Engineer Security
Resume:
Emmanuel M. Lewis
************@*******.***
EDUCATION
MS, Information Security Policy and Management, Carnegie Mellon University,
2006
BS, Information Science and Systems, Morgan State University, 2004
SECURITY CLEARANCE:
Top Secret with SCI Full Scope Polygraph (Active)
Key Qualifications
Mr. Lewis worked with the National Security Agency (NSA) where he completed
two Type-1 Certifications as Lead Information Systems Security Engineer
(ISSE) in support to the United States Air Force. Mr. Lewis supported
various US Department of Defense programs such as: Key Management
Infrastructure; F-22; Joint Strike Fighter; Future Combat Systems; DDG-1000
Naval Destroyer; Secure Flight Termination System; Community Gold Standard;
Deep Dive; Cloud Computing, Malicious Code; Wireless LAN Security, Host
Based Security System, and Suite B Technologies. Prior to his departure
from NSA/IAD, Mr. Lewis also led an effort to develop an ISSE Training
Guide to ensure ISSE's were adequately equipped to provide guidance to DoD
clients.
Skills
Security Architectural Analysis; DoDAF Framework; System Administration:
SSH,FTP/SFTP, DNS, TCP/IP, Active Directory; Type-1 Crypto Certification;
MS Project; MS Office Suite (MS Word, Excel, PowerPoint, Access; Java
Programming; Visual Basic 6.0; XML; Oracle8; Red Hat Enterprise Linux
Certifications
NSTISSI 4011 and 4014
Beirut, Lebanon Graduate Studies -
Finance and Banking
August - March 1998
Experience
BOOZ ALLEN HAMILTON 2010-2011
Senior Systems Engineer
Coalition Data Control Solution (CDCS)
. Provided guidance to Program Executive Office Integration (PEO I) of
the US Army to assist with the development of a tactical solution that
would protect US Only and Bi-Lateral information exchange over a
Secret (REL) 4-Eyes tactical network.
. Conducted security architectural analysis of Afghan Mission Network
(AMN) to assist with the development CDCS.
National Cryptographic Solutions Management Office (NCSMO)
. Assisted with the development of a Unified Cryptographic Framework to
guide NSA present and future decisions regarding cryptographic
development. The DoDAF framework assisted with identifying potential
gaps within cryptographic products and capabilities to ensure future
cryptographic development was in alignment with DoD and IC mission
objectives. Based on DoDAF, templates such as OV-1, SV-4 and SV-5 were
developed to provide greater roadmap analysis through operational and
system views.
Enterprise Security Management (ESM)
. Provided Security Engineering Support to the DoD Enterprise Security
Management (ESM) Special Program Office (SPO). Assisted with the
development of a Commercial Engagement (CES) Strategy to address the
importance of commercial standards across DoD/IC and vendor
communities.
NATIONAL SECURITY AGENCY 2006-2010
Information Systems Security Engineer
. Served as Lead Information Systems Security Engineer (ISSE) for Two
NSA Type-1 Certifications in support to the United States Air Force
(USAF) F-22 effort.
. Assisted the US Air Force with an unprecedented capability that
assessed the operational status of the F-22 aircraft in a given
operational state
. Identified security risks, threats and vulnerabilities of the F-22
aircraft architecture.
. Led briefings with the NSA Technical Review Board to facilitate the
certification process on behalf of the US Air Force to ensure F-22
cryptographic compatibility.
. Authored doctrine for NSA Type-1 Certified Cryptographic devices.
. Worked closely with United States Navy with their DDG-1000 effort to
assist with the development of new security requirements regarding
Cross Domain Solutions (CDS) within a MLS environment.
. Provided Enterprise level Firewall, IDS/IPS, Intrusion Detection, and
Anti-virus support to the National Defense University during the
installation of Host Based Security System (HBSS).
Defense intelligence Agency 2005-2006
Vulnerability Analyst
. Assisted with the identification of flaws and weaknesses within client
systems to help prevent exploitation. Vulnerability scans were conducted
to determine appropriate levels of risk in accordance with DCID 6/3.
DCID 6/3 served as the compliance metrics for all vulnerability scans.
Systems that did not adhere to DCID 6/3 were not allowed for use on the
JWICS network. Participated in penetration testing
NORTHROP GRUMMAN 2002-2003
Business Continuity Planner
. Evaluated the retention time of Government Records via National
Inventory System. Ensured company files were appropriately backed up
in the event of data loss. Performed periodic maintenance tests to
ensure system recovery worked properly. Participated in the training
of employees on how best to react in the event of a disaster.
Contact this candidate