Carl Asa

United States Naval Observatory (USN) • Washington, DC • As the primary security engineer under the CTO, single-handedly administered the entire Host-Based Security System (HBSS)/Endpoint Security Solution (ESS) server, Trellix server, and endpoint security infrastructure for 2,000+ endpoints, ensuring continuous availability and policy compliance. • Managed enterprise endpoint security platforms (Trellix, McAfee ePO) and Host-Based IDS/IPS, overseeing policy deployment, agent health, and proactive threat mitigation. • Executed critical NIST SP 800-53 security control validation, mapping technical configurations to control requirements and documenting evidence to support formal assessor reviews. • Applied DISA STIGs and Security Requirements Guides (SRGs) to harden systems, using compliance tools such as ACAS, SCAP, and Evaluate-STIG to conduct routine scans and prove compliance. • Functioned as a primary incident responder, monitoring security events, investigating alerts (triage), and providing technical analysis to contain threats and restore operations. • Collaborated directly with the Information System Security Manager (ISSM) and Authorizing Officials (AOs) to ensure timely system authorization decisions and sustained compliance. • Led preparation and execution efforts that resulted in a successful Cyber Operational Readiness Assessment (CORA) for the Host-Based Security System (HBSS)/Endpoint Security Solution (ESS) and Trellix platform, demonstrating proper agent deployment, policy configuration, up-to-date STIGs and continuous monitoring across all endpoints.

USS Vella Gulf (CG-72), U.S. Navy • Norfolk, VA • As the Information Systems Watch Officer, supervised and mentored a team of 8 junior systems administrators, managing all Tier I-III escalations and overseeing daily network and systems administration. • Administered a VMWare-based virtualized environment of 32 servers and a Cisco network infrastructure of 8 routers and 6 switches, across 4 enclaves, ensuring 99.9% uptime in a 24/7 operational environment. • Supervised information assurance operations; conducted security audits, remediated violations, and championed security best practices and user awareness across the crew. • Managed the lifecycle of coalition networks, including the decommissioning of a legacy Combined Enterprise Regional Information Exchange (CENTRIX-Block 0) instance and the successful deployment of its successor CENTRIX-M (Multi-Enclave), ensuring interoperability with multinational partners. • Led the relocation and migration of on-premises IT infrastructure to a barge facility, maintaining critical system availability and supporting the seamless decommissioning of USS Vella Gulf.