George H. Dean

Lead Cybersecurity Engineer supporting the SAP NS2 Cloud Security Engineering Team providing technical leadership to fellow Team members and configures, maintains, administers, and deploys a wide range of cyber security technologies such as Intrusion Prevention Systems, Intrusion Detection Systems, vulnerability scanners, network mapping tools and provide support and expertise for the related servers, databases and circuits.

Duties include:

• Providing operating system configuration and hardening support for Windows and Linux operating systems and security applications
• Provide Vulnerability scanning using Tenable Security Center and Nessus Manager
• Provide endpoint security utilizing McAfee/Trellix ePolicy Orchestrator and point products including Solidcore for Windows application control.
• Provide application control and File Integrity Monitoring (FIM) using TrendMicro Deep Security Manager
• Administer CrowdStrike Falcon for endpoint detection and response (EDR)
• Provide cloud security expertise for AWS, Azure, and GCP Federal and Commercial FedRAMP Level 4 environments
• Provide network architecture expertise as well as hardware and software troubleshooting methodology
• Utilize analytical methods for detecting malicious network activity
• Automation via Infrastructure as Code (IaC) with Terraform and Ansible
• Log management using SIEM tools including Splunk Dashboards, alerts, and reports
• Administer SQL Server Databases utilizing AWS RDS
• Utilize problem-solving skills and the ability to think strategically about security.

Senior Systems Engineer supporting the Cloud One Digital Engineering team which is responsible for the architecture, engineering and sustainment of AF Cloud Digital Engineering platform currently deployed on AWS GovCloud in FedRAMP Impact Level 2, 5 and 6 (Secret) Cloud environments.

Duties include:

• Provisioning and building Windows and Linux systems as well as AWS infrastructure using Terraform, Ansible, Bash, and Powershell
• IaC utilizing Jenkins pipelines
• Patching and hardening of systems utilizing tools such as Assured Compliance Assessment Solution (Tenable Nessus and SecurityCenter) for vulnerability scanning of Windows and Linux (Amazon Linux 2 and Redhat) EC2 instances as well as utilizing DISA SCAP Compliance Checker for performing SCAP scans of OS level settings and importing into DoD Security Technical Implementation Guides (STIGs) for further hardening and compliance reporting.
• Work with Cyber Teams to prepare Plan of Action and Milestones (POAM) for tracking of ongoing open vulnerabilities, provide artifacts such as ACAS and SCAP scans and STIG checklists for upload into eMASS as part of process of Certification and Accreditation for Authority to Operate (ATO).

Senior Systems Engineer supporting the My Navy Portal (MNP) Architecture, DevOps, and Cyber Teams.

Duties include:

• Writing and maintaining Terraform code in GitLab repository for CI/CD of AWS GovCloud infrastructure
• Maintaining Docker Container repository on GitLab and deployment of containers running in AWS Elastic Container Service (ECS) utilizing Terraform code.
• Build customized AMIs utilizing Ansible and Packer.
• Other supported services include ElasticSearch, Redis, and PostgreSQL running on Amazon Aurora RDS services
• Security hardening of all Cloud infrastructure and Containers, including Red Hat Enterprise Linux 8 and Red Hat Universal Base Images running on Docker containers.
• Build out of Active Directory environment to support AWS Workspaces VDI and DevSecOps tools.

AWS Cloud Solutions Engineer (SW Engineer Principal) providing infrastructure engineering support to PEO EIS integration of Product Manager (PdM) Army Training Information System (ATIS) into AWS GovCloud.

Duties Include:

• Design, plan, and integrate cloud computing and virtualization systems using infrastructure as code and modern cloud techniques such as DevOps and/or DevSecOps.
• Performance Analysis, Physical Configuration Analysis (PCA), Lifecycle Cost Analysis & Estimation, Decision Analysis and Evaluates and report on new cloud and virtualization technologies to enhance capabilities of cloud virtualized services.
• Provide systems engineering activities such as: Concept of Operations Formulation, Requirements Analysis and Engineering, System Architecting, System Analysis and Design, Interface and Data Architecture, Validation and Verification, System Integration, System & Operations.
• Maintain technical expertise relevant to industry standards and best practices in cloud computing and virtualization technologies such as cloud service provider architecture, design, and configuration; cloud deployment models including public, community, private, and hybrid; cloud service delivery models including infrastructure-, platform-, and software-as-a-service; automation; hypervisors; containers; virtual compute, storage, and networks; virtual infrastructure management; self-provisioning; and scaling.

Cloud Engineer (AWS and Azure) leading IaaS and PaaS public cloud migrations into AWS GovCloud and Azure Government.

Duties include:

• Assess compatibility and integration of products/services proposed as standards to build and integrate interdependent technologies in DHA Cloud environments.
• Participate in Cloud onboarding cost estimate and architectural reviews as well as direct interfacing with customers discuss project status, requirements, troubleshooting efforts, etc.
• Provide leadership and guidance to fellow Team members regarding Cloud technologies and services.
• Create Standard Operating Procedures and Guidelines for technologies and services used in DHA Cloud environments.
• Provide Cyber Security assessments for continuous monitoring including SCAP and ACAS scans, vulnerability mitigations, and ensuring readiness and compliance with DISA STIG's for multiple application, operating system, and cloud technologies.
• Provide engineering solutions for building IaaS environments utilizing AWS Virtual Private Cloud (VPC), Subnets, Security Groups, EC2 Windows and Linux instances, and Elastic Load Balancers utilizing AWS CLI and/or CloudFormation templates per customer requirements.
• Provide engineering solutions for building IaaS environments utilizing Azure Virtual Networks (VNet), Network and Application Security Groups, Windows and Linux Virtual Machines using available SKUs, and creation and management of Resource Groups and Storage Accounts.
• Provision PaaS database solutions utilizing Amazon Relational Database Service (RDS) including Oracle Enterprise Edition 12 databases.
• Provision PaaS database solutions utilizing Azure SQL Database and/or Managed Instances. Also, provision Azure Database for MySQL.
• Provision user roles and permissions using Active Directory Federation Services (ADFS) and AWS Identity and Access Management (IAM) utilizing custom JSON template.
• Create, configure and secure S3 buckets for customer object storage including configuration of server-side encryption (SSE-KMS) and server access logging.
• Create Lambda Python 3.8 scripts for managing EC2 snapshots and startup/shutdown of EC2 instances utilizing CloudWatch events.
• Provide installation and configuration of Windows and Linux operating systems including Windows Server 2012 R2, Windows Server 2016, Windows Server 2019 and Red Hat Enterprise Linux.
• Utilize AWS CLI for importing VMware volumes into AWS S3 and provisioning EC2 volumes and instances. Create custom Amazon Machine Images for provisioning Elastic Cloud Compute (EC2) virtual machines.
• Utilize Azure Cloud Shell (PowerShell) for provisioning Azure resources, specifically Virtual Machines, Managed Disks, and Network Interfaces.

Cloud Engineer (AWS) supporting an IaaS solution in AWS GovCloud environment for the Navy International Program Office (NIPO). Provide support for FMS Admin Case Tracking System (FACTS) which is a web application utilizing ColdFusion 11 and Oracle MySQL 5.7.x. Provide database administration and support for MS-SQL Server 2014.

• Duties include: Provide installation, configuration, and systems administration of Windows Server 2008 R2, Windows Server 2012 R2, and Red Hat Enterprise Linux 6.10 EC2 server instances. Create EC2 snapshots utilizing bash scripts and AWS CLI using Windows Subsystem for Linux (Ubuntu).
• Provide installation, configuration, and administration of Tenable ACAS and McAfee ePO HBSS servers and software including MS-SQL 2014.
• Provide Database Administration (DBA) for FACTS MySQL Database server including manipulation of Table data using custom SQL queries and scripts. Upload database dumps and archive logs to S3 buckets in AWS GovCloud.
• Provide maintenance of ColdFusion 11 source code including simple development modifications and version management utilizing Atlassian Bitbucket and Git.
• Provide project and task management and documentation utilizing Atlassian Jira and Confluence.
• Provide Cyber Security duties including running SCAP and ACAS scans and mitigate vulnerabilities as well as ensuring compliance with DISA STIG's. Also, function as ISSE for RMF accreditation and function as Systems Administrator for ACAS and HBSS.

Served as Team Lead responsible for supporting Engineering and Sustainment activities for a PKI enabled Microsoft Active Directory Federation Services (ADFS) Domain in Amazon Web Services (AWS). This system provides Smart Card authentication for Navy Reserve Forces users connecting to Microsoft Office 365 for Exchange Online, SharePoint Online, OneDrive for Business, and Skype for Business.

Duties include:

• Manage Engineering Team Members as well as Tier 1 Support Staff providing technical guidance and leadership.
• Serve as Lead Engineer for Cybersecurity and Continuous Monitoring as well as working with ISSO for preparation of RMF artifacts for ATO submission.
• Oversee the build out of cloud security components including Tenable Nessus and Systems Center (ACAS), McAfee ePO Host Based Security System (HBSS), Splunk Enterprise 6 for Event Log consolidation and management (SIEM), and Sophos UTM for NAT and Web Application Firewall (WAF).

Systems Engineer responsible for supporting remote access solutions for the Department of Defense Medical Health Services.
Duties include:

• Provide support for Active Directory and GPO configuration and troubleshooting
• SQL Server 2008 R2 Clusters
• VMWare ESXi 5.5
• Citrix Presentation Server on Windows 2003
• Citrix XenApp 6.5 on Windows 2008 R2
• Citrix Provisioning Server 7.6
• Citrix Edgesight.

Worked as Temp for Accelera Solutions until converted to FTE

Served as Senior Systems Engineer supporting migration and consolidation of US Navy Data Centers.
Duties include:

• Provide Citrix XenApp, VMware, and Windows Engineering support for Data Center Application Optimization (DCAO) project for the US Navy.
• Support included Presentation Server 4.5 on Windows 2003, XenApp 5.0 and XenApp 6.5 on Windows 2008 R2 as well as Citrix Web Interface 5.4 and Citrix Secure Gateway 3.3. Also, provide SQL Database support for Citrix Data Stores.

Served as Senior Systems Engineer supporting migration and consolidation of US Navy Data Centers.

Duties include:

• Provide Citrix XenApp, VMware, and Windows Engineering support for Data Center Application Optimization (DCAO) project for the US Navy.
• Support included Presentation Server 4.5 on Windows 2003, XenApp 5.0 and XenApp 6.5 on Windows 2008 R2 as well as Citrix Web Interface 5.4 and Citrix Secure Gateway 3.3. Also, provide SQL Database support for Citrix Data Stores.

Served as Technical Lead and Project Engineer for implementation of XenApp 5.0 Citrix Farm on Robins AFB NIPRNET to support medical applications (CHCS, AHLTA, DDRS, PIMR) for the Air Force Reserve and Air National Guard.

Duties include:

• Provided administration and support for Windows 2003 Active Directory domain consisting of Citrix XenApp Servers, Citrix Web Interface Servers, Domain Controllers, MS-SQL Servers, DNS Servers, and Juniper SA-4000 VPN on the Robins NIPRNET.
• Provided Tier 2 and Tier 3 end-user support for 1,000+ remote users.

Served as network engineering and technical professional to support the Robins AFB NIPRNET/SIPRNET Cisco Network Backbone and the Cisco Wireless Area Network (WAN) NIRPNET infrastructure, such as planning, design, implementation, and troubleshooting for over 16,000 fixed and over 1,500 wireless end users.

Duties include:

• Provided administration and support for approximately 40+ Windows 2003 Servers and Domain Controllers running various network applications such as Citrix Metaframe, CiscoWorks, HP Openview, Solarwinds ORION, Cisco ACS, RADIUS, DHCP, DNS, and MS-SQL on the Robins AFB NIPRNET/SIPRNET networks.
• Perform installation, administration and support of all NIRPNET Cisco wireless and NIPRNET/SIPRNET Cisco fixed network equipment, to include virus wall/firewall/boundary protection, remote access servers, routers, bridges, switches, hubs, TACLANES, patch panels, cabling, and access points.
• Develop engineering solutions based on requirements for upgrade and/or addition of existing NIPRNET equipment.

Served as network administrator at the 78th Medical Group to plan and implement network migration from Novell Netware 4.11 to Windows NT 4.0.

Duties include:

• Provision new Compaq servers running Windows NT 4.0 and connect to existing 78th Medical Group network.
• Setup Gateway Services for NetWare in Windows NT 4.0 to allow connectivity between the two Network operating systems.
• Create new user accounts and home folders and incrementally migrate users from Netware to NT.
• Review file share permissions in Netware and create new file shares on NT prior to file and directory migration.