Software Development Security Systems
Resume:
Joe Ryder
**** ******* **. ********* ** *****
*****.***@*****.***
Active DoD Secret Clearance
Summary
Over my career I have always had a leadership engineering role. I Have always grown to the level of Subject Matter Expert in any engineering role I have held including voice/data communications, Biometrics, Security Systems, Video Teleconference Systems and Data System Architecture design and administration. I have a great deal of experience with Microsoft Workstation and Server, SharePoint, UNIX, Solaris, Linux ( RedHat, Ubuntu, Rocky), Apache, Apache NiFi, Cisco, Juniper, AWS, Azure, Google Cloud Services, VMware, Astrisk Phone Systems, Avaya PBXs, Mitel PBX, NORTHERN Telecom PBX, CISCO Call Manager, and Microsoft Teams Telephone system integration, installation migration and system development.
I have experience in system and software development using various programming languages including GO, C, C++, C#, Python, and Java. I have managed engineering teams as lead engineer and lead architect during my career. Followed and set up Agile CI/CD development platforms using tools such as Jenkins, Bamboo, Gitlan, GitHub, and Buddy. I containerized these environments using Docker, Kubernetes, AWS ECS/EKS, and Openshift for ease of deployment. I configured and ran code vulnerability scans using Sonarcube, PVS- Studio and Fortify. I configured and ran Host Base Security Systems (HBSS) and ran vulnerability scans with OpenVAS, Nessus, and Tenable.
I have Lead System Architecture and Modeling experience using MagicDraw Cameo, DMN, Doors, and Visio. I have a COMPTIA SECURITY + certification and have developed secure networks and performed vulnerability scans and implemented the Security Technical Implementation Guide on Windows, Red Hat Linux, Rocky Linux, MAC Workstation and network switches and routers to ensure security standards are met.
I have built, administered and managed large and small networks using CISCO Catalyst (3000, 6000 and 9000 series) and Nexus 9000 series switches, 4000 and 5000 series routers, 9000 series access points and 4100 series firewalls. These components were configured with SMTPv3 for network management. I have implemented networks using fiber optics, twisted pair and wireless technologies.
I have engineered, built and managed large RAID storage systems using Dell Powerstore, PowerMAX PowerVault, MegaRAID andTerraMaster hardware on windows and Linux platforms. Used CISCO ACI and VEEAM solutions for hybrid cloud with local storage environments.
I have extensive cloud experience with AZURE, AWS and Google. I have engineered, configured and administered all three environments over the last 12 years. I have migrated the software development into an AWS cloud based virtual software development and collaboration environment for the ARMY Research Laboratory. Developed python programs to capture sensor data (audio/video) from worldwide sources for algorithm development using AWS LAMBDA.
I also have extensive knowledge of A/V and VTC system development and management. While at ARL I designed and built three software development laboratories equipped with A/V and BTC capabilities. The labs incorporated video walls with multiple interactive video panels ranging from 2 to 12 panels. Altogether there are 10 VTC areas. While in Korea I was the lead engineer for the VTC contract that CACI had. We maintained and installed all US ARMY VTC Installations in Korea. I have worked with Tandberg, Cisco, polycom, Crestron, Samsung, and many more A/V vendors.
I have also designed and implemented Access Control and Security systems. I engineered and deployed the first Multi-modal Biometrics Access Control system at Fort Huachuca. CACI had the security contract for all ARMY bases in Korea and I was lead engineer for this effort. Among the systems and security capabilities I engineered are Biometrics physical and logical access control, DVR, security Systems Integration, Electronic Security Design Engineering, Fire Alarm engineering, Lenel, Software House, SW House, Casi-Rusco, S2, IP Video, Honeywell, Genetec, CCure 9000, C-Cure 9000, Avigilon, Nextgen-ID, ActiveIdentity, Neurotechnology, Security Systems Technician, Security Designer, Physical Security Engineer, Security Systems Design, Security Applications Engineer, Security Pre Sales, Security Estimator, Electronic Security Estimator
Work Experience
OST Inc. November 2023 - Present
Senior SETA Engineer
Provide PEO EIS with engineering expertise in IT simulations based systems supporting the future ARMY marksmanship training in a virtual environment. I support System Design and security issues.
Senior Model and Systems Architect Cadence Coalition June 2023 to October 2023
* Developing Network and Systems Models and Architectures in accordance with EUROCOM JADC2 needs.
* Creating Architecture models in Magic Draw and CAMEO Systems Modeler. Cameo Systems Modeler is an industry leading cross-platform collaborative Model-Based Systems Engineering (MBSE) environment, which provides smart, robust, and intuitive tools to define, track, and visualize all aspects of systems in the most standard-compliant SysML models and diagrams.
* Creating models in accordance with standards based SysML and JADC2 derived requirements
President/Owner Integrated Communications Systems, Inc Nov 2022 - June 2023
Worked as technical consultant for various clients specializing in cloud architectures and IA security.
Senior Systems Engineer MicroHealth LLC March 2021 to October 2022
Provide Systems and Network Engineering support in the development of SPEARPOINTS medical simulations prototype.
* Developed the SPEARPOINTS prototype which integrates a comprehensive set of commercial off-the-shelf (COTS) High Fidelity Patient Simulator, Low Fidelity Patient Simulators, Part Task Trainers, and other commercial items for training specific medical procedures, selecting and implementing available COTS software applications, SDK's, and in-house application development. The SPEARPOINTS prototype utilizes immersive simulation components like scent generators and speakers to offer the most realistic immersive training environment to the SOF community. Additionally, the SPEARPOINTS prototype includes panic buttons for safety, Pan-Tilt-Zoom (PTZ) cameras, microphones, IR Illuminators, body cameras and multiple HFPS manikins are used to capture information necessary for an in-depth AAR debriefing. The system incorporates multi-sensory Special Effects (SFX) immersion technology, strategically placed PTZ recording hardware specialized for AAR operations, integrated Environmental Monitoring Command and Control servers (E-MC2), and EMS simulation management platform for streamlined simulation control.
* Lead a team of System, Software and Test Engineers in the development of the SPEARPOINTS prototype.
* Responsible for all architectural drawings
* Analysed future requirements to lay out overall objective capability system roadmap for future enhancements to be integrated into the prototype system.
* Developed a data storage system that would support multiple sources and file formats in a streaming environment.
* Developed a Software Product Specification (SPS) package, that includes the baseline version of the executable SPEARPOINTS software fielded, and it's associated documentation.
* Developed, produced, and maintained a production level Technical Data Package (TDP) providing design, engineering, manufacturing and quality assurance requirements information.
* Addressed and implemented the Risk Management Framework (RMF) for an expected Type III stand-alone connected system that has the appropriate security categorization levels for Confidentiality, Integrity and Availability.
* Planned, delivered, and implemented a Cybersecurity Management Plan (CMP)
* As part of the Information Assurance Vulnerability Management Program (IAVMP), I documented the incorporated and unincorporated Information Assurance Vulnerability Alerts (IAVAs), Information Assurance Vulnerability Bulletins (IAVBs), and Information Assurance Vulnerability Technical Advisories (IAVTAs).
* Established a Host Based Security System (HBSS) compatibility and compliance for any system that touches the Army Network directly or indirectly or has the capability to connect, providing network administrators and security personnel with mechanisms to prevent, detect, track, report, and remediate malicious computer-related activities and incidents across all DoD networks and information systems in accordance with the Joint Task Force for Global Network Operations (JTF-GNO) released Communications Tasking Order (CTO) 07-12 (Deployment of HBSS) mandating the deployment of HBSS on all Component Command, Service and Agency (CC/S/A) networks within DoD. All HBSS compliance and guidance will be coordinated through PEO STRI's, CIO, System Engineering Office (SEO).
* Performed reliability analysis on the systems.
* Developed Operators User Manual and Systems Maintenance Manual.
* Developed New Equipment Training (NET) course for the 5th Special Forces Group.
* Develop Configuration Management procedures and processes for control of all products procured and created.
* Administered and provided technical support for the duration of the running prototype.
Senior Systems Engineer CACI July 2015 to March 2021
Provided Systems and Network Engineering support to Army Research Lab (ARL) Sensors and Electron Devices Directorate (SEDD).
* Developed three Laboratory/Test/Collaboration environments at the ARMY Research Laboratory in Adelphi MD. The labs connect to open and secure data networks. This solutions involve a robust cloud environment supporting software lifecycle management and testing in real and virtual environments. This process included the design and installation of the entire infrastructure, including copper, fiber and wireless networking throughout the facilities. Detailed Autocad and Visio drawings of the Network Operations Center for each environment including power, UPS, Rack Elevations and cable runs. I developed requirements and headed a selection process to find the software, vendors and installation companies that could meet the requirements we developed. All three labs came in under budget and were completed early. These labs are used to develop software and hardware solutions for the ARMY sensor division. I developed various routing and cross-domain solutions for connectivity to ARMY laboratories and technical partners.
* Established a virtual software development environment hosted on Amazon Web Services instances utilizing GitLab, Jenkins, Redmine, Kanboard, Mattermost, Docker, Kubernetes, Only Office and Latex protected by Fortinet Fortigate Firewall. This system is used for ARL software development projects and research projects. The system is fully containerized and virtualized to allow easy deployment to other laboratory environments and cloud systems.
* Defined high-level functional requirements and detailed system requirements.
* Identified technical alternatives, performed compliance analysis, determined estimated cost impacts, characterize benefits of hardware and software and submitted system recommendations to my superiors.
* Conducted risk analysis.
* Developed prototype sensor collection systems. Configured tools in a prototype environment and performed initial test cases. Tools used to develop these prototypes included, MatLab, Atlium Designer, KiCad, Labview and circuit lab. Test gear includes Oscilloscopes, spectrum analyzers, multimeters, and protocol analyzers.
* Conducted selected user testing, prepared/coordinated final infrastructure/security.
* Prepared and delivered training materials.
* Established network specifications by conferring with users; analysing workflow, access, information, and security requirements; designing router administration, including interface configuration and routing protocols to work in field and ARL environments.
* Evaluated network performance issues including availability, utilization, throughput, and latency; planned and executed the selection, installation, configuration, and testing of equipment; defined network policies and procedures; established connections and firewalls.
* Maintained network performance and reliability between networked facilities using various testing gear including protocol analyzers, OTDRs, Cable Testers To isolate network issues.
* Secured network by developing, integrating and managing network access, monitoring, control, and evaluating systems using vulnerability scans on system and software levels using ACAS, HP Fortify and STIG Viewer.
* Prepared users by designing and conducting training programs, providing references and support.
* Upgraded network by conferring with vendors, developing, testing, evaluating, and installing enhancements.
* Established financial budgets and monitored expenses and licenses.
* Developed and managed virtual and hybrid storage solutions using RAID storage to store software code, sensor data and documentation. Solutions ranged from 100TB to Virtual in a cloud environment.
* Stood up a help desk environment and was the point of contact for any technical support issues with either the software development platform or storage platforms.
* Administered online Atlassian suite (Bitbucket, Confluence, and Jira) and used Jira Service Desk to provide technical support for secure software development and Agile software development.
* Developed and managed Azure, O365 and Teams environments for collaborative research environment.
* Performed technical support duties for all workstations, servers, network devices and applications used in our branch.
.Worked with the following hardware/software: Microsoft (workstations and servers), O365, Microsoft Office, Microsoft Teams, Skype for Business, Exchange Server, Linux, Ansible (workstations and servers), GITLAB, JENKINS, Mattermost, Kubernetes, Buddy, OpenVAS, Docker, MAC workstations, CISCO routers and switches, Secure and non-secure VTC (CISCO and Polycom), Fortinet Fortigate Firewall, Brocade firewall, VMware (Desktops and Servers) VirtualBox, CITRIX, Remote Desktop. Testing solutions include Wireshark protocol analyser, Track-it! Help desk, Fluke DTX-1800 cable analyser and the Fluke Optimizer Pro OTDR. Vulnerability scanners including ACAS, HP Fortify and STIG Viewer
Identity Management System Architect CACI June 2013 - June 2015
Working at DoD PM Biometrics supporting biometric Warfighter efforts, including field handheld Joint Personnel Identification (JPI) devices and Biometric Enabling Capability (BEC) backend database and communications solutions. Systems support the gathering of multi-modal biometrics information and standardized processes to store and match the biometrics information for functions such as terrorist watchlist matching and physical access control for the DoD and foreign embassies.
* For JPIv2, led a team to develop criteria and standards for a new multi-modal biometric handheld device to replace the current HIIDE systems in field. JPIv1 was a proprietary system which could no longer support the growing needs.
* Conducted market research to evaluate all available devices currently available and in various development stages.
* Developed and conducted laboratory testing of the devices and the associated algorithms for these systems.
* Performed field tests at Camp Atterbury to test communication capabilities of the various systems with the WIN-T network capabilities.
* Documented research and subsequently developed standards and criteria to be used for source selection, eventually selecting Crossmatch SEEK II.
* For BEC1, upgraded the capabilities of the backend hosting capabilities. The current infrastructure was a system based on racks of servers running proprietary code to store match and forward biometrics captured by JPI.
* Led a team to research new alternatives which could virtualize the BEC environment. This included exhaustive research into creating a cloud infrastructure for BEC.
* Conducted System/Network Architectural market research and tested potential solutions and documented alternatives. Alternatives covered the gamut from self-hosting the cloud to hosting services from sources such as AWS, AZURE and Google.
* Documented the Architecture requirements work products in IBM DOORS and Cameo.
* Concurrently researched new algorithms and software for fingerprint, iris and facial recognition to support the new systems for JPIv2 and BEC1.
* This included working closely with NIST, Biometrics Fusion Center and CACI IA Laboratories to test and evaluate all known available algorithms and software to find the best solutions for JPIv2 and BEC1.
* This research was documented and used to purchase new algorithms and software from NEC, Neurotechnologies and Crossmatch
* At the CACI IA Laboratory, collaborated with various vendors in efforts to develop handheld biometrics devices based on Android that would meet the needs of JPIv2, FBI, DoS and local police. The device would be able to do multi-modal biometric enrolments as well as offer forensic capabilities.
* Developed prototypes in our IA lab incorporated various COTS hardware and software solutions.
Information Technology Scientist CACI June 2011 - June 2013
Work as lead integrator and engineer in Command, Control, Communications, Computers and Intelligence (C4I) and Electronic Security and Surveillance (ESS) systems in Korea working as SOFA CACI engineer supporting the 8th ARMY Headquarters
* Worked on the design charrette for the 8th Army headquarters at camp Humphries in Korea; responsible for all C4I, Command/Control and Security design. This included detailed infrastructure design of the entire communication capabilities needs, fiber backbone, rack layout and elevations, communication closets, power, server/ switch room and UPS
* Worked on integration engineering for secure VTC systems (including transmission infrastructure) for both conference and command environments, Physical security control systems using various intrusion detection systems and biometrics-based systems for physical and logical access control.
* Engineered and managed the installation of fiber optic based physical security systems on all US ARMY bases in Korea and updated the system drawings and documentation to show backbone changes. Tested and terminated fiber backbone cables and terminations.
President/Owner Integrated Communications Systems, Inc June 1989 - June 2004
Supervised the daily operations of ICS Inc. Managed all development and field projects for ICS. Developed and marketed VOIP based PBX systems for customer contact centers. Specialized in the Engineering, Furnishing and Installation of secure voice, data and video infrastructures for our military, government and corporate customers.
* Planned, developed and implemented Wide Area Networks which would include technologies such as VPN, VOIP, PKI, NAS, SAN, NFS, data encryption, biometrics, physical and logical access security, secure fiber, surveillance video, distance learning, video conferencing, data collaboration, and energy management controlled from central locations over secure WAN and fiber optic infrastructures.
* Performed technical support for our business customers on voice, data, security, energy management and video systems.
* Example projects include Fort Huachuca post fiber implementation for data and voice including the redesign of the DOIM data center which incorporated the fiber installation to 450 buildings on fort Huachuca from nine distribution nodes we engineered and built. Engineered the design of the entire infrastructure including central office upgrades to support the fiber upgrade. I oversaw the installation and my company did all fiber optic termination and testing. I also engineered and installed all electronic network transmission equipment. Installed over 1000 Novar energy management systems for Walmart and SAM's Club. Theses systems controlled every energy source in a Walmart. Managed 27 installations teams that would install (cabling, Novar electronics) and test the system for Walmart approval. Sprint training center in Kansas City, Missouri. System was built on a Citrix platform allowing remote learning capabilities at all Sprint locations.
Senior Engineer AT&T June 1979 - June 1989
As a test engineer, developed test procedures for projects and products developed by Bell Labs in a special design model shop. This shop was responsible for the process, procedures and certifications needed to bring lab developed products through the manufacturing and marketing process.
Administered the engineering data network at the North Andover, MA facility of Western Electric. Projects included EPCOT Center fiber optic installation transmission equipment, first undersea fiber cable trials, Los Angeles Olympics, Calgary Olympics, and Metrobus (precursor to SONET). Lead engineer for the ACE (Architect, Contractor and Engineering) sales teams. Developed AT&T fiber optic infrastructure solutions for the OCONUS U.S. Government market and foreign governments and foreign business customers.
Education
B.S. Electrical Engineering, Sylvania Technical College - Waltham, MA 1979
Technical Capabilities/Training
AT&T Training: Micro-wave Systems Engineering, Grounding & Bonding, Computer Systems Administration, Fiber Optic Cable Engineering, Copper Cable Engineering, Central Office Switching, Machine Language Programming, COBOL, BASIC, UNIX V, C++, Transmission Systems Security Systems Design, ADP Access Control Systems Design, Graybar Energy Management Systems Design, Magicdraw and Cameo Architecture product training, Autodesk AutoCad training, CORE Architecture product training CISCO - CCNA NOVELL - CNE CITRIX, BICSI - RCDD, CompTIA - A+, CompTIA Security +, MCSA, MCSE, US ARMY Cyber Security Fundamentals
Contact this candidate