Edward Siewick
3611 Roberts Lane Home: 703.276.1727 Arlington, Virginia 22207 email: ESiewick [at] DigiPro.com
Edward Siewick provides over two decades of IT engineering, security, project management, and business experience. Highly organized, methodical and technically skilled, Mr. Siewick is suitable for enterprise architectural planning, IT security, systems engineering, process improvement, and business development requirements. Excellent leadership, interpersonal, oral presentation, business analysis, problem solving, and writing skills.
Experience:
* Northrop Grumman IT/Civilian Agencies Group
McLean, Virginia
Two positions, spanning June, 2004 - PresentEnterprise Architect / Computer Systems Security 5
June, 2006 - Present
Performing IT Security Liaison between the Department of Justice IT security PMO (ITSS) and ATF's IT security PMO; responsible for providing guidance on security policy, planning and implementation to the Bureau. Developing assessment cases for NIST SP800-53A, Appendix J; cited in current version.
Serving as ISSO for a SAML/XML and PKI based federated identity management "trusted broker" system for the Law Enforcement Information Sharing Program (LEISP) pilot. The resulting federation is to interconnect identity providers and data service providers from several thousand organizations. The trusted broker performs a technical translation of assertions of authentication and authorization for the identity and data service providers. Responsible for ensuring the security posture of the system.
Developed an NGIT (internal) engineering lab environment for a secured wireless LAN (WLAN) evaluation. Studied the design constraints and security controls for 802.11i, PKI based EAP-TLS, RADIUS, and TACACS+.
Performed the initial internal FISMA audit of the US Postal Service. Effort included a fine-grained comparison of USPS information assurance policies to federal guidelines, an evaluation of the security program, and an assessment of security controls for a selection of systems. Wrote formal findings, and ad hoc reports.
Wrote guidance on OMB M-06-20 (a PII focused directive) for HHS/Centers for Medicare & Medicaid Services (CMS) senior management. Questions concerned particulars of responsibilities for contractor-operated systems supporting Medicare/Medicaid claims processing.
Enterprise Architect / IT Systems Engineer 7
Department of the Treasury
Treasury Communications System (NGIT TCS contract)
June, 2004 - June, 2006Engineering and Project Management for Treasury Enterprise Directory Services ("TEDS"). Project team answered to Treasury's Office of the CIO, provided value added services to the Treasury and its Bureaus. Provided enterprise architecture, systems engineering, planning and coordination for IdM/IAM (Identity Management), PKI, LDAP, X.500 Directory Services, Federal Bridge, meta directory, and related web applications requirements. Participated in various business development and proposal writing efforts. Wrote program level budget requests, SOWs, WBSs, and PMPs.
Formal SOW-based projects included:
Treasury HSPD-12 Planning and Readiness
Project Manager / Enterprise Architect, Logical Access ControlsProject Management and Logical Access Controls architecture for US Treasury HSPD-12 efforts toward FIPS-201 compliance with PIV-I and PIV-II standards for PKI-enabled smart card based IdM technologies. Technical focus was on Use Cases and Data Flows for business processes and enterprise architecture for a Department level ConOps. Provided direct support to the project COTR.
Performed Certification Agent duties for PIV-I C&A (Treasury DO), including plan development, review of documents, interviews, writing of formal reports.
Treasury Enterprise Directory Services (TEDS) Technology Refresh
Engineering LeadLeadership, project planning and coordination for upgrading hardware, operating systems and applications for the Treasury Enterprise Directory Services. Scope included X.500, LDAP and related applications, twenty-four Sun Solaris servers, and a Sun Cluster. Streamlined the architecture, standardized and simplified server baselines, developed service level redundancy. Improved the business continuity situation via primary and remote hot redundant environments.
Treasury PKI-based "Level 3 Assurance" Secure Extranet Gateway (SEG)
Systems EngineerSystems engineering for a federated, PKI-based Extranet gateway service. The service combined Entrust TruePass and GetAcccss to provide authentication and role-based access controls for remote access to internal department web based applications.
* National Science Foundation, Arlington, Virginia
Two positions, spanning June, 2001 - May, 2004
(contracts for Digital Solutions, Inc.)Infrastructure Architect
National Science Foundation
Integrated Infrastructure Support Services ("ISS" contract)
January, 2004 - May, 2004Responsible for architecture and engineering for IT infrastructure. Developed fail-over redundancy and capacity for growth. Provided subject matter expertise for IT security, C&A, and other information assurance efforts. Participated in business processes evaluation and design of the NSF-wide Directory Services (LDAP) project. Developed standardized server and application configurations, documentation, and Project Management metrics in support of progress toward CMMi Level 3 qualification. Designed and developed automated monitoring systems, processes and procedures for the production environment.
Project Manager
National Science Foundation
Unix, Internet Connectivity & Email ("Postmaster" contract)
June, 2001 - January, 2004Recruited to rescue a failing project. Provided technical and managerial leadership for a team of eight Unix and NT systems engineers. Project supported the NSF IT enterprise, including all networked services, firewalls, proxy servers, web servers, and database servers. Led re-engineering efforts to improve security, stability, robustness, and serviceability of NSF's IT infrastructure. Provided subject matter expertise for information assurance.
Project externally assessed, certified at SEI/CMMi Level 2 October, 2002.
Led project team through a contract re-compete, assisted in bid preparation, and grew staff to 32 full-time employees, quadrupling the company presence. New contract performance began January 1st, 2004.
Awards:
02/2002, Monthly Division Award. For Unix systems migrations from Sun E5500s to Sun Fire 6800s
03/2002, Monthly Division Award. For Comdisco/SunGard "Disaster Recovery" exercise
07/2003, Monthly Division Award. For business continuity efforts during long-term utility power outage
09/2003, Letter of Commendation from Deputy CIO, Division Director. For ad hoc team building efforts during a crisis
Director, Networking Technologies
DigiPro Digital Productions, LLC
Arlington, Virginia
April, 1995 - May, 2001Independent consulting practice. Supported PBS and NPR stations, dot.coms and small ISPs. Handled business development, bids, and contracts. Provided enterprise architecture and engineering services for clients' Internet facilities. Designed and deployed state and regional XTACACS and RADIUS based dial-up access networks, three-tier web based applications.
* Public Broadcasting Service (PBS), Alexandria, Virginia
Two positions spanning September, 1987 - May, 1995
Assistant Director for Technical Support, PBS Online!
Public Broadcasting Service
March, 1994 - May, 1995Selected to stabilize and secure technical operations of a PBS-purchased educational outreach program. Project Management for deployment of a Class B subnet covering 240 PBS member stations. Supported roll-out of several hundred servers, terminal servers, modem racks and VSAT terminals to PBS member stations. Directed technical support operations for Unix sys admins at twenty BBS operations, accounting for approximately 70,000 K-12 teachers’ dial-up accounts. Developed a common architecture and code base across all sites. Developed content code update and deployment procedures. Planned and implemented hardware, operating system and application upgrades for sites. Managed programming projects. Conducted on-site technical training classes. Provided on-site Business Continuity / Disaster Recovery services. PBS Online! later evolved in to www.pbs.org, pbskids.org, and several other significant Internet properties.
LAN and Systems Administrator
Public Broadcasting Service
September, 1987 - February, 1994Responsible for a DECnet and AppleTalk plant for 400 end users. Assisted in pilot evaluation of the PBS VSAT TCP/IP network, testing various TCP/IP applications and architectural plans across a VSAT network. Evaluated remote site server software, K-12 teachers' client software. Remotely managed several dozen remote terminal servers and modem banks.
Formal Education:
George Washington University, BA, 1984, International Affairs, concentration in Economics.
Additional Training:
- SABSA, certified on "Foundations"
- ISC2 CISSP, Certified Information Systems Security Professional
- ISC2 CAP, Certification & Accreditation Professional
- ITIL Foundation Certification
- 90+ hours of classroom SEI/CMMi project management training
- SANS Track 6, Securing Unix Systems, 2002
- Hewlett-Packard, 1993, network training, technical management courses
- US Department of Agriculture; various courses in C programming, Java programming, Oracle administration, and Project Management courses, 1996-2001
Clearances:
Ask.