SECURITY CERTIFICATIONS
CISSP

EDUCATION
M.B.A. Information Systems Technology
B.A. Business Administration

INFORMATION ASSURANCE

Federal Laws, Regulations Policies

FISMA, FIPS 199, NIST SP 800 series, DHS, OMB Circular, DOD, DCID 6/3, DITSCAP/DIACAP, Sarbanes-Oxley, HIPPA, DCID 6/3, ICD 703, DoDI 8500.2, DoD 8510-1M, Gramm-Leach-Bliley, Privacy Act, Clinger-Cohan Act, E-Gov Act, Homeland Security Act of 2002, Homeland Security Presidential Directives, Executive Order 12472, Federal Preparedness Circular 65, Executive Order 12196

Compliance Areas
Cyber Security, Risk Assessments (RA), Business Continuity, Disaster Recovery, System Security Plans (SSP), Certification and Accreditation ST&E, System Categorization Worksheets (SCW), Privacy Impact Assessments (PIA), Security Control Accessments (SCA), Contingency Plans (CP) Auditing, Memoranda of Understanding (MOU), Interconnection Security Agreement(s), Residual Risk Reports (RRR),SRR, STIG, DIACAP,DCID 6/3

Encryption/Authentication

PKI / CA, Radius, Smartcards, ArcSight

Oracle Security Tools and Products

Audit Vault, Database Vault, Fine Grained Auditing (FGA), Virtual Private Database (VPD), Logminer, Oracle Internet Directory (OID), Oracle Label Security, Flashback Query.

TECHNICAL SKILLS

Databases: Oracle 8, 9i, 10g. 11g, Oracle Financials 10.5, Oracle Financials 11.5.9, E-Business Suite R12

Oracle Products: Oracle Application Server, RMAN, Grid Control, PL/SQL, Oracle Internet Directory, Oracle
Enterprise Manager, Oracle Label Security

E-Business Suite Products: Oracle Financials, Oracle Alert, Concurrent Manager, Rapid Clone, Adpatch, Adadmin,

Rapid Install

ETL: Informatica, Cognos

Operating Systems: SUN SOLARIS, Linux, RISC 6000 AIX, Windows, VMS, MVS/XA, VM

PROFESSIONAL EXPERIENCE

03/09- Present - Confidential. Security Administrator/Warehouse Production DBA. For a Department of Defense agency, duties involve performing security checks and corrections using STIG and industry best practices; developing security standards, security policies; creating System Security Plans (SSP), backup/recovery plans; representing the agency’s best interest in security practices; enforcing separation of duties principle; securing PII; creating encryption functions; auditing; making recommendations on emerging trends in security architecture to achieve maximum compliance. DBA duties involve creating databases; patching; capacity planning; migration from 10g to 11g; backup and recovery using RMAN; creating partitions and materialized views for use with database VLDB with several terabytes; providing Cognos support for database; optimizing performance in queries in terabyte size databases; using expdp/impdp to import terabytes of data; providing support to developers in all aspects of job scheduling, tuning, and creating queries; mentoring; creating unix shell scripts and PL/SQL code.

07/07-03/09 – Confidential. As an E-Business Suite (Apps) DBA/Security Administrator duties included installation, patching, cloning and system administration of E-Business Suite R12; created Oracle Data Warehouse partitions and materialized views; assisted functional and technical staff with resolving errors; developed provisioning with Oracle Internet Directory (OID) with E-Business Suite using Single Sign On (SSO); established security criteria compliant with industry best practices and DCID 6/3 for the Oracle 10g and E-Business Suite; provided Oracle auditing and security support to achieve POA&M milestones; analyzed changes needed in applications and identity management to capture user identity in audit logs using OID and Enterprise User Security (EUS); worked with development teams to define security requirements for new and existing systems to comply with the agency's security architecture; developed cyber security standards and policies for web development.

07/04-07/07 - Confidential. Information Assurance Specialist/DBA Advised the agency on how to secure the Oracle environment; evaluated security products; worked with development teams to define security requirements for new systems to comply with the agency's security architecture; installed ArcSight; developed controls and scripts in Oracle to identify vulnerabilities in Oracle 9i/10g and Oracle Financials 11.9 databases; As part of DBA duties, performed troubleshooting for Informatica loads and setups; worked with CompuSearch Prism; performed backup/recovery using RMAN; migrated to 10g; applied patches; installed Oracle Application Server; implemented Oracle Internet Directory, Logminer, and Flashback Query;

08/01–06/04 - Confidential. (08/01-01/02 Temp to perm Vista RMS and Convergenz). Database Security Specialist. For Bureau Customs and Border Protection (CBP), created database security and audit scripts to comply with DHS policies, assessed vulnerabilities in the databases; worked with the CBP Oracle DBAs to achieve policy compliance; evaluated security products such as Oracle Label Security, Oracle Internet Directory, CA Entrust; produced security plans, prepared database security policy; worked with development teams to define security requirements for new systems to comply with the agency's security architecture; developed security standards, security policies, guides and security coding standards; made recommendations on emerging trends in security architecture to achieve maximum compliance;

10/00-06/01 - Confidential. Consultant DBA - Installed, performed backup/recovery; implemented database auditing for Oracle databases on Digital Unix and NT; developed PL/SQL procedures and Unix shell scripts.

06/00-10/00 - Confidential. Consultant DBA - Installed Oracle 8i Parallel Server on RISC 6000 AIX, created databases for the e-sales applications. Implemented database security; created backup/recovery scripts for the in-house DBAs.

03/00-10/00 - Confidential. Consultant DBA/System Administrator - Installed Oracle 8i on Linux; analyzed, designed, normalized the database for Fed2u.com; configured DBI for Perl DBI and Apache; created users, roles, privileges; performed backup/recovery operations.

12/99-03/00 - Confidential. Consultant DBA - Installed Oracle 8i for Broadvision, Siebel, PeopleSoft, Niku on Sun Solaris, HP, and NT; created groups and users on Unix.

09/99-12/99 - Confidential. Consultant- DBA - Tuned scripts for ReportWriter.

11/97-09/99 -Confidential. Consultant DBA - Installed ORACLE 7/8 on NT; performed backup/recovery, access control management, auditing; created scripts for data migration jobs; maintained role-based database security; managed users, roles and passwords.

09/96-11/97 - Confidential. DBA/System Administrator - Installed Oracle 7/8 on a Sun Sparc Solaris. Managed users, roles and passwords; performed backup and recovery; audited and tuned the databases; administered SQL*NET operations; created users and groups on Unix; created backup routines for Unix with shell scripts.

06/96-09/96 - Confidential. Consultant DBA - Performed DBA duties for transitioning DBAs on PeopleSoft HR/Payroll databases using Oracle 7 on HP 9000 servers; managed access control, performed backup/recovery.

04/96-06/96 - Confidential. Oracle Financials Consultant - Modified an inventory system using Oracle Receivables and Order Inventory running on Oracle Financials 10.5.

10/95-03/96 - Confidential. Consultant Oracle Financials DBA - Created alerts using Oracle Alert for Oracle General Ledger, Oracle Payables, and Oracle Purchasing using Oracle Financials on a Sun Sparc Solaris. Created programs using SQL*Loader, SQL*Plus, Shell and Unix Mail to convert legacy financial data into Oracle Financials 10.5; used Application Object Library (AOL) to register users, tables, and views. Generated reports and created requests using the Concurrent Manager; performed DBA duties such as access control, backup/recovery of databases, auditing.

08/95-9/95 - Confidential, installed ORACLE; performed backup/recovery, access control management, auditing, created scripts for data migration jobs; maintained role-based database security; managed users, roles and passwords.

05/95-8/95 - Confidential. Consultant DBA - Managed ORACLE 7 databases on RISC 6000/AIX, HP 3000, and Sun Sparc; managed user accounts, roles and passwords; performed backup/recovery; created stored procedures using PL/SQL.

6/94-8/94 - Confidential. Consultant/Programmer. Created reports and screens for applications using SQL*FORMS for Federal Deposit Insurance Corporation.

11/92-04/95 - Confidential. Consultant Analyst/Programmer - Enhanced and tuned DOE’s Visitor Assignment and Foreign Travel Management Systems; analyzed, designed, implemented database systems in Oracle 6 on an Amdahl VM using SQL*FORMS.

9/92-11/92 - Confidential. Consultant/Analyst. For the U.S. Army, conducted feasibility studies, analyzed, designed and developed databases.

8/92-9/92 - Confidential. Consultant/DBA. Performed DBA duties for the U.S. Air Force.

9/91-6/92 – Confidential. Consultant/Analyst/Programmer. For Department of Commerce, designed databases and created reports using SQL*FORMS.

04/91-09/91 - Confidential. DBA - Managed Oracle 6 databases for the U.S. Army Corps of Engineers; tuned the databases; performed shutdown and recovery operations.
08/90-04/91 - Inter-American Development Bank. Analyst/Programmer Consultant - Analyzed, designed and implemented a Budget Preparation System and Time Management System; created reports using DB2 on an IBM 4381 in AS and QMF.

04/90-08/90 - Confidential. DBA/System Administrator - For NIH, converted an order tracking system from an IBM 3090 to a Micro VAX 3400; installed Oracle 6 on MicroVAX 3400; managed accounts, users and passwords; tuned the database; performed shutdown and recovery operations; performed access control, backup/recovery on MicroVAX; configured remote access configurations.

11/86-04/90 - Confidential. Analyst/Programmer - For the U. S. Navy, conducted full life cycle development for various projects; performed functional design analysis, system design specifications, software development, implementation and maintenance of systems using Oracle on VAX 8650.