Meghnad Konai, Ph.D.

PROFESSIONAL SUMMARY Elite cybersecurity executive with 20+ years of specialized experience in Risk Management Framework (RMF), Assessment & Authorization (A&A), and enterprise security operations across DoD and Federal agencies. CISSP and ISSMP-certified leader with proven success managing complex cybersecurity programs, securing 19 DISA MNIS system ATOs, and reducing authorization workloads by 66% through process optimization and automation. Core Expertise: RMF/A&A Leadership | Enterprise Security Architecture | Cloud Security (AWS, Azure, FedRAMP) | Zero Trust Implementation | Continuous Monitoring (ISCM) | Cross-Domain Solutions | Team Leadership (20+ professionals) Security Clearance: Active TOP SECRET/SCI with CI POLY | Continuous Evaluation (CE) Program Enrolled ________________________________________ KEY ACHIEVEMENTS Program Excellence: Led authorization of 19 DISA MNIS systems, streamlining processes to reduce ATO package volumes by 66% Policy Leadership: Key contributor to Executive Order 14028 and NIST SP 800-53 Rev. 4/5 enhancements Cloud Pioneer: Architected DISA's first AWS-based cloud security framework for UISS MPE CG environment Team Leadership: Successfully managed 20+ ISSOs across multiple high-visibility federal cybersecurity programs Automation Expert: Implemented DSAWG-approved automated patching solutions and RMF workflow optimization ________________________________________ PROFESSIONAL EXPERIENCE Radix International Consulting – Washington, DC Senior Information Systems Security Officer (ISSO) December 2024 – Present • Lead the full RMF lifecycle for assigned systems including categorization, control selection, implementation, assessment, authorization, and continuous monitoring. • Oversee the implementation and enforcement of cybersecurity policies and procedures for multiple classified information systems. • Develop, update, and maintain authorization artifacts (SSPs, POA&Ms, RARs) in compliance with NIST SP 800-37, ICD 503.

A senior Information Systems Security Officer /Engineer (ISSO/ISSE) and a Subject Matter Expert (SME) with over 20 years of professional experience providing leadership and expertise in research, education, development, coordination, and management in cybersecurity arena for enterprise systems to multiple customers including Department of Defense (DoD) and Federal Government Agencies, information system owners, and technical personnel to help collectively identify strategies to develop and deploy information technologies in a secure manner and enterprise security responsibilities to provide a robust infrastructure and secure operational environment to support the customers’ mission.

Leading the cybersecurity workforce development efforts for the Department of Justice. The tasks include: -Working with the ISSOs, ISSRs, ISSMs for the transition of Information Systems from Xacta to Joint Cybersecurity Assessment and Management previously known as Cyber Security Assessment and Management (CSAM) -Participate in weekly JCAM Office Hours sessions to discuss the JCAM processes for information system users including ISSOs, ISSRs, ISSMs with emphasis on cybersecurity best practices and awareness for increased efficiency and minimize user errors - Conduct simulations and live demonstrations to walk the users through any issues they are experiencing with the JCAM process - Working to comply with the DoJ mandate of transitioning from Xacta to JCAM and prepare for the organization’s readiness for successful transition

• Providing support with responsibilities including enterprise-wide cybersecurity strategy, creation and maintenance of information security policies, information security risk assessment efforts, information technology risk assessments, security monitoring, security awareness and training program, security protection architecture, or cybersecurity solutions. • Worked on the appropriate levels of system availability based on critical system functions and ensured that all the systems have identified appropriate disaster recovery and continuity of operations requirements to include any appropriate fail-over/alternate site requirements, backup requirements, and material supportability requirements for system recover/restoration along with annual training. • Providing Subject Matter Expertise (SME) in cybersecurity and leading the development, implementation, and coordination of activities in evaluating risks associated with deployment, protection, and continuous monitoring of multiple systems designed to ensure, protect, and restore IT systems, services, and capabilities for multiple DHA IT systems using the latest IT technologies across a dispersed and diverse environment • Providing security expertise to DHA information system owners, security points of contact, and technical personnel to help collectively identify strategies to develop and deploy technology in a secure manner • Educating DHA information system owners, security points of contact, technical personnel, and other personnel on information security responsibilities • Worked on the establishment of acceptable limits for the software application, network, and /or systems with the design of reliable communication in the design of dependable systems. Such systems can be relied upon to deliver services in the presence of failures with the attributes of dependable systems including availability, reliability, and security. • Leading cybersecurity support to Program Executive Office DHMS.