Frank Sojack

• Endpoint Management: Extensive experience managing enterprise Windows endpoint environments supporting approximately 35,000 workstations across a geographically dispersed federal organization. Administered Microsoft Configuration Manager (MECM/SCCM), OpenText ZENworks Configuration Management (ZCM), including ZCM Scripted Imaging, Group Policy, Windows Update Services, software distribution, hardware and software inventory, endpoint configuration, patch deployment, vulnerability remediation, troubleshooting, and operating-system lifecycle management.
• Operating-System Imaging and Deployment: Designed, tested, and maintained standardized Windows operating-system images and automated deployment processes using MECM task sequences and ZCM Scripted Imaging. Developed WinPE workflows, unattended installations, driver packages, application deployments, provisioning configurations, post-imaging scripts, and security-hardening configurations. Supported Windows 10 and Windows 11 migrations, UEFI and Secure Boot configurations, BIOS and firmware updates, BitLocker deployment, Sysprep, reference-image creation, vulnerability remediation, and deployment troubleshooting.
• Security Compliance and Vulnerability Management: Managed endpoint vulnerability identification, prioritization, remediation, validation, and reporting across a large federal computing environment. Coordinated operating-system, application, browser, firmware, and third-party software remediation through patching, configuration changes, software upgrades, removal of unsupported products, and compensating controls. Analyzed vulnerability-scan findings, evaluated operational impact, tracked corrective actions, verified remediation, documented exceptions, and supported compliance with federal cybersecurity policies, security baselines, and organizational risk-management requirements.
• Current IT Consulting: Provide independent technical consulting and hands-on support involving Windows endpoint engineering, MECM, ZCM Scripted Imaging, operating-system deployment, vulnerability management, security compliance, firmware and BIOS analysis, application compatibility, network segmentation, VLAN design, infrastructure troubleshooting, and technical documentation. Translate complex technical and security issues into practical implementation plans, remediation procedures, executive-level explanations, and sustainable support solutions.

• Identified opportunities for application optimization, redesign and development and troubleshot and resolved user and application issues.
• Oversaw development and implementation of improvements to support and network operations.
• Deployed, monitored, and maintained system installation, upgrades and network integration. This includes 35,000 workstations, 480 servers, 100+ software applications supporting 37,000 employees.
• Wrote policy, procedure and manuals governing internal IT use.
• Interviewed, hired, and trained staff.
• Supervised work of staff subordinates. Supervisory functions comprised from a range of duties which include planning, organizing and reviewing work, leading performance reviews and offering constructive feedback, administering personnel matters, and dealing effectively with employees and union representatives regarding employee-management concerns.
• Coordinated, managed, and delivered IT technical training and personal development classes for more than 500 IT staff via in person classroom environment, SAP Success Factors, and Cisco Webex each year.
• Responsible for advanced systems projects and served as technical authority on deployment and implementation of software applications and hardware upgrades.
• Possess extensive technical and working knowledge in Information Security and Vulnerability Assessments.
• Oversaw annual review/recertification of user accounts and access privileges for Bureau of Prisons (BOP).
• Oversaw activities of the section, which includes providing technical assistance to Information Resource Management (IRM) branches in BOP-HQ and computer services staff in the field.
• Provided regular updates to Information Security Officer regarding operating system and hardware compliance as well as detailed deficiency reports.
• Prepared and supervised preparation of training manuals, technical bulletins, newsletters, etc., to assist end users of various systems used by BOP.
• Remained current on emerging technologies, BOP / USDOJ policies and procedures, and personnel standards.
• Met with BOP Executive Staff weekly. I provided CIO with vital information such as project updates, staffing issues and overall status of my area of responsibility.
• Maintained Top Secret/SCI security clearance.

• Set up and maintained user accounts and contractor access.
• Developed and maintained workstation imaging strategy for BOP Enterprise which includes approximately 35,000 workstations.
• Imaged and prepared new computers for integration into government networks and systems.
• Provided basic end-user troubleshooting and desktop support for approximately 1,200 users.
• Explained technical information in clear terms to promote better understanding for non- technical users.
• Resolved diverse range of technical issues across multiple systems and applications for customers and end-users across various time zones.
• Patched software and installed new versions to eliminate security problems and protect data.
• Assisted with implementation and support of network monitoring tools.
• Configured and tested Windows Server operating systems with Roles and Features.
• Created nightly jobs for database backups. Recovered critical information from data backups to restore functionality.
• Rolled out software updates and applied server patches to thwart threats from penetrating networks.
• Provided basic and advanced hardware and software technical support to numerous Bureau of Prisons (BOP) field sites.
• Performed diagnostics, troubleshooting and repairs on personal computers (PC) and all related equipment.
• Possess extensive technical and working knowledge of PC hardware configurations, PC software configurations and workstation operating systems.
• Possess extensive technical and working knowledge of network operating systems used by BOP, information methodologies and techniques, information security management and network management troubleshooting skills.
• Locations included:

Lompoc, CA 06/1995 - 11/1997;

Florence, CO 11/1997 - 01/2013;

Washington, DC 02/2013 - 02/2016.

• Maneuvered communications vehicles, intrusion detection equipment, and other special- purpose equipment to facilitate operations.
• Led, managed, and performed force protection duties to protect personnel and resources.
• Executed decisions and actions based on previous experience and good judgment, sometimes revising procedures to accommodate unusual situations.
• Patrolled grounds to monitor status and safety of premises.
• Remained calm and alert especially during emergency situations to maintain order and confidence in authority.
• Operated security console equipment to monitor and control access. Monitored personnel access and maintained accurate security records. Observed CCTV cameras to detect potential threats and respond accordingly. Investigated incidents and wrote detailed reports for superior review. Developed security plans and procedures to protect personnel and assets. Responded to emergency situations quickly and calmly for professional support.
• Locations include:

Lackland AFB, TX 02/1985 - 06/1985;

March AFB, CA 06/1985 - 10/1987;

Rhein Main AB, Germany 11/1987 - 06/1990;

Vandenberg AFB, CA 07/1990 - 08/1994.