Digital Management LLC

• Administer and support the ABMC Microsoft 365 tenant, including Entra ID, Conditional Access policies, break glass account governance, Intune device management, Exchange Online, SharePoint Online, Teams, and OneDrive configuration and troubleshooting. • Respond to DHS, CISA, C-CAR, and emergency directives, evaluating the ABMC tenant against required security baselines, identifying configuration gaps, documenting exceptions, and coordinating remediation. • Monitor and operate Microsoft Defender and Microsoft Sentinel for the ABMC environment, supporting incident triage, escalation, and follow-through within SLA response targets. • Drive Microsoft Purview records management maturation by reviewing and updating retention rules, refining record labels, expanding Purview coverage to additional SharePoint sites and mailboxes, planning automated classifiers, and supporting audit and compliance reviews. • Develop and maintain configuration documentation, including current system documentation, architecture review summaries, health check reports, and change decision records following every configuration change. • Support ongoing Microsoft 365 Copilot governance activities as Copilot features land in the ABMC tenant under applicable license activations. • Train ABMC's Records Manager on Purview advanced features and conduct knowledge transfer as part of ongoing governance maturation. • Enforce Section 508 compliance for all deliverables and configurations in scope.

• Lead all application development and support activities under CLIN 0004 • Deliver sprint-based enhancements and ongoing support for ABMC's Dynamics 365 Customer Service platform • Serve as the technical owner of the application inventory, data flows, and integration architecture across Dataverse, Power Pages, Power Automate, and Power BI • Manage all releases through ABMC's Change Control Board process • Develop, configure, and support Dynamics 365 Customer Service including case management workflows, queues, routing rules, and entity customizations within the ABMC tenant • Build and maintain Power Apps (model-driven and canvas), Dataverse schemas, Power Pages public-facing sites, Power Automate flows, and Power BI reporting solutions aligned to ABMC business requirements • Design and maintain OAI-PMH and RESTful API integrations to support the WeRemember application and any successor platforms • Maintain current technical documentation for all supported applications, including application inventory, data flows, interface points, security roles, configuration decisions, and release history • Produce sprint deliverables, including Technical Design documents, Test Plans, Test Results, and Release Notes for each authorized iteration • Ensure all application deliverables and outputs meet Section 508 accessibility requirements

• Support the Office of the Chief Information Officer (OCIO) of a legislative customer • Lead the project from initiation to closure • Manage the project work plan and establish a structured framework • Produce weekly written status reports • Design and facilitate participative stakeholder planning sessions • Conduct environmental and organizational analysis, including SWOT analysis • Revise and finalize the updated OCIO Directional Plan • Develop communications materials supporting the updated Directional Plan • Maintain version-controlled documentation throughout the period

• Design, develop, test, and deploy features and enhancements across front-end (ReactJS) and back-end (Python/FastAPI) layers. • Build and maintain RESTful APIs using FastAPI with proper validation, error handling, versioning, and OpenAPI documentation. • Develop responsive, accessible front-end interfaces using ReactJS in adherence to Section 508 accessibility requirements. • Implement and manage data models, queries, migrations, and stored procedures in PostgreSQL. • Operate within a trunk-based development workflow; commit small incremental changes frequently and use short-lived feature branches and feature flags. • Package applications using Docker; support deployment of containerized workloads to AWS environments. • Write and maintain automated unit, integration, and regression tests using pytest, Jest, and React Testing Library. • Maintain technical documentation, including API docs, data model diagrams, architecture decision records, and developer guides.

• Design, implement, and maintain enterprise security controls for a federal agency client • Enforce Zero Trust principles across cloud, network, and endpoint environments • Support continuous security monitoring, incident response, vulnerability management, and compliance with NIST SP 800-53 and federal cybersecurity standards • Implement and maintain enterprise security controls aligned with NIST SP 800-53 • Enforce Zero Trust Architecture principles per NIST SP 800-207 • Design and maintain RBAC, PAM, and MFA across enterprise systems • Configure and manage IAM solutions and identity providers • Maintain centralized logging, monitoring, and SIEM integration across systems • Conduct continuous security monitoring, vulnerability assessments, and risk analysis • Coordinate remediation per NIST RMF • Secure cloud and hybrid environments (AWS, Azure) • Support incident response, including alert monitoring and forensic collection • Develop and maintain cybersecurity SOPs and ensure audit readiness

• Identify, analyze, and remediate critical vulnerabilities, logic flaws, insecure dependencies, and misconfigurations in web applications and APIs • Drive end-to-end vulnerability lifecycle management, including threat modeling, security assessments, and technical validation of remediation • Integrate security controls into application architectures and APIs; advise on secure design patterns and data protection mechanisms • Review and analyze web server and application logs to detect anomalies and indicators of compromise; implement threat intelligence automation • Deploy, tune, and maintain Web Application Firewalls (WAF) tailored to custom-developed applications and traffic patterns • Configure and manage File Integrity Monitoring (FIM) solutions to detect and alert on unauthorized changes to web content directories • Implement DevSecOps principles throughout the CI/CD pipeline; develop security metrics and compliance reporting against established baselines • Ensure web applications and cloud infrastructure comply with NIST SP 800-53, FISMA, and FedRAMP requirements; participate in audits and risk assessments • Provide Tier II support for security operations and recommend ongoing security enhancements

• Provide on-site Tier II IT help desk support to a federal legislative branch agency • Inspect, image, configure, and deploy Windows desktops, macOS systems, and mobile devices • Install, configure, troubleshoot, and maintain employee hardware, software, and peripheral components • Register and configure mobile devices within enterprise Mobile Device Management platforms • Load and verify software packages using automated imaging and patching tools • Diagnose and resolve complex endpoint issues, including MFA failures and network connectivity problems • Support Tier I personnel by enforcing best practices and creating standard operating procedures • Use JAMF and Microsoft Intune for endpoint automation and configuration management • Administer Microsoft Entra ID and Active Directory environments • Manage and track service tickets, providing clear communication on status and resolutions • Replace defective or obsolete hardware and software • Identify recurring problem trends and develop mitigation strategies • Participate in project and engineering tasks including patch management and vulnerability remediation cycles

• Drive the delivery of a School-Based Services Electronic Health Record (EHR) system • Serve as the technical lead for the EHR product • Translate business needs into technically feasible product direction • Provide direction on infrastructure, platform decisions, and system architecture • Coordinate across DVHA, ADS, AOE, school districts, and EHR vendors • Lead and oversee data migration and system integrations/interfaces • Ensure a structured release management process • Drive and refine Agile and hybrid delivery practices across teams • Research industry trends, EHR best practices, and market capabilities • Communicate technical debt, risks, and trade-offs clearly to executive stakeholders

• Conduct quality control reviews for compliance and partner with project managers to resolve findings. • Modernize and maintain reporting structures, dashboards, and quality metrics to provide visibility. • Analysis to identify issues, root causes, process gaps, and translate findings to recommendations. • Lead process documentation efforts, including SOPs, QC workbooks, and scoring criteria. • Apply Confluence best practices to keep the team's knowledge base structured and current. • Develop training materials and job aids that help the team apply quality standards consistently. • Serve as a partner facilitating working sessions and building consensus around process changes. • Continuously evaluate team tools, templates, and workflows for improvement opportunities and take initiative to prototype and implement enhancements with stakeholder buy-in.

• Support implementation, operation, and optimization of Cisco-based network infrastructure, including core, distribution, access, and edge layers • Implement and maintain network security controls aligned with NIST SP 800-53 and NIST SP 800-207 Zero Trust Architecture • Configure and manage routing, switching, and network services, including VLANs, DNS, DHCP, and VPNs; maintain secure configurations aligned with organizational standards • Manage 802.1X port-based network access control to enforce authentication at the network edge • Configure and maintain centralized logging for all network devices; ensure log forwarding to enterprise SIEM platforms in compliance with retention requirements • Conduct continuous monitoring and vulnerability assessments of network infrastructure; coordinate remediation in alignment with NIST RMF • Participate in change management processes; maintain network diagrams, SOPs, and configuration documentation • Serve as technical advisor for complex service desk escalations; collaborate with cloud, Microsoft, and cybersecurity engineering teams • Support incident response activities, including network-level analysis, containment actions, and forensic data collection