Deborah Hutchins, Dr.BA
**** ********** ****, *********, ******** 20169, Phone: 571-***-****
Email: ****************@*****.***
Information Technology Analyst – (Federal Position)
Health and Human Service (HHS)
Administration for Children and Families (ACF)
Washington, DC
12/2024 – 3/2025
Apply systems analysis principles and techniques, engineering concepts, and new IT technologies sufficient to assess new system design to improve security of new information systems.
Utilize IT system architecture, design, and programming techniques to conduct technical assessments of solutions and systems.
Developing proposals to translate management objectives/directives into advanced IT software application systems and reviews a variety of short and long- range studies and
projects to assure existing systems/methods provide the most elective/efficient manner of operation.
IT/Information Security – (Federal Position)
DOJ / Drug Enforcement Administration
Sterling, VA
7/2015 – December 2024
Assess information systems for compliance with applicable NIST 800-53, 800-37, 800-171, CNSSI-1253, DISA STIGS, and ICD503 directives and make certification recommendations to the Chief Information Officer. Provide IS security advice and guidance in accordance with applicable directives, and guidance for the protection of classified data at all classification levels, up to and including Sensitive Compartmentalized Information (SCI). Assist with the planning and selection of relevant security controls throughout the risk management framework (RMF). Write the Security Assessment Report (SAR) in support of Authorization to Operate (ATO).
Continuous evaluation of the security controls of Government and Industry IT systems and networks housing National Security Data, to include cross domain solutions, firewalls, Intrusion Detection Systems (IDS) and virtual private networks (VPN). Provide written assessment reports for review. Regularly perform the processes involved in developing and establishing security related directives and guidance for Information Assurance, Information Technology, and Information Management. Regularly prepare reports and memoranda (to include, but not limited to: Memoranda for Record (MFR), Memoranda of Agreement (MOA), Authorization to Proceed, and status and technical briefs).
Work with all stakeholders, business owners, and vendors, to ensure timely, secure, product development and delivery from concept to release. Conduct regular product status updates with all stakeholders throughout the system development lifecycle, gather and document all requirements prior to product development.
Translate unique Stakeholder IT requirements into innovative, integrated, workable solutions through regular collaboration and coordination with both our internal and external customers.
Development and deploy secure, compliant, enterprise IT engineering Projects. Lead a team of engineers through the planning, requirements gathering, implementation and delivery of multiple products simultaneously, employing the engineering principles of the Scaled Agile Framework (SAFe). Work closely with business owners and all stakeholders throughout the planning and requirements gathering to ensure all stakeholder requirements are met. Work with internal Agile teams for purposes of collaboration and coordination.
Record all product development metrics, requirements, and accomplishments in ServiceNow to show continuous progress. Conduct continuous risk assessments, prioritization of requirements to measure and track success, and test functionality of all products throughout the product development cycle. Regularly meet with Agile engineers to ensure there are no blockers or impediments which may cause product delays.
Facilitate weekly briefings with management, and all stakeholders to provide the status of all IT projects and to ensure stakeholder requirements align with both the vision and goals of IT leadership. Seek regular buy-in and approval on all projects and identify solutions to ensure a strategic alignment of both leadership and stakeholder’s goals and vision throughout the product development lifecycle.
Regular collaboration with internal and external customers to ensure balance and prioritizations of all products and services to ensure all requirements are met, discuss any issues, and/or ways to achieve the best outcome for all stakeholders.
Adjunct Faculty
Park University
Remote – (As Needed)
6/2020 - Present
Teach MPA courses to students enrolled in the Hauptmann School of Public Affairs master’s MPA program at Park University. As an adjunct professor adhering to all University policies and guidelines in addition to the predefined curriculum provided by the Park University’s Hauptman School of Public Affairs. Mentor students and ensure they have a firm foundation of the fundamental skills, and basic tenants, associated with organizational development and leadership. Assist students in achieving their educational goals and in the further development and enhancement of their existing skills through weekly discussions, mentoring, and motivation to develop a deeper knowledge of the principal foundation of organizational leadership and development as they prepare to enter the workforce. For students who have already entered the workforce, the course enhances their understanding of organizational leadership in public organizations. The courses are designed to help students analyze their existing leadership skills and enhance their understanding of self and others through self-awareness and self-assessment using the competing values framework (CVF). Grade weekly discussions and written assignments and provide relevant timely feedback to help students enhance their writing skills and to ensure they fully understand the goal of the assignments. Provide encouragement and regular engagement with students to ensure they are meeting all course requirements, maintain office hours for students seeking additional assistance as required.
Adjunct Faculty – Associate Professor
University of Maryland Global Campus
Remote – (As Needed)
1/2024 – Present
Cybersecurity Instructor - Responsible for teaching students or professionals about the principles, practices, and techniques used in protecting systems, networks, and data from cyber threats. Lead training sessions, design coursework, and provides hands-on experience in various cybersecurity topics, including risk management, ethical hacking, encryption, and incident response. Grade assignments, quizzes, and exams to assess student progress, and provide timely feedback.
Security Manager
L3 Communications
Chantilly, VA
12/2014 - 7/2015
Managed 30 information security and information technology programmers in support of the government customer. Responsible for ensuring the security of daily operations and the confidentiality, integrity and availability of information systems. Ensured all procedures were followed in accordance with organizational policies. Approved all new software prior to it being placed on information systems. Advised and assisted all security staff and programmers in their day-to-day work. Represented the government at meetings and briefed upper management on the statuses of all ongoing projects. Advised Programmers and Security Staff of the importance of following all customer driven
security policies, regulations, rules, and procedures and ensured staff and visitors had the
requisite clearance and need-to-know prior to entering the facility. Hired new staff members and delegated tasks and duties to them. Created emergency response procedures. Evaluated the existing security posture and made recommendations for enhancements when necessary.
Supervised all information technology programmers and security staff members. Always
available to listen to the needs of employees and mentor them when required.
System Security Assessor
General Dynamics
Chantilly, VA
10/2013 - 12/2014
Work with Program Offices to Assess information systems to ensure compliance with NIST 800-53, 800-37, CNSSI-1253, and ICD-503 directives. Make certification recommendations to the Chief Information Officer. Assist with the planning and selection of relevant security controls throughout the risk management framework (RMF). Write the Security Assessment Report (SAR) in support of Authorization to Operate (ATO).
Continuous evaluation of security controls for assigned Government and Industry IT systems and networks containing National Security Data, to include cross domain solutions, firewalls, Intrusion Detection Systems (IDS) and virtual private networks (VPN).
Provide written assessment reports for review. Regularly perform the processes involved in developing and establishing security related directives and guidance for Information Assurance, Information Technology, and Information Management. Regularly prepare reports and memoranda (to include, but not limited to: Memoranda for Record (MFR), Memoranda of Agreement (MOA), Authorization to Proceed, and status and technical briefs).
Information System Security Professional (ISSP)
DoD Defense Security Service currently (DCSA) (Federal Position)
Joint Base Quantico Quantico, VA
11/2010 - 10/2013
Conducted comprehensive security assessments within various security domains to include, but not limited to, computer security, IT violations investigations, remediations and mitigations; Industrial Security Site assessments, Trends Analysis, Advise and Assist visits upon requests.
Lead ISSP on multiple projects to include:
Information Assurance officer for the special access program (SAP) transition working group for the transition from Joint Air Force Army Navy (JAFAN 6/3) to NIST 800-53; Joint Special Access
Implementation Guide (JSIG). Lead ISSP for the Memorandums of Understanding/Agreement (MOU/A) for all DSS accredited Information Systems. Review all MOUs for accuracy and content; negotiate MOU/A terms and conditions in addition to responsibilities of all stakeholders. Regular communication with Cleared Defense Contractors (CDC) and other government agencies via phone, in person, and via written communication to ensure proper documentation and coordination of all MOU/As. Defense Industrial Base (DIB) Program Manager. Attend weekly DIB meetings with the Lead DIB Program Manager in support of the DSS role in the DIB Program. Provide updates on DSS accredited information systems and CDC participants in the DIB program. Wrote logically organized reports and formal correspondence relative to decisions, conclusions and recommendations. Edited, reviewed and revised the DSS Industrial Security Process Manual (ISFO PM v3.1) Implementation Guide. Working knowledge of 32 CFR Part 117, and the Information System Development life cycle management processes and procedures. Maintain continuous awareness of DoD, and IC, Information Assurance guidance and directives to ensure current and continual knowledge of information security related matters. Regular attendance at DoD and IC conferences and seminars. Guest Speaker representing the Defense Security Service at the National Security Institute (NSI) Impact 2012 and 2013 security conferences.
System Security Assessor
General Dynamics
Chantilly, VA
11/2009- 11/2010
Work with Program Offices to Assess information systems to ensure compliance with NIST 800-53, 800-37, CNSSI-1253, and ICD-503 directives. Make certification recommendations to the Chief Information Officer. Assist with the planning and selection of relevant security controls throughout the risk management framework (RMF). Write the Security Assessment Report (SAR) in support of Authorization to Operate (ATO).
System Security Engineer
Northrop Grumman / TASC
Lee Road
Chantilly, VA
04/2006- 11/2009
Supported the Network System Security Group in obtaining Assessment and Authorization for virtual servers and information systems. Worked closely with the Office of Security and Counterintelligence and collaborated with multiple IC agencies to ensure a clear and concise path to Approval to Operate (ATO) for virtual computing systems.
Education:
Capella University Minneapolis, MN United States
Doctorate degree 3 / 2019
GPA: 3.9 of a maximum 4.0
Major: Business Administration Minor: Leadership Relevant Coursework, Licenses and Certifications:
Completion of all required coursework and electives to include dissertation
Park University Kansas City, MO United States
Master's degree 5 / 2007
GPA: 3.8 of a maximum 4.0
Credits Earned: 60 Quarter Hours
Major: MPA - Public Management and Information Systems Relevant Coursework, Licenses and Certifications:
Successful completion of all courses in the Master of Public Administration (MPA) Program.
Park University Kansas City, MO United States
Bachelor's degree 2003
GPA: 3.5 of a maximum 4.0
Credits Earned: 120 Continuing Education Unit
Major: Bachelor of Science - Human Resource Management Honors: Cum Laude Relevant Coursework, Licenses and Certifications:
Successful completion of all courses on the Bachelor of Science Program - Human Resource Management.
Job Related Training:
Government Contracting Officer Representative (COR) Training Completion March 2024
nCipher-Entrust nCipher nShield Certified Systems Engineer September 2020
SAFe - Product Owner Product Manager (SAFe POPM) Certification November 2019
CISM -Certified Information Security Manager, DoD 8570 compliant, December 2013
DoD - Center for Development of Security Excellence (CDSE)
Fundamentals of Industrial Security Levels 1 and 2 March 2011 September 2011
OPM Leadership Assessment Program Part 1 (LAP1) April 2011
Association Affiliations:
ISACA - CISM - Member Professional Publications:
Doctor of Business Administration and Leadership
Published Work:
Professional Publications:
Published Work _ Dissertation: Hutchins, D. A. (2019) The Organizational Effects of Employee Engagement and Benevolent Leadership, (Accession No. xxxxxxx) [Doctoral Dissertation, Capella University, Minneapolis] ProQuest Dissertation Publishing.
Clearance:
Top Secret Background Investigation, last update February 24, 2020
References:
Available upon request