intersoft security

Independent consultant supporting our clients' information security requirements.

Current clients include: Second Factor, Inc., and Axle Informatics.

Lead a great team to implement the award winning Enterprise Non-Person Entity (ENPE) PKI based on PrimeKey/KeyFactor EJBCA Enterprise Edition. Evangelist for digital certificate lifecycle management and crypto agility to support the migration to quantum safe cryptography. System owner for the ENPE PKI and Enterprise PKI Validation Service (EPVS).

Provided technical architecture, leadership and PKI SME support for the development of the Trusted Certificate Manager (TCM) application. Led USCIS ICAM enterprise Physical Access Control System (ePACS) project, delivering a functioning ePACS system with REST API interface to multiple PACS including Gallagher.

Provided ICAM SME support to DHS HQ ICAM program and acted as liaison between unclassified and classified ICAM projects until company contract expired.

Identity Management Subject Matter Expert/Federal PKI Technical Lead/Security Officer

Served as the Technical Lead of the Federal PKI Management Authority advising on technical matters and setting technical direction for the FPKI MA. Supported the FPKIMA Platform, Community and Security Teams as well as the FPKI Program Manager. Performed analysis in support the FPKIMA’s move from FISMA Moderate to High. Authored white papers in support of the Program Manager, including on FPKIMA Trust Infrastructure Operational Resilience.

Identity Management and Infrastructure Subject Matter Expert

Technical Architect for the Federal PKI. In support of the FPKIMA, directed the redesign of the Federal PKI Trust Infrastructure including new data centers, networking, servers and applications. Over a 12 month period, with monthly traffic increasing over ten times, the redesigned infrastructure improved overall performance by 30x, and 60x for the top two most requested resources. The scalable, highly available infrastructure supported over 1.5B requests per month with sub-quarter second response times. The redesign included project management of the HSPD-12/PIV compliant Physical Access Control System (PACS) installation for one of the new data centers.

Directed elements of a comprehensive testing program to support the FPKI. The testing program included a living, systemic regression test plan and a multi-protocol, customizable load testing capability.

As FPKI Platform Team Lead, managed the operations, security and network administration of the Federal PKI and provided project management oversight for enhancements.