Cyber Security Support Engineer

Name: Ferdinand Mokoro

Email: ************@*****.***

Title: Cyber Security Engineer

Phone. No.: +1-405-***-****

Location: Oklahoma City, OK 73170

LinkedIn URL: https://www.linkedin.com/in/ferdinand-mokoro-57b062269 SUMMARY:

With over a decade of extensive experience in cyber security and cloud solutions, I have honed my expertise in various high-stakes environments, demonstrating exceptional proficiency in risk assessment, security policy development, and incident response. Currently, as an Information System Security Officer at Tinker Air Force Base, I conduct risk assessments, manage access control, and lead security awareness initiatives. Previously, as a Cloud Support Engineer at OU Health, I excelled in troubleshooting AWS services, automating deployment processes, and implementing security best practices. My role as a Solutions Architect at Norman Veteran Center involved designing secure, scalable architectures and managing encryption and disaster recovery plans. Additionally, my tenure as an Associate Solutions Architect at MGM Healthcare saw me architecting high-availability AWS infrastructure and migrating applications to the cloud. My career began as an IT Support Engineer at South Pointe Rehabilitation and Care, where I provided comprehensive technical support and managed executive-level IT services. This diverse background equips me with the skills to tackle complex security challenges and drive technological innovation in any organization.

TECHNICAL SKILLS:

AWS Services: Ec2, EFS, VPC, RDS, S3, Glacier, IAM, Cloud Front, Cloud watch, Cloud Trail, Cloud Formation, Dynamo DB, Lambda, Route 53, SNS, SQS, API Gateway, Code Pipeline, Code Build, Elastic Cache, Code Deploy, Redshift.

Configuration Management: SSM

Source Code Management: Git Hub, Code Commit

Migration Tools: SMS, Migration Hub, AWS Data Sync, DBMS, Cloud Endure AWS Organizations User Management: AWS Organization Control Tower Databases: AWS RDS, Dynamo, Document DB

Virtualization: Docker, ECS

Platforms: Windows, Linux

Ticketing Tools: JIRA

Programming Languages: YAM, Shell Scripting, Python DevOps Tools and CI/CD pipelines: AWS Code pipeline, Cloud formation Templates Cyber Security: Risk Management, Security Documentation, Training and Awareness, Incident Response, Access Control, Security Audit and Assessment, Continuous Monitoring, Collaboration and Implementation, Policy Implementation, Vulnerability Assessment & Management, Regulatory Compliance

(NIST, FISMA, HIPAA), Cloud Security (AWS, Azure), Cloud Security (AWS, Azure). EDUCATION:

• Associate Degree in Health Science

• Bachelor of Science in Nursing (RN)

• Bachelor’s Degree in Law and Logic

CERTIFICATION:

• T5 Security Clearance

• Microsoft Azure Fundamentals

• RMF steps 3&4 Certification

• CompTIA Security +

• AWS Cloud Architecture Boot Camp 2022

• AWS Certified Solutions Architect Associate

• AWS Certified Cloud Practitioner

WORK EXPERIENCE

TINKER AIRFORCE BASE

Information System Security Officer SEPTEMBER 2023 – PRESENT Responsibilities:

• Conducted comprehensive risk assessments to identify and mitigate potential threats to information systems.

• Developed and maintained security documentation, ensuring compliance with relevant standards and regulations.

• Delivered training and awareness programs to enhance security posture across the organization.

• Responded promptly to security incidents, performing root cause analysis and implementing corrective actions.

• Managed access control mechanisms, ensuring appropriate access to sensitive information and systems.

• Conducted regular security audits and assessments to evaluate the effectiveness of security controls.

• Implemented continuous monitoring processes to detect and respond to security threats in real time.

• Collaborated with cross-functional teams to implement security policies and procedures.

• Developed and enforced security policies to ensure consistent protection of organizational assets.

• Utilized advanced security technologies to protect information systems from emerging threats.

• Coordinated with external auditors and regulatory bodies to ensure compliance with industry standards.

• Led security awareness campaigns to promote a culture of security within the organization.

• Implemented security solutions to address identified vulnerabilities and risks.

• Conducted penetration testing and vulnerability assessments to identify security weaknesses.

• Provided expert guidance on security best practices to stakeholders and project teams.

• Managed security incident response plans, including preparation, detection, analysis, containment, eradication, and recovery.

OU HEALTH, Oklahoma City, OK

Cloud Support Engineer NOVEMBER 2021 – JULY 2023

Responsibilities:

• Troubleshot daily customer issues with AWS services including IAM, S3, VPC, Dynamo DB, Load Balancer, Federation, Cognito, Config, Cloud Trail, Guard Duty, Security Hub, Cloud Watch, Auto Scaling, Cloud Formation, SQS, SNS, Lambda, KMS, Organizations, Cloud Front, Secrets Manager, RDS, AWS SSO, and more.

• Leveraged AWS cloud services such as EC2, Auto Scaling, and VPC to build secure, highly scalable, and flexible systems to handle expected and unexpected loads.

• Set up and configured VPC Private Link (Endpoints), Direct Connect, Transit VPC, VPC Peering, CDN, IPsec, Interface Endpoints, and VPN for secure data transfer and secure connections to other AWS services and accounts.

• Managed encryption using server-side encryption (SSE S3, SSE C, and SSE KMS) and AWS Client encryption library, as well as client-side encryption of S3 and databases in the cloud.

• Gained hands-on experience and expertise with AWS services: EC2, S3, VPC Endpoints, VPC Private Link, VPC Peering, Transit VPC, Network Protocol, Subnetting (Private and Public), IPsec, VPN, Route53, ELB, Auto Scaling, SQS, SNS, IAM, Dynamo DB, Cloud Front, Cloud Formation, Cloud Watch, Cloud Trail, Storage Gateway, Internet Gateway, Glue, Code Deploy, and Guard Duty.

• Participated in projects to deliver new features for various AWS services by understanding customer needs, designing solutions, and implementing code to deliver the features.

• Contributed to hiring and developing engineers by interviewing new candidates and providing mentorship to new hires.

• Automated deployment processes using AWS Code Deploy and Cloud Formation, improving efficiency and reducing deployment times.

• Monitored and managed system performance using Cloud Watch, ensuring high availability and reliability of services.

• Implemented security best practices and compliance measures using AWS Config, Guard Duty, and Security Hub.

• Designed and managed disaster recovery plans and backup strategies using AWS services to ensure data integrity and availability.

• Conducted performance tuning and optimization of AWS resources to reduce costs and improve system performance.

• Provided 24/7 support for critical AWS infrastructure, ensuring minimal downtime and rapid issue resolution.

• Coordinated with development teams to integrate AWS services into application architectures, enhancing functionality and scalability.

• Conducted regular training sessions and workshops for internal teams on AWS best practices and new service offerings.

NORMAN VETERAN CENTER, Norman, OK

Solutions Architect AUGUST 2017 – JANUARY 2021

Responsibilities:

• Planned, built, and configured network infrastructure within VPC with public and private subnets, configuring routing tables, security groups, and internet gateways.

• Configured NACL, Security Groups, and WAF to secure applications and VPC networks based on access parameters and conditions.

• Leveraged AWS cloud services such as EC2, Auto Scaling, and VPC to build secure, highly scalable, and flexible systems that handled expected and unexpected load bursts.

• Set up and configured VPC Private Link (Endpoints), Direct Connect, Transit VPC, VPC Peering, CDN, IPsec, Interface Endpoints, and VPN for secure data transfer and secure connections to other AWS services and accounts.

• Troubleshot various customer technical problems and adhere to best practices for AWS services.

• Monitored cost and performance of resources and applications using AWS Cloud Watch, including creating alarms to monitor metrics such as EBS, EC2, ELB, RDS, S3, and SNS, and configured notifications for alarms based on defined events.

• Managed encryption in the cloud and on-premises servers using KMS, Cloud HSM, and third-party key management services.

• Handled API requests using REST, ensuring secure and efficient communication between services.

• Configured and managed various AWS services, including EC2, RDS, VPC, S3, Glacier, Cloud Watch, Cloud Front, and Route 53.

• Evaluated operational processes and recommended cost-effective solutions to improve efficiency and reduce expenses.

• Established and maintained key relationships with business stakeholders to promote future opportunities and collaborations.

• Designed and implemented secure, scalable architectures to support business applications and processes.

• Provided technical guidance and support to development teams, ensuring best practices in architecture and design.

• Conducted regular security assessments and audits to identify and mitigate potential risks.

• Developed disaster recovery and business continuity plans to ensure system resilience and data protection.

• Collaborated with cross-functional teams to define and implement infrastructure and application requirements.

MGM HEALTHCARE

Associate Solutions Architect JULY 2016 – AUGUST 2017 Responsibilities:

• Configured Continuous Integration (CI) and Continuous Delivery (CD) using Code Pipeline and Code Deploy for automation.

• Designed and architected self-healing, secure, high-availability, and fault-tolerant infrastructure in AWS.

• Architected Amazon RDS with Multi-AZ for automatic failover.

• Migrated and implemented multiple applications from on-premise to cloud using AWS services, SMS, DBMS, Cloud Formation, S3, Route 53, Glacier, EC2, RDS, SNS, Lambda, VPC, Cloud Trail, and API Gateway.

• Built and configured a virtual data center in the AWS Cloud to support Enterprise Data Warehouse hosting, including Virtual Private Cloud (VPC), Public and Private Subnets, Security Groups (SG), Route Tables, and Elastic Load Balancers (ELB).

• Built servers using AWS, imported volumes, launched EC2, and RDS, and created SG, auto-scaling, and ELBs in the defined VPC.

• Recommended AWS SSO on Control Tower for managing user access on multiple platforms.

• Utilized Cloud Watch and VPC Flow Logs to monitor and retain account activity related to actions across AWS infrastructure.

• Solutioned VPCs for various environments, including NAT Gateway, VPC Peering, and Transit Gateways.

• Implemented monitoring, logging, and alerting solutions using AWS Cloud Watch and other AWS services.

• Provided technical support and troubleshooting for AWS-related issues, ensuring minimal downtime and rapid resolution.

• Developed and maintained infrastructure as code using Cloud Formation and other automation tools.

• Collaborated with development and operations teams to ensure seamless integration and deployment of applications.

• Conducted security assessments and implemented security best practices to safeguard cloud infrastructure.

• Evaluated and recommended AWS services and solutions to optimize performance and reduce costs. SOUTHPOINTE REHABILITATION and CARE

IT Support Engineer MAY 2014 – JUNE 2016

Responsibilities:

• Worked with a team of analysts that interacted with the senior level executives using excellent verbal/written communication skills.

• Managed the service ownership which included 24/7 support for executive customers, including senior-level executive home office support, support while traveling, and high-touch support for their office assistants.

• Installed, configured, and troubleshot desktop systems, workstations, networks, and audio/visual issues in a regulated environment.

• Responsible for creating and updating all related standard operating procedures.

• Communicated highly technical information to both technical and non-technical personnel.

• Installed, assisted, and troubleshot issues with a computer on Windows OS center headphones.

• Did password reset, account creation, account access, and email creation on the active directory

Contact this candidate