Steven Di Bene

I manage a diverse portfolio of Enterprise IT Projects for the US Air Force, Department of Homeland Security, and U.S. Coast Guard. U.S Air Force Enterprise Information Technology as a Service (EITaaS) – Chief Engineer • Responsible for full scope of IT Engineering services: Software Development, Cloud IT Engineering, Enterprise IT Engineering, Endpoint/Asset Management, Compliance, Roadmaps and Strategic Vision of the Program, and Prototypes/Innovations. Department of Homeland Security (DHS) Continuous Diagnostics and Mitigation (CDM) - Deputy Program Manager / Cyber Architect – Division Chief for Program Cloud Operations supporting DHS and U.S. Coast Guard. • Responsible for Solution Architecture, Cloud Automation, Cloud IT and Enterprise IT services, all cloud engineering efforts, capacity planning, RMF HHM, Compliance, and ISSO Support. • Lead the team that built the forward leaning DHS CISA Cybersecurity Cloud which assisted in modeling the OPM Zero Trust Framework published in 2022. • Designed, Deployed, Hardened, Accredited, and Operate two complex multi-cloud (Azure and AWS) environments following best practices, DoD Guidelines, and Organizational Policies. • Conducts Analysis of Alternatives (AoA) for the CDM Program. AoA’s focus is on program gap analysis, evaluation of existing tools and technologies, mission and organization requirements, and best value outcomes. • Manages data analytics and dashboard visualization projects within Azure and Splunk to analyze data feeds from IT systems: performance metrics, security vulnerability assessments, asset management, identity and access management, endpoint compliance metrics, and operational network metrics. • Maintains Program IT Lab environment with 800-171 compliance for Controlled Unclassified Information.

Cloud Engineering and Operations Director for the Department of Homeland Security, Cybersecurity and Infrastructure Security Agency (CISA) Directed an Elite hand-picked Cloud and Enterprise Information Technology Team to build and accredit a new Cloud Enterprise for CISA at the RMF (CIA) HHM level with a roadmap for HHH. The enterprise IT system was built, completed, and delivered an ATO packaged in just over 4 months. ATO was issued by a 3rd party accessor with no technical findings. I perform hands-on work developing roadmaps, managing Active Directory, Tenable, Tanium, CyberArk, Azure Defender\Monitor\Automation, and a host of other Enterprise Security Tools. Across the Line, I'm responsible for revenue forecasts, staffing, cost models, service agreements, and professional services. All growth to date on this effort has been organic through the CDM program listed below in my job experience.

Continuous Diagnostics and Mitigation (CDM) Dynamic and Evolving Federal Enterprise Network Defense (DEFEND) Group A for the Department of Homeland Security (DHS) (CDM DEFEND A DHS) Deputy Program Manager – Program Cloud Operations Provide leadership and governance to a highly skilled team supporting: Data Visualization Dashboards, Extract Transform Load (ETL) development, and a complex multi cloud services environment consisting of Azure, AWS, and VMware across multiple regions. Primary responsibilities are the development of Goals and Vision (6mo-5yr roadmap) for the teams to realize into Ambitions (<6mo milestones). I work daily with my line managers to prioritize work, deconflict technical and personnel issues, and provide extensive briefings to Sr Leadership. My focus is maximizing efficient throughout my teams by pushing tasks to the lowest level of the organization while making sure that the teams are enabled for success. Tool summary relevant to position: Data Visualization – Azure Dashboards, Power BI, RSA Archer, and ELK Data Consistency – Splunk Data Model Development, ELK, Azure Logic-Apps (w/ Azure Functions) Cloud Services – Azure (Trained in DevOps-203 and Architect-300/301), AWS, and vmWare (over 15 years of hands on experience) Prior Role: CDM DEFEND A Technical Director – Provided oversight of COTS tool development to include: Architecture, Development, Engineering, SELC Compliance, and Deployment.

Provide daily management of CACI NCS Program Enclave networks and associated capabilities, such as: operations, help desk, cyber security, change management, and overall infrastructure architecture to ensure a common baseline and compatibility with future initiatives. The information system performs a variety of blue and red team operations in complex virtual, logically and/or physically isolated, environments with the ability to mirror real-world conditions as identified by cyber development teams. Oversee system compliance with the NIST 800-171 for Controlled Unclassified Information and Controlled Defense Information and other federal regulations in support of ISO 27000.01 and DFARS. Solution consists of open source software. Technical Director of Special Programs, responsible for contract management and technical execution of CACI NCS Special Programs technical contracts, including contract compliance and requirements, financial planning, invoicing, customer relations, and the daily management of personnel and technical performance. Responsibilities include architecting and designing technical solutions for a 40,000 user global network. Oversee approved projects through all phases, from design to accreditation and through transition to the government operations contractor. Responsible for the monthly patching, Security Content Automation Protocol (SCAP) scanning, and reporting of the assigned system. Provide technical oversight of VMware operations within the CACI-NSC Special Programs team. Utilizing VMware (vCenter, vRealize, Horizon View, vLog Insight, VMware Operations Manager, and VMware NSX) for software-defined networking micro-segmentation. Systems built are accredited under Risk Management Framework (RMF) Moderate-Low-Low (MLL) categories.

Program Manager for the Defense Counterterrorism Center responsible for custom Software Development in support of the Agency mission. Responsibilities included reporting IT Security Metrics of the solution on a per microservice basis. Reports measured the number of requests, the number of access issued, and the amount of time to service each request. Information was interactively used for continuous service development and performance tuning. Project lead for architecting and designing a software based solution for implementing need-to-know controls around web based content. Software solution was built from the ground up around a Service Oriented Architecture utilizing multiple internal and external microservices to tightly integrate Identity Services with external Clearance databases. This effort consisted of a mixture of developers, engineers and information assurance personnel. I was responsible for the design, coordination, and successful communication between the various teams and the customer. The project scope was to: 1) design and build a customized Identity and Access Management component which collected data from DCADs (a clearance tracking database) and created logical links to an Active Directory (LDAP) environment using Public Key Infrastructure, 2) design and build a customized Outlook 2010\2013 plugin that is capable of integrating with the IdAM solution to provide Protection Level 3 capable e-mail protections (e-mail, calendars, and task filtering), 3) integrate the Identity and Access Management (IdAM) solution with GOTS application suites to provide Protection Level 3 capable file sharing with site and personnel based filtering (via custom, synchronized, IdAM Attributes), and 4) create all documentation and lead the project through the ICD 503 Risk Management Framework Process for a Medium, Low, Low Authorization and Accreditation (A&A). The project completed all assigned scope tasks with 30 days remaining on the Period of Performance.

Windows 7 Technical Refresh Project. Responsible for requirements definition, cyber security control mapping, operating system design, and accompanying deployment methodologies (stand-alone CD with automated Ghost solution and System Center for automated network deployment) for a global distribution of up to 40,000 nodes, as well as coordination of the Assessment and Authorization (A&A) effort and the A&A documentation for RMF compliance to validate that the solution met all required cybersecurity goals. Team member on a Infrastructure Redesign Pilot project. Responsible for the design of a new Active Directory architecture for a 40,000 user network. Project consisted of gathering requirements, writing white-papers on the proposed solution, and assisting with a small virtual lab to demonstrate the capabilities. Direct contribution into the design of a multi-tiered geo-datacluster solution to meet centralized and decentralized design requirements.

Management: Project Manager of multiple contracts. Managed the creation and delivery of all CDRL’s. Provide direct oversight of internal personnel and Oracle NSG subcontractors (T&M based). Provided direct onsite support to the CO, COR and TPOC. Technical Duties - Contract 1 (Dahlgren, VA): Provide engineering oversight of four R&D efforts. 1) Build and accredit a resource domain allowing for the consolidation of common, and redundant, unclassified resources currently distributed across multiple internal TS networks against a JAFAN 6/3 PL2 requirements with an ICD503 design for future transitions. 2) Provide SME support and Project Lead oversight to an Oracle PL4 Cross-Domain Database. 3) Design and implement a fully integrated encryption system to support Level 6 Communities of Interest. 4) Design and develop a self-service cloud infrastructure for on-demand accredited enclaves for short response analytical efforts. Technical Duties – Contract 2 (West Bethesda, MD): Technical lead responsible for the successful tech refresh (5,000 user global network) and migration of a Security Mediator based Protection Level 3accredited system to a modernized Sentris based Protection Level 3accredited system. Contracts 3 and 4 were similar in nature and size to the previous two examples. Additionally, I was the acting ICD503 (Risk Management Framework) cyber security expert for these efforts. My responsibilities include training of all team members for the new ICD standard, review of all security documentation to ensure formatting compliance, and general engineering oversight to validate all architectural decisions against best practices for IT systems. I was also the Subject Matter Expert for the installation, configuration and maintenance of ManTech’s Sentris product line across all contracts.

Integrated with onsite IT support teams and provided subject expert support to internal projects. Performed all operational tasks for a PL3 Configuration Management Lab to include development, testing, integration, and documentation. Achieved a multi-government agency PL3 Approval to Operate for a new IT system meeting DCID 6/3 and JAFAN 6/3 security requirements. First-ever DoD accreditation of ManTech’s Sentris product to provide enhanced Protection Level 3 capabilities. Responsible for designing and implementing all policies, procedures, and system accreditation documentation required for a PL3-level network. Utilized Retina, WASSP, Microsoft Baseline Security Analyzer, MS SCCM, Group Policy Objects, and Scripts to ensure compliance with approved system baselines.

Senior Network Engineer and Team Lead supervising daily maintenance of the network infrastructure to include servers, networking equipment, network encryption devices, T-1 lines, and workstations across a 30-site secure WAN with a PL3 certification. Performed implementation of the security systems and features throughout the network to ensure the compartmentalization of sensitive data within file systems, LiveLink, Active Directory, and Microsoft Exchange. Utilized enterprise application deployment methods to ensure consistent software baselines across the enterprise. Maintained a virtualized testing environment to test patches, updates, and validate IAVx compliance with the ISSO. Provided tertiary helpdesk support for 400+ users, 130+ workstations, and 40+ servers. Responsible for performing all Engineer-level implementations and system changes across the entire network through documented CCB processes. Drafted monthly technical Program Management Reviews; briefed presentations to the CCB, COR, ACOR, DAA, ISSM, and ISSO monthly.

Administered and supported network systems, servers, and desktop computers. Installed new software, patches, and updates to the operating system and 3rd party software. Troubleshot software and hardware issues on servers and workstations. Performed backup and recovery of system data. Management of user accounts, network security, and domain services. Built/configured all Windows-based servers and workstations.

Internal Pilot for the RQ2-A\B Series Unmanned Aerial Vehicles (UAV). Qualifications relevant to the RQ2 UAV: Aviation O-Level Technician, Mechanic, Quality Assurances, Battery, and Electro Static Discharge (ESD) for the RQ2 Platform. Internal Pilot Instructor for both Navy and Marine Corp personnel. Advanced Data Processing Supervisor for Secret and Unclassified Command networks.