  • Re-imaged and upgraded 200+ systems, ensuring compliance with Navy security standards and closing security loopholes.
  • Configured network systems and implemented security controls to protect against unauthorized access and data breaches.
  • Assisted in troubleshooting network issues and provided secure configurations for classified environments.

Client Service Engineer

Abacus Next
San Diego, CA
10.2019 - 02.2020
  • Provided support for client system issues and implemented security solutions to protect against vulnerabilities.
  • Documented system configurations and recommended security improvements to enhance system resilience.
  • Engaged with clients on security best practices to ensure proper use of security features in their systems.

Air Traffic Controller

U.S Navy
San Diego, CA
08.2015 - 09.2019
  • Coordinated with adjacent air traffic facilities by utilizing effective and concise communication skills for the continuation of flight activity through transference of air traffic control services.
  • Facility Watch Supervisor directly responsible for over seeing control tower personnel ensuring the safe, orderly, and expeditious flow of all aircraft in airspace
  • Professionally managed and controlled 20,000 flight operations including non routine aircraft mechanical failures, medical evacuations and rescue missions.

Information Systems Technician

US Navy
San Diego, CA
09.2016 - 05.2018
  • Managed the security and maintenance of 70+ NIPR/SIPR network assets, ensuring the protection of confidential and classified data.
  • Configured and managed Active Directory, ensuring that users were assigned to proper security groups and adhered to network policies.
  • Created 17 SIPR tokens for command essential personnel.

Education

Bachelor of Arts - Information Systems

Western Governors University
06-2026

AWS Certified Cloud Practitioner
06-2025

Linux Essentials
03-2025

CompTIA Casp+
05-2024

CompTIA Project+
04-2024

CompTIA A+
03-2024

CompTIA Security+
10.2020

CompTIA Network+
07.2020

Associate of Arts - Liberal Arts And General Studies

American Military University
Charles Town, WV
10.2019

Skills

  • Active Top Secret Security Clearance
  • RMF/NIST Frameworks compliance
  • CompTIA Security, CASP, Network certified
  • Vulnerability Management: ACAS SCAP and EVALUATE STIG tools
  • STIG Implementation and evaluation
  • System Hardening and security patching
  • Active Directory Management and security policies

Timeline

Senior System Administrator

D3 Technologies
11.2022 - 02.2025

Systems Administrator

D3 Technologies
05.2021 - 11.2022

Windows System Administration

Information Systems Solutions (ISS)
02.2021 - 05.2021

NMCI Field Services Mid Level Technician

Perspecta
10.2020 - 02.2021

Client Service Engineer

Abacus Next
10.2019 - 02.2020

Information Systems Technician

US Navy
09.2016 - 05.2018

Air Traffic Controller

U.S Navy
08.2015 - 09.2019

Bachelor of Arts - Information Systems

Western Governors University

AWS Certified Cloud Practitioner

Linux Essentials

CompTIA Casp+

CompTIA Project+

CompTIA A+

CompTIA Security+

CompTIA Network+

Associate of Arts - Liberal Arts And General Studies

American Military University
Christian Zavala