Areas of Expertise

Solution Leader — Network/Cyber OEM Product Evaluation Brief — Develop and document a short-form OEM product evaluation deliverable for Operations Technology utilizing Open Flow Software Defined Network technologies within industrial Operations Technology (OT) environments. Demonstrates solution effectiveness in product space evaluating multiple criteria for purposes of solution purchase decision-making by customers. — COMPLETED 2nd Qtr 2025

Team Member — Nuclear Power Innovation Project Pursuit — Contribute to providing secure communications systems and risk identification and mitigation for SMR nuclear generation innovation project off-shore, near-shore. — COMPLETED, 2nd Qtr 2025

Cybersecurity Architect — Water Infrastructure Risk Mitigation Project — Assist large U.S. metropolitan water utility with analyzing comprehensive  SCADA cybersecurity Assessment, identifying optimum control additions and procedure fit for established policies. Controls involved Active Director IDAM, additional Password security controls and Remote Access policy, process and procedures creation. — COMPLETED 3rd Qtr 2025

 

Extensive experience working directly for OEM software and hardware producers — now assisting organizations to design and deploy secure, reliable, and operationally efficient critical infrastructure communications solutions. 

Presenter — Joint Kansas University and FBI Cybersecurity Conference — FBI Director Christopher Wray, keynote speaker, presenting compare and contrast, IT verses OT communications security. — 1st Qtr 2024

Team Member — NERC CIP 013 Supply Chain Risk Management Update Team (Gap Review) — Continue contribution working within the NERC CIP standards committees to assist in resolving identified gaps in existing 013 standard. — 2nd Qtr 2024

Team Leader — NERC CIP 013 Supply Chain Risk Management Team (Incident Response Guide Update) — Supply Chain Risk Management — Vendor Incident Response Guide version 2 revisions. Effort to keep up to date existing guidance documentation for use by energy sector operating entities supporting the U.S. Bulk Electric System (BES). — 1st Qtr 2024

Investigator — Contract Compliance — Cybersecurity subject matter expert for team investigating supply chain project execution performance for critical infrastructure. Purpose is to validate cybersecurity designated aspects of information handling and assist to improve overall project data security. — 1st Qtr 2024

 

Contributor — Cybersecurity Services Group Launch Team — Assist with the development and launch of new cybersecurity services organization delivering Engineering Procurement and Construction services. Activities include organization design: human resource identification and qualifying through interviews; service offerings identification; revenue vs. strategy refinement of initiatives; cross markets cyber services delivery integration and communications development; assist with development of sales, marketing and media collateral. — December, 2023

Contributor — Security Product Development — Participation in early development process for multiple products; exploring possible product creation including customer input mechanisms such as focus group surveys and product information videos, contribution to (ERD) including security feature/function and Marketing Requirements (MRD) Engineering Requirements sets. — October, 2023

Team Member — Critical Infrastructure Cybersecurity Assessment/Audit — Utilize automated CISA CSET tool to assess, audit and validate network and cybersecurity posture for large southwest metropolitan utility. Analyze results, measure risk and recommend controls enhancements to close identified gaps. Issue C-level report on findings and review mitigation project(s) cost. — August, 2023

Principal Consultant — Cyber Attack for Ransomware (CAFR) Reaction Plan — Assist medium size U.S. Energy sector customer, investigate and assess requirements, methods and activities required for responding to a ransomware attack. Include critical systems priorities, playbook, existing IR and DR plan impacts, area and access isolation techniques, data flows and processes while negating ransom payment; utilize existing frameworks and tools wherever possible, (e.g. CISA Ransomware preparation information, INL CCE®, MITRE ATT&CK® framework, etc.). — April, 2022

Co-Presenter — "Developing a Cyber Attack for Ransomware (CAFR) Response Playbook" — Presentation to an electric utility Reliability Organization (RO) relating methods and techniques for establishing planned organization, systems and network response to a CAFR (Cyber Attack For Ransom) event while negating ransom payment — March, 2022

Principle Consultant — Cyber Attack for Ransomware (CAFR) Reaction Plan — In cooperation with mid-size Energy sector customer, investigate and assess requirements, methods and activities for responding to a ransomware attack. Produce Playbook that recognizes critical systems priorities, existing IR plan impacts, isolation techniques accounting for essential operational application flows and processes, while negating ransom payment. — July, 2021

Technical Coordinator — Private Wireless Device MPLS Implementation — Develop very large-scale energy sector customer field demonstration criteria for implementation and validation for 17 site MPLS VPN SCADA/AMI OT data network with data flow filtering protections that include wired, private radio spectrum and microwave wireless infrastructure. Examined interaction requirements of IP network team and RF team seeking to optimize overlapping responsibilities and tasks for provisioning, validation testing and turn up. — March, 2021

Co-Creator — OT Services Supply Chain Cybersecurity Risk Management Survey Response Template — Develop new process to assist pre-sales organization response to various customer surveys resulting from NERC CIP 013 Supply Chain Risk Management requirement. Customer submitted survey may be of any form, depth or breadth. Response process considered assurance of risk reduction and project information protections. — April 2021

Principal Consultant — Cybersecurity Process Documentation — North American Reliability Corporation — Critical Infrastructure Protection (NERC CIP) procedures documentation standardization project for very large scale Energy sector client. Provide review, validation and verification for series of practical process/procedures guide documents aligned with NERC CIP rule set. — August, 2020

Principal Consultant — VLS Network and Cybersecurity Design — North American Reliability Corporation — Critical Infrastructure Protection (NERC CIP), BCA Low Impact Electronic Access Point (LEAP) Assessment. for a very large-scale OT network. Developed Statement of Work (SoW), led Design and Deployment — pursuant to rapidly evolving DoE directives for Critical Infrastructure Protection compliance requirements, active project to assess vulnerability in approximately 100 electric grid field sites through inventory and logical assessment, detecting and analyzing all NERC CIP LEAP's and cyber assets. — February, 2019

Human Resourcing Consultant — OT Network Infrastructure Talent Search — Requested by private energy generation, transmission and distribution utilities to assist in identification and qualification of Smart Grid technical resources for very large-scale O.T. network modernization projects. Interview and rated  candidates with urgent timeline requirements. — November, 2019

Technical Team Leader — Very Large Scale Network and Cybersecurity Design, MPLS — Very Large-scale OT network design Proof-of-Concept Lab Electric sector — led creation and execution of OEM switch/route/firewall proof-of concept test to evaluate best design solution employing MPLS network virtualization, data path encryption and traffic flow filtering. Tasks included test plan case development and documentation, lab provisioning, inventory controls, test monitoring, results evaluation and outcomes memorandum. — July, 2018

Principal Consultant — Network Operations Center CMMI — Assist with development of RFP response, win and then execute assessment of Network Operations capabilities for large multi-state SouthEast U.S. utility. Duties included current state analysis, gap analysis, CMMI maturity modeling of energy network monitoring operation (NMS) to track progress toward future state goals. Areas of analysis include application requirements and data flow, network health baseline and deviation, alert monitoring, tools, staffing and cybersecurity integration. — April, 2018

Lead Product Evaluator — Cybersecurity IDS Product — Develop new service, related collateral, sell then execute as leader for product field evaluation team. Analyze and record Human Factors observation through user interviews and use-case functional testing of  industrial networks purpose-built intrusion detection appliance supporting DNP3 and related protocol(s) signature detection. Developed Statement of Work (SoW) for service. Product was examined during Proof-of-Concept deployment within operational production network. — June, 2017

Co-Developer — Cybersecurity Live-fire Exercise — Developed statement of work (SOW), assisted with design and execution of organization-wide cybersecurity intrusion(s) exercise including Identification, Incident Response and Mitigation for generation/transmission multi-state electric cooperative; included master security event list (MSEL) development and exercise injects for human engineering site access, EMS SCADA-Master packet payload modification, law enforcement scenario, and natural disaster event, assessing response capabilities and business continuity impacts. — January, 2017

​

​

Senior Consulting Engineer — Network Design and Cybersecurity, MPLS — Multi-year critical account assignment, on-site supporting named account to help ensure customer success with product line in large-scale multi-year MPLS deployment.

Contributor Technical Coordinator/Architect — Very Large Scale Network Engineering, MPLS —  Multi-year engagement advising state government I.T. organizations. Hands-on network architect, infrastructure engineer and team leader for federated state government, all-agency $5,000,000+ network transition project: Migration from legacy network to full MPLS virtualized, tiered and modularized design: 1000+ router nodes; 37,000+ ports, 100+ user groups; future-proofing designs, flexible growth trajectories and investment preservation.

Architect — Network and Cybersecurity Architecture — Very large-scale energy distribution co-op Operations Control Center network architecture redesign including multi-tiered multi-vendor Firewall architecture with NERC CIP regulatory compliance factors addressed: Logging; DMZ; Access Controls; Interactive Remote Access; Change Control Reporting.

Project Team Principal Consultant — Network and Cybersecurity Controls — Assist with development of RFP response for win and then execute, Energy Markets network, large-scale firewall rule set refresh (1000+ ACL's) for multi-tiered and virtualized security architecture. Work was performed during production hours for the Market necessitating extreme care for rule validation and change activities.

Principal Architect — Network Cybersecurity Strategy — Assist with development of RFP response, win and then execute Telecom Master Plan for very large scale Generation, Transmission and Distribution, I.T. infrastructure, South East U.S. energy co-op; defining new highly secure and reliable Smart Grid data transport infrastructure supporting AMI, HMI, RTU, DNP3 SCADA-monitored and managed field network flows. Work produced Current State, Futures State, Solutions Analysis and Roadmap.