RMF/ATO Lifecycle Support
Built and maintained RMF authorization packages — System Security Plans (SSP), Security Assessment Reports (SAR), and POA&Ms — serving in ISSO, ISSE, and ISSM roles supporting DoD program Assessment & Authorization at Raytheon and Draper Laboratory. Hands-on with eMASS, ACAS, and HBSS/ESS at Raytheon for system registration, continuous vulnerability scanning, and compliance monitoring.
RMFATOSSPSARPOA&MeMASS
Continuous Monitoring & ATO Sustainment
Applied NIST 800-53 security controls and RMF methodology across cloud and on-premise environments, including control implementation, gap analysis, ongoing vulnerability scanning, and compliance monitoring to support authorization sustainment.
Continuous MonitoringATO SustainmentNIST 800-53
Security Documentation & Bodies of Evidence
Developed and maintained RMF authorization packages, cybersecurity policies and procedures, incident response plans, and compliance documentation aligned to federal and DoD requirements.
SSPSARPOA&MPolicies & ProcedureseMASS
CMMC & NIST 800-171 Compliance
CMMC Level 1 and Level 2 gap assessments, policy alignment, and documentation preparation in support of DoD contract compliance requirements.
CMMC Level 1 & 2NIST 800-171Gap Analysis
Vulnerability Management
Hands-on with ACAS and HBSS/ESS for continuous vulnerability scanning and compliance monitoring. Developed and maintained POA&Ms to track open findings, assign remediation owners, and drive closure within defined timelines.
ACASHBSS/ESSPOA&MRemediation Tracking
Identity, PAM & Zero Trust Advisory
Enterprise security architecture and identity program leadership, including privileged access management implementations, SAML/SSO integration with Okta, and least-privilege policy rollout.
Zero TrustPAMSAML/SSOLeast Privilege