Engineer Network

Resume (v********)

MICHAEL P. BRININSTOOL

MSIA, CISSP, ITIL-F, Server+, OSHA-30

Home: **** ***** ***** *****, **********, NM 88310

Email: *********@*****.*** or ******@*******.***

Cell 575-***-****

SUMMARY

Objective:

To use my Managerial, Information Assurance (IA), Network Engineering, and System Administration skills and experience in a fast-paced dynamic environment

Education:

MSIA - Master of Science in Information Assurance, (2010)

BSCS - Bachelor of Science in Computer Science, (1984)

Certifications:

CISSP (Certified Information System Security Professional) Aug 2009 – membership # 313293

Server CompTIA) Aug 2013 – CompTIA Career ID# COMP001020584293

ITIL-F (Exin ITIL Foundation in IT Service Mgmt) Jul 2013 –ID# 4794746.1232108

OSHA-30 Feb 2014 –ID# 36-900******

Working on RHCE, OSCP, CEH and renewing CCNA

Skilled with:

Linux (22 yrs), Windows (22 yrs), OS-X (14 yrs), Solaris (5 yrs), System V R2, R3 and R4 Unix (10 yrs)

Firewall administration (Linux Iptables)(20 yrs)

Network filtering (Linux IPtables(20 yrs), Cisco ACLs(22 yrs))

Bash,sh,ksh (31 yrs), Powershell (4 yrs), PERL (20 yrs)

Intrusion Detection (SNORT)

Data Analytics using Excel

Vulnerability assessments (ACAS (Linux), Retina (Windows), OpenVAS (Linux), Qtip (Windows))

Managing projects and personnel

Preparation of DIACAP Artifacts for classified and unclassified networks

Researching and writing Information Assurance policies and procedures

Analyzing Intrusion Detection System logs for patterns

Web site maintenance

Share Point site management

Microsoft Office (Word, Excel, PowerPoint, Project)

Analyzing incidents and issues for patterns

Developing trouble ticket systems using Remedy and Bugzilla

Process development

Directed aspects of Network Engineering, including:

802.1x implementation

Exchange 2003 to Exchange 2010 migration

Common Access Card (CaC) authentication implementation

Security Procedures and Process Planning, Implementing and Review

Business needs analysis and product specification & evaluation

Management of internal electronic & information security

Management of technical personnel, schedules, vendor relationships, Network Operations Centers

Designer of Points-of-Presence (POPs), networks, server farms; cable, data, and power infrastructure and distribution systems

Matrix management & resource allocation

Proposal development & presentation

Project planning & management

Technical writing & training

EXPERIENCE

NCI Contractor at HFPA, Ft. Bliss and remote for Ft. Irwin Jan 2017-Mar 2017 40 hours/wk

DoD SECRET Clearance, with SSBI.

Information Assurance Officer

Coordinated with multiple vendors to get documentation for systems being installed in the new hospitals in preparation for DIACAP and RMF (NIST 800-53) accreditations.

Backup IT consultant

Vortechx Contractor at NETCOM, Ft. Huachuca Jun 2016-Dec 2016 40 hours/wk

DoD SECRET Clearance, with SSBI.

Senior ACAS Systems Engineer

Wrote bash scripts on Red Hat Linux to send vulnerability data to ArcSight connector servers on Red Hat Linux and documented for Major Army commands

Tested new configurations of the Army ACAS solution (Tenable Security Center and Tenable Nessus Scanners) on Red Hat Linux and Windows Serer 2008R2 and Windows Server 2012.

Wrote Powershell program to parse through ACAS debug files to save debugging time

Wrote Enterprise Test Plans, Enterprise Implementation Plans, and System Test Reports

Extensive use of bash, Microsoft Word, Excel, Share Point and Power Shell

Worked escalated trouble tickets on an as-needed basis

Catapult Technologies (Part of SC3), White Sands Missile Range, NM Feb 2016-Jun 2016 40 hours/wk

DoD SECRET Clearance, with SSBI.

Network and Telecommunication Lead and Site lead, (WSMR ARL Service Desk)

Conducted vulnerability assessment scans of workstations, using ACAS (Nessus) for technicians before final scan from IA office release onto the network

Managed 7 Service desk personnel, 1 unix/linux admin, 1 telecommunications technician and 2 network engineers

Worked Networking tickets on an as-needed basis

Tracked certifications and training records in the Army Training and Certification tracking Systems (ATCTS)

Extensive use of Microsoft Word, Excel, PowerPoint, Share Point and Power Shell

Vectrus (formerly ITT Exelis), Colorado Springs, CO Apr 2012-Jan 2016 56-84 hours/wk

DoD SECRET Clearance, with SSBI.

Cyber Security Analyst, TNOSC (Theater Network Operations Security Center-Kuwait) Oct 2015-Jan 2016 56 hours/wk

Provided key government personnel with general information security support

Provided key government personnel with policy coordination and interpretation support

Conducted daily, weekly and monthly vulnerability assessment scans of the network servers and clients, using ACAS (Nessus) on Red Hat Linux for multiple bases within the middle East

Reported vulnerabilities to higher commands daily

Provided follow-on technical analysis of vulnerabilities and mitigation efficacy

Daily ticket actions in Remedy Action Request System

Tracked certifications and training records in the Army Training and Certification tracking Systems (ATCTS)

Extensive use of Microsoft Word, Excel, PowerPoint, Share Point and Power Shell

Information Assurance Lead at RNOSC-A (Regional Network Operations Security Center-Afghanistan) Apr 2014-Oct 2015 56-84 hours/wk

Standard, Elevated and Foreign National account request processing

Provided key government personnel with general information security support

Provided key government personnel with policy coordination and interpretation support

Provided ITT Exelis management with regulatory interpretation support

Conducted daily, weekly and monthly vulnerability assessment scans of the network servers and clients, using eEye Retina, ACAS (Nessus) on Red Hat Linux and Q-Tip for multiple bases within Afghanistan

Reported vulnerabilities to higher commands weekly

Provided follow-on technical analysis of vulnerabilities and mitigation efficacy

Daily ticket actions in Remedy Action Request System

Refined computer incident response guidelines based on higher command guidelines

Managed security incident identification, containment and clean up, by correlating a variety of reports from HBSS, ARCsight on Red Hat Linux, BlueCoat, ACAS on Red Hat Linux, and Active Directory

Tracked certifications and training records in the Army Training and Certification tracking Systems (ATCTS)

Extensive use of Microsoft Word and Excel

Alternate Site Lead at FOB Shank, Afghanistan Apr 2013-May 2013 56-84 hours/wk

Lead System Administrator at FOB Shank, Afghanistan Oct 2013-Apr 2014 56-84 hours/wk

Information Assurance Analyst at FOB Shank, Afghanistan May 2012-Oct 1013 56-84 hours/wk

Elevated Account creations in Active Directory

File Server maintenance on Windows 2008 R2 SP1

Printer Server maintenance

802.1x implementation in Active Directory

Exchange 2010 monitoring and maintenance

Provided key government personnel with general information security support

Provided key government personnel with policy coordination and interpretation support

Provided ITT Exelis management with regulatory interpretation support

Assisted with the development and implementation of a defensive security program to protect information systems and documents.

Streamlined account approval process – converted to all-digital

Conducted daily, weekly and monthly vulnerability assessment scans of the network servers and clients, using eEye Retina and Q-Tip

Reported vulnerabilities to higher commands weekly

Provided follow-on technical analysis of vulnerabilities and mitigation efficacy

Directed other System Administrators in patching and other mitigation efforts

Debugged SCCM issues

Utilized PSexec, GFI Languard, and custom Power Shell scripts to push spot patches

Daily ticket actions in Remedy Action Request System, including Access requests, GPO modification requests, account creation requests, and security incidents

Developed computer incident response guidelines based on higher command guidelines

Managed security incident containment and clean up

Tracked certifications and training records in the Army Training and Certification tracking Systems (ATCTS)

Generated weekly BlueCoat usage reports for sanctioning network abusers

Served as Fire Warden, Mail Officer, Alternate Site Lead

Extensive use of Microsoft Word and Excel

Cherokee Information Services, Inc., Ft. Rucker, AL Sep 2011-Apr 2012 40 hours/wk

DoD SECRET Clearance, with SSBI.

Information Assurance Manager (IAM) at US Army Aviation Center of Excellence (USAACE), Ft. Rucker

Developed roadmap for an IA program to be implemented across USAACE, consisting of a training program, organizational procedures, and policies taking into consideration legal, regulatory and technical requirements.

Initiated “type accreditation” of AH-64D classroom setup as a type III closed, restricted network.

Was the focal point for IA regulation interpretation

Extensive use of Microsoft Word and Excel.

RhinoCorps, Ltd., Co., Albuquerque, NM Jul 2003-Jun 2011 40 hours/wk

DoD SECRET Clearance, with SSBI.

Held DoE L Clearance.

Cleared for DoD TS Clearance.

Senior Network Engineer Mar 2010-Jun 2011 40 hours/wk

Wrote responses to IT and IA related portions of Requests For Proposals (RFPs).

MySQL/MSSQL scripting and programming on Linux and Windows

Java debugging and development

ColdFusion debugging and programming

Extensive use of Microsoft Word and Excel

Senior Information Assurance (IA) Engineer at White Sands Missile Range (WSMR) – subcontracted to ATAMIR mid 2008-Mar 2010 40 hours/wk

Wrote, or helped write Certification and Accreditation paperwork (DIACAP) for multiple networks including the SIPRNet, DREN, SOFIMS, WSMRNet, and Test Support Network (TSN-IP) (upgrade from DITSCAP).

Wrote security plans for all networks in microsoft Word.

Wrote standard operating procedures, guidelines, and WSMR Best Business Practices regarding network operations, system operations, and other issues such as encryption keying guides.

Developed templates for security plans, standard operating procedures, policies and local regulations.

Connection of multiple tenant organizations to non-DoD network resources.

802.11a/b/g wireless testing.

Testing of multiple frequency converters and amplifiers for 802.11a/b/g wireless equipment.

Preparation of Engineering Design Plans (EDPs).

Technical consultant for several managers with respect to networking and RF issues.

Researched Federal, DoD, and Army regulations and summarized findings in whitepapers for upper management.

Reviewed network scan results, IDS/IPS alerts and audit logs for anomalies and intrusions.

Helped develop the DoD 8570.01-M training plan at WSMR.

Reviewed certification and accreditation documentation from other federal agencies (NASA) prior to their equipment being allowed on the WSMR Test Support Network (TSN-IP).

Developed design for a training database for use by the IA department at WSMR.

Extensive use of Microsoft Word and Excel.

Senior Network Engineer at White Sands Missile Range - subcontracted to NCI Jun 2005-mid 2008 40 hours/wk

On-site surveys of remote US Army ranges within the Developmental Test Command (DTC) for determining their networking and encryption needs to connect back to WSMR.

On-site surveys of WSMR networking equipment to determine upgrades required (over 400 devices scattered over 4000 square miles).

Served as the backup network engineer for a classified network running on mostly Red Hat Linux.

Network Characterization using IxChariot prior to and during network use on unclassified and classified networks.

Managed network connections of foreign military customers.

Testing and characterization of 802.11a/b/g equipment.

Testing of multiple frequency converters for use with 802.11a/b/g gear.

Testing of multiple amplifiers for use with 802.11a/b/g gear.

Testing of data link encryption equipment with 802.11a/b/g gear.

Technical consultant for several managers with respect to networking and RF issues throughout WSMR and Ft. Bliss.

Designed system to allow WSMR frequency managers to command all EPLRS radios on WSMR and Ft. Bliss to cease transmitting during missile tests (was overcome by events and not used).

Participation in preparation of Engineering Design Plans (EDPs) for nation-wide classified network.

Participation in preparation of DITSCAP paperwork (SSAAs) for the TSN-IP network at WSMR.

Wrote or consulted on Certification and Accreditation paperwork (DIACAP) for the NIPRNet, SIPRNet, TSN-IP, IRCC, and classified IRCC networks at WSMR.

Extensive use of Microsoft Word and Excel.

Network Engineer Jul 2004-Jun 2005 40 hours/wk

Managed contractors installing Data cabling, additional power and alarm system in our new office location.

Managed the Internet connection for RhinoCorps.

Managed the firewall running on Fedora Core Linux for RhinoCorps.

Built, installed, configured Apache, Tomcat, IMAP, SMTP (Sendmail), Shell, DNS (bind), Oracle, MRTG, MySQL, Bugzilla, and Wiki servers on Fedora Core Linux.

Extensive use of Microsoft Word and Excel.

Program Manager Jul 2003-Jul 2004 40 hours/wk

Program manager for a RhinoCorps Contract with Sandia National Laboratories

Developed and managed the software testing and deployment process to our customers within the laboratories.

Tested and modified existing customer Perl scripts on Fedora Core Linux.

2Shell Communications, Round Rock, TX Feb 2002-Present 10 hours/wk

Owner

With Partner, built, installed, and configured Web, Mail, Shell, DNS servers on CentOS Linux

With Partner, built, installed, and configured Web, Mail, Shell, DNS servers on Fedora Core Linux

With Partner, managed systems and Internet connection for our customers.

With Partner, cabled a financial office for data, and reconfigured all computers after a potential security break-in.

Consulted for Apogee Telecom (A local ISP) to help them with their FreeBSD systems including DNS, Web, Mail, RADIUS, MRTG servers.

VERIO, San Jose, CA and Round Rock, TX Sep 1997-Feb 2002 40 hours/wk

Director/Project Manager Apr 2000-Feb 2002 40 hours/wk

Managed a matrix of personnel from across the country, including people from different departments within Verio, contractors and vendors to implement a POP and the cabling infrastructure, as designed by myself and co-workers, in multiple cities around the country. These data centers totaled over 500,000 square feet of customer space, and 50,000 of POP space. These data centers used over 75 million feet of CAT6 cable and 10 million feet of fiber.

Designed the Intermediate Distribution Frame used in all our POPs and Data Centers.

Designed the Main Distribution Frame used in all our POPs and Data Centers.

Member of team that evaluated 5 vendors of SONET gear, specified what we needed, selected a vendor, purchased the gear, and scheduled field personnel to install the equipment.

Traveled around the country to visit POPs and Data Centers to survey for improvements in AC power distribution, DC power distribution, Cat 6 and Fiber distribution.

Responsible for space allocation in various POPs around the country.

Responsible for all network related activities in the Austin POP.

Director of Network Engineering May 1998-Apr 2000 40 hours/wk

Managed all aspects of the network in the Northern California area, initially, then all of California.

Managed network engineering personnel.

Managed work schedules, on-call schedules, vacation schedules for an understaffed network engineering department.

Managed relationships with vendors or equipment, software, and telecomm lines.

Managed Network Operations Center (NOC) in Mountain View, California.

Developed network redundancy design with staff and managed the staff, vendors, contractors, and project to implement the design throughout Northern California.

Designed the POP and the cabling infrastructure for 3 bay area data-centers totaling over 150,000 square feet.

Senior Network Engineer - Verio Consulting Group Sep 1997-May 1998 40 hours/wk

Helped develop a data-center full of machines to replace 4 ISPs (Internet Service Providers).

Helped design install and configure a server “farm” that consisted of specially configured machines, each tuned for specific applications, such as DNS (Domain Name Service), SMTP (Simple Mail Transport Protocol), FTP (File Transfer Protocol), POP (Post-Office Protocol), RADIUS (Remote Authentication Dialup User Service), HTTP (Hypertext Transfer Protocol). All running some varient of Solaris.

Developed software to manage accounts on machines and routers driven from a sales order entry system.

Trained Dallas Call-center personnel on how to administer accounts on the Northern California Server “farm”.

Worked on bids to help Costa Rican Public Utility set up a nation-wide ISP.

Analyzed customer needs and developed customized solutions to meet the customer’s system, networking, and security needs. This involved equipment selection, configuration, programming, and training.

INTERNEX INFORMATION SERVICES, Santa Clara, California Mar 1995-Sep 1997 60 hours/wk

Director of Engineering Operations Mar 1997-Sep 1997 60 hours/wk

Reported directly to the CEO/President.

Continued duties of Manager, with subordinates acting as supervisors to the various groups.

Directly responsible for internal electronic and information security.

Manager of Engineering/Network Operations Center/Tech Support Sep 1995-Mar 1997 60 hours/wk

Reported to Vice President of Engineering.

Continued duties of Supervisor with additional duties including project management and planning.

Used Microsoft Project Extensively for project planning.

Used Solaris and Windows

Selected hardware for expansion of the network.

Selected Vendors for our Cross-country telecom lines.

With Network Engineering team, expanded our regional network to a global network, using ATM switches to tie POPs and Data-Centers together. POPs/Data-Centers were in Frankfurt, Stockholm, Los Angeles, San Francisco, Santa Clara, San Diego, Hong Kong, London.

Merged Tech Support and Network Operations groups to provide documented career paths for employees.

Hired over a dozen new employees from first level tech through Network and Systems Engineers.

Supervisor of Engineering/Network Operations Center/Tech Support Jun 1995-Sep 1995 60 hours/wk

Continued doing work on Network Engineer/System Administrator, with additional supervisory duties.

Supervised the Technical Support Group and handled personnel issues including scheduling, hiring.

Supervised the Network Operations Center and handled personnel issues include scheduling, and hiring.

Supervised the Network Engineering and System Administration groups and handled personnel issues include scheduling, and hiring.

Operated as a liaison to Executive staff.

Operated as a liaison to Sales in the capacity of Sales Engineer.

Wrote training manuals and conducted training classes for Sales Engineers, Tech Support, and Network Operations Center.

System Administration/Network Engineer Mar 1995-Jun 1995 60 hours/wk

Configured new customers for ISDN, POPmail, Frame-Relay, and T1.

Analyzed Trouble Tickets for patterns.

Developed the trouble ticket system in use using Remedy.

Handled escalations from Tech Support and Network Operations Center.

As a member of a team of 3 Engineers, designed, built, and configured Sun Solaris systems, Cisco 2500 routers, Ascend 4004 MAX’s, and terminal servers into a half-cabinet POP. We called this a POP-in-a-box. This allowed us to mass-produce ISDN POPs that could be shipped to remote locations where we had a re-seller, who would only have to plug in the cabinet to power, plug in a T1, plug in a PRI, and a telephone line.

Implemented Revision Control System for all Configuration files and source code files.

TAOS MOUNTAIN SOFTWARE, Palo Alto, California May 1994-Mar 1995 40 hours/wk

Contract System/Network Engineer at Synopsys Sep 1994-Mar 1995 40 hours/wk

Interviewed and trained a full-time backup system operator.

Documented the entire backup system and process for employees.

Installed 83 Exabyte tape drives and re-configured UNIX kernels to accept the drives.

Developed backup system for all of Synopsys.

Contract System/Network Engineer at Silicon Graphics May 1994-Sep 1994 40 hours/wk

Provided internal support for ISDN and dialup PPP access to employees.

Worked with Phil Zimmermann to develop PGP hooks for use with internal applications at SGI.

CONVEX, Richardson, Texas Jun 1993-Sep 1993 40 hours/wk

UNIX Software Support Level II

Helped development find and fix problems with the tape sub-system.

Specialized in upper-level support for Convex OS tape sub-systems.

DELL COMPUTERS, Austin, Texas May? 1991-May 1993 40 hours/wk

UNIX Software Support Level II/UNIX Software Support Level III

Level II Technical support for Dell’s UNIX SVR4 & SVR3.

Level III Technical Support for Dell’s UNIX SVR4 & SVR3.

Build patches for customers after helping UNIX development find the problem in the code.

Administered development teams build machines.

ANALYSTS INTERNATIONAL CORPORATION, Austin, Texas Sep 1989-May? 1991 40 hours/wk

Software Engineer/System Administrator/Build Coordinator

Implemented and Administered AIX (BSD UNIX variant) Source Code Revision Control System.

Did weekly builds of entire AIX 2.2.1 operating system to incorporate bug fixes.

Worked on Operating System bugs in AIX 2.2.1

Assistant Administrator of IBM RS/6000 build and test machines.

Administered AIX 2.2.1 build and test IBM/RT machines.

Wrote training manuals for new employees.

CONTRACT AT IBM, Austin, Texas Jan 1989-Sep 1989 40 hours/wk

Software Engineer/System Administrator

Worked on TCP/IP bugs in AIX 2.2.1. (A variant of BSD UNIX)

Helped in attempted port of AIX 3.0 TCP/IP to IBM RT architecture.

Helped port AIX 3.0 to the RS/6000 family of machines.

Administered TCP/IP group’s test machines.

Administered AIX Source Code Revision Control System.

SINGER-LINK FLIGHT SIMULATIONS, Houston, Texas Mar 1986-Dec 1988 40 hours/wk

Held DoD SECRET Clearance.

Software Engineer/System Administrator

Wrote programs in Fortran on Norsk Data Products computers for use in the NATO F-16 Simulator for the United States Air Force and other NATO Air Forces.

Wrote modules in C to replace faulty library programs that came with the Norsk Data Products C compiler.

Designed a suite of programs in Ada, for the conversion of a visual database to DMA (Defense Mapping Agency) database format.

Wrote documentation with VI in TRoff for the United States Air Force.

Administered two Concurrent Computer Corporation 3280’s (was called Perkin-Elmer before purchase.) One was running XELOS (a variant of SVR2 UNIX), and the other OS/32 (a real-time OS).

Implemented Revision Control System for software development using SCCS.

TECH-MANAGEMENT INCORPORATED, San Angelo, Texas Sep 1984-Feb 1986 40 hours/wk

Programmer

Helped develop program generator for quicker program development (written in Turbo Pascal).

Analyzed customer needs and customized Energy Management Controllers to meet the customer’s power/energy/budget needs.

Wrote modules that monitored power usage and controlled power-using devices such as HVAC systems, coolers, and lighting.

DATA CREATIONS, San Angelo, Texas Dec 1983-Aug 1984 20 hours/wk

Programmer

Wrote a custom inventory control and re-ordering system for a local beer distributor. This included multiple report generators for State required TABC reports.

Configured and installed computer systems for customers.

EDUCATION

MSIA - Master’s of Science in Information Assurance, Norwich University, Northfield, VT (June 2010)

B.S. Computer Science, Minors in Math & Physics - Angelo State University, San Angelo, TX (August 1984)

Electrical Engineering Major - Texas A&M University, College Station TX

Physics Major - United States Air Force Academy, Colorado Springs, CO

CISSP - Certified Information System Security Professional (Aug 2009) #313293

CCNA - Cisco Certified Network Associate Sep 2013) – Cisco ID # CSCO10444272

Server CompTIA) achieved 2013 – CompTIA Career ID# COMP001020584293

ITIL-F (ITIL Foundation) achieved 2013 – ID# 4794746.1232108

Instructional Theory Into Practice (ITIP) (March 2002)

Cisco Optical 15454, Dallas, Texas (Nov 2001)

Juniper Architecture & Configuration & JUNOS Software Troubleshooting, Santa Clara, California (Aug 2001)

Juniper JUNOS Routing Policy & MPLS Traffic Engineering, Santa Clara California (Aug 2001)

Cabling Infrastructure Fundamentals (2000)

Microsoft Project Class (1996)

Remedy Administration (1995)

Advanced C Programming (1994)

Convex OS Administration (Convex 93)

UNIX SVR4 System Administration (UnixExpo 91)

UNIX SVR4 Device Internals (UnixExpo 91)

PUBLISHED WORKS

Wrote a program and submitted to Unix World Magazine (now called Network Computing). The article was on the web but no longer is.

HOBBIES and other ACTIVITIES

HAM Radio (Amateur Extra),

Administer home network, web site (www.hoplite.org), and small web hosting company (http://www.2shell.net), NFS Servers, DNS servers, Mail Servers, Web Servers, Proxies and Firewalls.

Contact this candidate