DMI (Digital Management, LLC)

• Support the Office of the Chief Information Officer (OCIO) of a legislative customer • Lead the project from initiation to closure • Manage the project work plan and establish a structured framework • Produce weekly written status reports • Design and facilitate participative stakeholder planning sessions • Conduct environmental and organizational analysis, including SWOT analysis • Revise and finalize the updated OCIO Directional Plan • Develop communications materials supporting the updated Directional Plan • Maintain version-controlled documentation throughout the period

• Design, develop, test, and deploy features and enhancements across front-end (ReactJS) and back-end (Python/FastAPI) layers. • Build and maintain RESTful APIs using FastAPI with proper validation, error handling, versioning, and OpenAPI documentation. • Develop responsive, accessible front-end interfaces using ReactJS in adherence to Section 508 accessibility requirements. • Implement and manage data models, queries, migrations, and stored procedures in PostgreSQL. • Operate within a trunk-based development workflow; commit small incremental changes frequently and use short-lived feature branches and feature flags. • Package applications using Docker; support deployment of containerized workloads to AWS environments. • Write and maintain automated unit, integration, and regression tests using pytest, Jest, and React Testing Library. • Maintain technical documentation, including API docs, data model diagrams, architecture decision records, and developer guides.

• Design, implement, and maintain enterprise security controls for a federal agency client • Enforce Zero Trust principles across cloud, network, and endpoint environments • Support continuous security monitoring, incident response, vulnerability management, and compliance with NIST SP 800-53 and federal cybersecurity standards • Implement and maintain enterprise security controls aligned with NIST SP 800-53 • Enforce Zero Trust Architecture principles per NIST SP 800-207 • Design and maintain RBAC, PAM, and MFA across enterprise systems • Configure and manage IAM solutions and identity providers • Maintain centralized logging, monitoring, and SIEM integration across systems • Conduct continuous security monitoring, vulnerability assessments, and risk analysis • Coordinate remediation per NIST RMF • Secure cloud and hybrid environments (AWS, Azure) • Support incident response, including alert monitoring and forensic collection • Develop and maintain cybersecurity SOPs and ensure audit readiness

• Identify, analyze, and remediate critical vulnerabilities, logic flaws, insecure dependencies, and misconfigurations in web applications and APIs • Drive end-to-end vulnerability lifecycle management, including threat modeling, security assessments, and technical validation of remediation • Integrate security controls into application architectures and APIs; advise on secure design patterns and data protection mechanisms • Review and analyze web server and application logs to detect anomalies and indicators of compromise; implement threat intelligence automation • Deploy, tune, and maintain Web Application Firewalls (WAF) tailored to custom-developed applications and traffic patterns • Configure and manage File Integrity Monitoring (FIM) solutions to detect and alert on unauthorized changes to web content directories • Implement DevSecOps principles throughout the CI/CD pipeline; develop security metrics and compliance reporting against established baselines • Ensure web applications and cloud infrastructure comply with NIST SP 800-53, FISMA, and FedRAMP requirements; participate in audits and risk assessments • Provide Tier II support for security operations and recommend ongoing security enhancements

• Drive the delivery of a School-Based Services Electronic Health Record (EHR) system • Serve as the technical lead for the EHR product • Translate business needs into technically feasible product direction • Provide direction on infrastructure, platform decisions, and system architecture • Coordinate across DVHA, ADS, AOE, school districts, and EHR vendors • Lead and oversee data migration and system integrations/interfaces • Ensure a structured release management process • Drive and refine Agile and hybrid delivery practices across teams • Research industry trends, EHR best practices, and market capabilities • Communicate technical debt, risks, and trade-offs clearly to executive stakeholders

• Conduct quality control reviews for compliance and partner with project managers to resolve findings. • Modernize and maintain reporting structures, dashboards, and quality metrics to provide visibility. • Analysis to identify issues, root causes, process gaps, and translate findings to recommendations. • Lead process documentation efforts, including SOPs, QC workbooks, and scoring criteria. • Apply Confluence best practices to keep the team's knowledge base structured and current. • Develop training materials and job aids that help the team apply quality standards consistently. • Serve as a partner facilitating working sessions and building consensus around process changes. • Continuously evaluate team tools, templates, and workflows for improvement opportunities and take initiative to prototype and implement enhancements with stakeholder buy-in.

• Support implementation, operation, and optimization of Cisco-based network infrastructure, including core, distribution, access, and edge layers • Implement and maintain network security controls aligned with NIST SP 800-53 and NIST SP 800-207 Zero Trust Architecture • Configure and manage routing, switching, and network services, including VLANs, DNS, DHCP, and VPNs; maintain secure configurations aligned with organizational standards • Manage 802.1X port-based network access control to enforce authentication at the network edge • Configure and maintain centralized logging for all network devices; ensure log forwarding to enterprise SIEM platforms in compliance with retention requirements • Conduct continuous monitoring and vulnerability assessments of network infrastructure; coordinate remediation in alignment with NIST RMF • Participate in change management processes; maintain network diagrams, SOPs, and configuration documentation • Serve as technical advisor for complex service desk escalations; collaborate with cloud, Microsoft, and cybersecurity engineering teams • Support incident response activities, including network-level analysis, containment actions, and forensic data collection

• Design, implement, operate, and optimize Cisco-based network infrastructure, including core, distribution, access, and edge layers for high availability, scalability, and mission resilience • Implement and maintain network security architecture aligned with NIST SP 800-53, NIST SP 800-207 Zero Trust Architecture, and Cisco security best practices • Engineer and enforce Zero Trust network principles, including network segmentation, micro-segmentation, and continuous verification of users and devices • Design and implement least-privilege network access controls with role-based and identity-aware access mechanisms, including 802.1X • Configure and maintain centralized logging, SIEM integration, and NDR tool connectivity to enhance threat detection and incident response readiness • Conduct continuous monitoring and vulnerability assessments; coordinate remediation in alignment with NIST RMF • Secure perimeter and public-facing assets through ingress/egress filtering, firewall rule optimization, and MFA for administrative access • Lead security assessments, audits, and compliance reviews; continuously evaluate and enhance network security posture through emerging best practices • Serve as senior technical advisor to stakeholders; collaborate with cybersecurity, cloud, and operations teams to resolve complex issues and improve architecture • Support incident response with network-level analysis, containment actions, and forensic data collection

• Provide engineering-level endpoint and infrastructure support for a federal agency client • Design and maintain secure, standardized workstation images for macOS and Windows platforms, including VDI and remote access configurations • Engineer and maintain endpoint configuration baselines using Ivanti, KACE, Microsoft Intune, and Windows Autopilot; remediate configuration drift and enforce compliance policies • Implement and manage OS and application patch management processes; coordinate orchestration, post-deployment validation, and rollback • Support device enrollment, provisioning, and lifecycle management using Intune, Autopilot, Apple Business Manager, and JAMF; maintain accurate asset inventory • Configure and maintain endpoint logging and telemetry; ensure log forwarding to enterprise SIEM and EDR platforms • Follow a formal assessment-to-remediation workflow, producing Findings Reports, Remediation Plans, and Validation Reports for all engineering changes • Produce and maintain operational runbooks, knowledge transfer materials, and escalation documentation

• Engineer and maintain conditional access policies and device compliance requirements in Microsoft Entra ID and Intune, ensuring cloud-connected endpoints meet security posture requirements before granting network access • Support Microsoft Intune enrollment workflows for cloud-managed devices, including configuration profile deployment and compliance enforcement • Implement and maintain passwordless authentication and hardware-backed credentials for privileged and sensitive accounts across cloud-connected environments • Support VDI connectivity engineering, ensuring remote users on macOS and Windows platforms can securely access the virtual desktop environment • Maintain device enrollment and identity association workflows, ensuring accurate asset inventory and user-to-device linkage across cloud and hybrid environments • Configure and maintain logging and telemetry for cloud identity and access events; ensure audit trails are forwarded to enterprise SIEM platforms • Resolve complex and escalated engineering tickets related to cloud services, identity, and access; produce runbooks and documentation for recurring issue patterns