ALBERT J. BROWN
E-mail: **********@*****.***
Phone: 919-***-****
Raleigh, NC 27616
PROFESSIONAL SKILLS
Subject Matter Expert NIST Risk Management Framework audit and security compliance. Computer Network Admin and Designer with creative input identifying and designing; effective solutions to meet the current and planned future expectations of business.
Audits and evaluations of Veterans Health Administration and VBA programs focus on the effectiveness of healthcare delivery for veterans and VA’s activities in order to ensure the integrity of its programs and operations, to improve the security posture of the VA.
Monitor report and remediate any high-level vulnerabilities to Continuous Readiness Information and Security Program. Using tools such as SolarWinds, Tenable Nessus scanner IBM BigFix and SCCM.
Created, managed and maintained Active Directory OUs for users and groups for a State Agency.
Advanced understanding of Cisco Wireless Access Points on a LAN.
Telecom both Analog and VOIP Install and troubleshooting.
Video conferencing configuration and setup using Polycom, Tandberg systems.
Support with NOC of MPLS WAN and LAN troubleshooting and problem solving of CISCO routing and routing protocols.
Understanding of Windows Server 2008 thru 2019 Sequel server, Network Load Balancing and configuration.
Technologies monitored and managed include routers, switches, DNS, DHCP, and Content Servers.
Provided disaster recovery using Apple Xserve RAID mass storage and Differential Tape Backups.
EXPERIENCE
Veterans Administration, Research Triangle Park, NC
07 2015 – 04 2025 Security Computer Systems Engineer
Now as part of the Vulnerability Remediation and Mitigation (VRM) Platforms team. There are only 15 of us across the nation. As a member of the Platforms team, we are responsible for hardening the operating system (OS) to protect servers from any vulnerabilities. Albert was previously a member of the Client Tech team that focused on laptops and workstations. As a member of the Platforms team there is much more interaction with the client and system owners. Firstly, not every system can be patched. There are certain categories that cannot be updated as it may break the system and cause a service disruption to the VA, including potentially shutting down the phone system on an entire site. Care must be taken and research must be done prior to doing anything on the majority of our vulnerabilities. This requires interaction with system owners, area managers, and other VA staff. A failure in any area could be bad and definitely tarnish our image as a contractor. Because of the criticality of our role, we work tightly as a team to ensure everyone is on the same page and all new team members go through extensive training before being assigned anything. I have completed this training and doing a great job.
I was selected to transfer to Platforms when we expanded the team from 7 to 15. I accepted the additional responsibility and asked questions when I was unsure. It is very important for everyone to ask questions if you are unsure, as our first goal is to not break any systems.
Every new team member coming to Platforms goes through extensive training. In general it takes 2-3 months of training before many can touch a server, some longer, some shorter. We have several meetings each week where questions can be asked, new vulnerabilities discussed, and we created a page in the OneNote with detailed steps that need to be taken. This page is dynamic and changes almost daily so training is ongoing.
The team is complimented regularly by VA management (Greg Thacher) for the great work we do as a team. We have hit 95% consistently for the past 4 or 5 months (97.43% this past month) which is the highest Platforms has ever got and I am a part of this success and require very little interaction.
The Platforms role requires extensive research prior to doing anything in most cases and just installing an update without researching first can lead to a catastrophic issue for the client.
Team Lead Pre-Audit responsibilities evaluate, maintain and improve the VA’s posture in information security program and ensure practices comply with Federal Information Security Modernization Act (FISMA) requirements, Department of Homeland Security (DHS) reporting requirements, and applicable Office of Management and Budget (OMB) and National Institute for Standards and Technology (NIST) guidance.
Continuous Readiness Information and Validation Testing Perform security compliance checks and review and provide accurate documentation artifacts and findings for VA sites. Monitor and report any high-level vulnerabilities to CRISP Team and Facility Chief Information Officers. Preform research and analysis using cyber intelligence tools and methods in order to remediate and eliminate high level data and cyber security risks. Responsible for leading a high preforming CRISP Pre-Audit Security Team in the findings of a full range security and access controls on a large enterprise level.
Expert in NIST security controls with analytical consulting experience for a large enterprise environment.
Serve as a Team Lead focused on the preparation and documentation for the security controls and audit process on a regional enterprise level.
Lead the security audit process by taking ownership of pre-audit process and its success and
Provides review of independent evaluations of VA's security activities in order to ensure the integrity and improve the posture of the VA by using highly diversified reviews that encompass the areas of program results, economy and efficiency, finance, fraud detection, and compliance.
Shape services engagements to provide accurate evidence and develop mature statements of work and engage customers to identify business and technical compliance requirements to Security Audit success.
Collaborate with solution experts and team members to develop and deploy secure solutions and documentation.
Embrace education training to be a deep subject matter expert across multiple security and non-security technologies to deliver superior security controls, architectures, designs, and solution deployments.
Responsible for finalization and delivery of reports for each consulting engagement in security management.
Educate and mentor customers and peers after reviewing security processes, security protocols and compliance.
Tune and optimize artifacts workflow risk governance and findings based NIST security controls and solutions.
3M Corporation, Pittsboro, NC
08 2011 – 11 2014 IT ANALYST II
Managed a LAN trouble shoot network connection issues, assigned static and DHCP range IP addresses as needed. Controlled maintenance on 20 separate serves upgraded configured Raid 1 through Raid 6 configurations and replaced as needed when out of warranty. Worked with Engineering and Network Operations groups to accomplish customer migrations, network changes, upgrades, and repairs. Configured and Installed VOIP Cisco Phone system. Monitored and installed Cisco Wireless Access Points. Managed and configured Microsoft Windows 7 SP1, Windows 8.1, Windows 10, Windows Server 2008 SP2, Windows Server 2008 R2 SP1, Windows Server 2012 and Windows Server 2012 R2 on a daily basis. Created, managed and maintained Active Directory OUs for users and groups. Created and reset passwords, disabled or enable accounts, applied Group Policy settings to OUs on File and Print Servers for proper user access through each applicable Domain Controller. Supported software applications for production such as Wonderware and customer data bases in PeopleSoft and SAP. Remotely deployed MS Windows Server 2008 sp1 and 2012 R2 operating systems over the domain network. Managed and maintained MS SQL databases. Assisted in the use of Six Sigma to improve the quality of process outputs by identifying and removing the causes of defects (errors) and minimizing variability in manufacturing and business processes and corresponding ITIL.
Supported End Users with Desktop support and remote desktop support for their personal work computers configured and replaced when they were at End of Life mainly using Microsoft Windows 7 and Microsoft Office Products. Set up TCP/IP camera system on the network. Managed and maintained 50 to 100 Network Laser Printers. Created multiple corporate wide IT documentation on technical procedures such for disaster recovery through the backup plan know as Service Continuity Plan. Also documented work flow using ITSM by Hewlett Packard and Remedy ticketing systems.
Duke University Medical Center Durham, NC
04 2010 – 08 2011 Helpdesk /Desktop Support Specialist:
Support Higher Education Network infrastructure using Microsoft Server 2003 on a domain and Active Directory database. Configured and troubleshooter for TCP/IP network Setup and Configured Polycom video conferencing for end users.
Provided Help Desk support to end Users by walking them through basic setup procedures of software installs, Printer installs, Anti virus installs and updates over the phone and using DameWare Mini Remote Control. Edited and modified Control-M jobs. Network support include supported services such as ATM, Frame Relay, Ethernet Internet Access, TLS, VPN, MPLS, Metro-E, and BGP routing; too setting up a end User's VPN account on the company's network. Worked with Engineering and Network Operations groups to accomplish customer migrations, network changes, upgrades, and repairs. I helped customers by replacing defective hardware (Hard drives, DVD drives, video cards, Wireless adapter cards LCD screens and of course Memory) on desktops and laptops mostly Dell and HP computers. Troubleshoot network connection problems; network printing problems. I also worked on client’s desktop machines and or laptops configuring them for the companies Domain access and VPN accounts for remote users. Setup and synchronize Blackberry Phones with the customers Microsoft Exchange/Outlook accounts.
TECHNOLOGY II Raleigh, NC
06-2004 – 10-2010 Network Systems Engineer:
Deployed new financial bank systems for RBC Royal Bank of Canada and Trained Head Tellers and other Branch Staff the uses of new Financial Software in newly acquired branches thought out the Southeastern US. Deployed new system upgrades for Bank of America for several branches throughout North Carolina. Support Microsoft Server 2003 on a domain and Active Directory database. Managed File, Print and Production servers, Monitored Quality and Development servers for customer. Supported MS Outlook Mail Server Configure email clients and mobile devices for email hosted on Exchange server and other Microsoft Office products. While using Remedy, Service Desk and Digital workflow helpdesk software applications to support customer issues to create and close helpdesk tickets within SLA time. Complete installation and verification testing of CISCO VOIP functionality from end to end; before handing off to Network Manager. Support of Network infrastructure using Configuration and troubleshooter for TCP/IP network using Solarwinds, Microsoft Network Monitor and GFI Languard. This position also allowed me to support Cisco routers and switches through basic configuration and configuration changes specific to their network and Interfacing MPLS networks using OSPF, ATM and LDP protocols while assisting a NOC environment. Supported network Laser Printers throughout the company through troubleshooting and hands on maintenance. Also, installed and supported Macintosh OS X Tiger and Snow Leopard computers. Provided Desktop Support for the Department of Health and Human Services at the Dorothea Dix Campus Have extensive experience configuring and using the Polycom video and voice conferencing systems for clients. Setup and configured GoToMeeting software for end users to conduct online meetings. Have setup DLP/LCD projectors and audio amplifiers with wireless microphones used by presenters and assisted with their audio-visual presentations in meetings and the classroom.
Preferred Provider Network member for Pomeroy/SFI AUS Information Systems, TekConnect, and Granite Telecommunications. A+ Certification, CISCO CCNA, DELL Systems Expert and Professional Customer Service Certifications. IT management in the area of network performance and security devices. Installed POS systems for companies such as Rite Aid, CVS and Car Quest stores.
Granville County School System, Oxford, NC.
08-1994 – 05-2004 TEACHER: COMPUTER ENGINEERING TECHNOLOGY AND NETWORK ENGINEERING TECHNOLOGY CAREER DEVELOPMENT PLANNING
Directed Students in designing and configuring various types of networks including LAN’s, MAN’s, WAN’s and VPN’s in a lab environment. Develop Student skills and knowledge to take the A+ Certification Exam and As a Cisco Networking Academy Instructor taught networking for CISCO CCNA Exam, also preparing students for future career trends in the computer and networking industry.
Spartanburg Community College, Spartanburg, SC
01-1990 – 05-1992 COLLEGE INSTRUCTOR: ENGINEERING AND INDUSTRIAL TECHNOLOGY Instruct, supervise, and counsel students in achieving their post-secondary educational and career goals. Teaching assignments were in the Engineering and Industrial Technology Divisions Primary responsibilities were to Develop course goals; objectives and teach quality courses based around the leading-edge technology and Quality standards used in industry. These objectives were accomplished through Computer Aided Design & SPC techniques, electrical principles, integrated circuits, and transistors.
Teledyne Brown Engineering, PA
01-1989 – 01-1990 SUB-CONTRACTOR
Assignments consisted of Supplier Quality Engineer; Setup quarterly schedules, to create and perform audits and surveys, prepare weekly status reports. Assure vendor met contractual agreements. Review, approve, and witness final acceptance test for NASA Space Program contracted with Teledyne Brown Engineering.
Other contracts with PATCO, Siemens Communications and Arrow Steel Products Corp.
General Electric Company Space Systems Division, Philadelphia, PA.
09-1983 -12-1988 AREA QUALITY ASSURANCE REPRESENTATIVE
Investigated discrepancies, determine cause and corrective action. Follow-up and investigate open items, disposition all discrepant materials. Review and approve rework plans. Provided technical guidance for manufacturing operations and training. Performed shop audits. Customer interface for rework planning, reviewed accepted waivers and customer reported defects.
08-1981- 09-1983 ELECTRICAL DESIGNER
Generated information on CAD systems. Assisted in establishing techniques and procedures for the production of printed circuit board design/fabrication and console panels for test equip.
Education:
Christopher Newport University Newport News, Virginia 23606 Master Degree Program in NASA Aeronautical Space Engineering
(Less then 10 hours from completion)
North Carolina A&T State University Greensboro, North Carolina 27411
Bachelor of Science Degree: Industrial Technology Minor: Mass Media Communication
Professional Awards and Activities:
Who’s who among America’s Teachers, Class A Teaching Certification, Member of Professional Educators of North Carolina, A+ Computer Engineering and Cisco Certified Network Instructor. Advisory Board of Technology Student Association, American Society of Quality Control Engineers, previous member of the Material Review Board for NASA Space Program.