STEVEN WILLIAMS

• Coordinate and submit Interim authorizations to test (IATT)s for new baseline installs.
• Perform Independent Verification and Validation (IV&V) of the security configurations of various afloat and sub-Program of Record (POR) systems.
• Conduct Department of Defense (DoD) system testing of Navy Systems in lab and operational environments.
• Conduct physical security checks of shipboard environments in accordance with DoD and intel policies and procedures.
• Coordinate and perform technical and non-technical assessements to evaluate compliance with information assurance policies and regulations according to DoD, Intelligence (INTEL), National Security Agency (NSA), Defense Information Systems Agency (DISA), National Institute of Standards and Technology (NIST) and other military/federal regulations. Conduct security analysis on site assessments.
• Develop Risk Management Framework (RMF) packages into XACTA, develop registration briefs for SCI RMF packages. Brief and provide updates to leadership on the status of RMF packages.
• Provide security recommendations to engineers and provide updates to schedule. Obtain site Authority to Operate (ATO) for operational sites.

• Over 16 years in Air National Guard.
• Ensured accountability of over 20 personnel during drill status.
• Provide highly responsive and timely administrative support for personnel who experience issues with pay and network access.
• Provide guidance, consultation, and occasional assistance as COMSEC Manager for Air Force COMSEC account.
• Provide consultation with RMF for Air Force classified network.

• Completed Authorization to Operate packages for base classified network using NIST 800-53 framework.
• Completed SCAP/STIG Scans using automated tools such as EvaluateSTIG.
• Updated POAMS in eMASS for classified system.
• Completed ATO supportive documentation to include hardware/software list and ports, protocols, and services worksheets.
• Assisted with network administration to including account management and patch management.
• Maintained and updated classified network policies to reflect current DoD information security standards of protection.
• Maintained defense in depth to include alarming vault, end of day checks, and enforcing EMSEC policies.
• Conducted accountability of classified vault materials to include semi-annual inventories of COMSEC, classified items, and Controlled Cryptographic equipment.
• Performed day-to-day custodial procedures such as mandatory software upgrades, IAVAs, system backups, password management, and account management on COMSEC infrastructure.
• Sustained availability of classified network infrastructure to include lease renewals, server installations, and encryptors.
• Maintained confidentiality by checking advanced key processor tamper seals, ensuring GSA approved safes are secured, and no classified material is left unsecured.
• Maintained Confidentiality, integrity, and availability of the organizations key management program to include following superseded key destruction, inventory of asymmetric/symmetric keys, issuing of keys to users, and loading to SKLs/end user equipment.
• Perform monthly two-person control inventory of two-person integrity safe.
• Manage KOV-29 tokens required for COMSEC access.
• Perform new hire onboarding to include account network access security clearance checks, request for new/periodic reinvestigation request for over 105 organization members.
• Conduct registration to include identify verification, digital fingerprinting using SWFT, enrollment into DISS, and cryptographic access program.
• Conduct incident response management in event of reported or suspected security infraction or incident.
• Provide Security and awareness training to include Emergency Access plans, proper vault procedures, safeguard procedures, COMSEC usage, safe procedures, NATO, Continuous evaluation, derivative classification, annual security manager training.
• Enhance organizational security learning through gamification of training to include playing security jeopardy.
• Perform semiannual Computer Security audits to ensure all equipment on base is properly labeled and secure.
• Ensure only NSA approved destruction methods are used for classified material.
• Maintain retention of classified records according to policies and standards.

Key Accomplishments:

• Went above and beyond by passing second COMSEC inspection.
• Performed exceptionally well in safeguarding, handling, and destroying COMSEC material. Received 100% pass rate on Critical items and 100% on Non-Critical Items for 3-year COMSEC audi
• Saved countless work hours completing ATO packages by utilizing Navy automation programs such as EvaluateSTIG and eMASSter.
• Validated over 100 network access forms to ensure personnel have appropriate cyber awareness training.
• Reduced COMSEC inventory by over 100 items.
• Completed ATO package in EMASS on classified network within two months with only one other person and minimal training.
• Closed out over 30 Plan of Actions and Milestones (POAMs) from previous ATO package.

• Performed monthly vulnerability scans using Retina.
• Performed system administrator functions such as account and password management.
• Re-keyed encryptors and upgraded firewalls.
• Performed custodial functions for 6 cabinet IT system such as software upgrades, backups, and troubleshooting.
• Created SSH tunnels for admins to remote in and troubleshoot system.
• Maintained availability for network infrastructure to include temperature and humidity.
• Performed monthly fail soft for all servers in IT stack.
• Ensured availability of redundant systems such as encryptors, firewalls, and HVAC units,
• Worked with federal clients such as California Department of Forestry and Fire Protection (CAL FIRE) and National Geospatial agency (GSA) to complete request and provide satellite imagery.

• Managed Theater Deployable Communications (TDC) deployed network environment.
• Minimized attack surface of laptops by hardening endpoints.
• Loaded symmetric operational keys into Radio Order Wire using simple key loader.
• Performed proper safeguard procedures for storing classified COMSEC material in GSA approved safes.