Bernie Thomas

Globally recognized security & operations expert leading internal and external security operations, delivery and offerings. Regular conference speaker, product and intellectual property creator, program manager and presales closer. SECURITY, TECHNOLOGY, CREATIONS & DEVELOPMENT 10+ Cutting Edge Cybersecurity offerings & Multiple Cloud Offerings Enterprise/Cloud Hybrid Threat Hunting tools techniques Holistic “E3” Model for evaluating, delivering, selling cybersecurity Global Security Framework for NRC including Insider Threat Mitigation & privacy Enterprise-wide data transformation & abstraction framework, allowing most security devices to share data with most security tools “Friendly Phishing” cloud service consumable by Federal agencies without the need of FEDRAMP A&A PROGRAM & PROJECT Concurrently leading 80+ experts in Security Engineering, Cloud Security, CDM, FEDRAMP, A&A, C&A (Legacy), Privacy, Governance, Vulnerability Scanning & Pen Testing Managing large scale A&A work, 318 systems at all risk levels Maintaining 27001 standards as ISMR for ISO 27001 certification & Security awareness Developed & Implemented formal programs for; Customer Impact Recognition, Company & Peer Recognition BUSINESS Negotiated an increase in contract value of $25 million Introduced a Surge Staffing Model allowing lower priced O&M work & higher competitiveness On Demand Staffing Model – implemented this solution to reduce customer’s Opex Formed joint venture to develop an insider threat mitigation service that included deep dive standard forensics on moves to or from positions of interest, privilege or influence BILLING ROLES FAA IS&P: (Information Security and Privacy) -Security & Program Lead for the Federal Aeronautics Agency -Chief SME contractor leading Continuous Diagnostics & Mitigation (CDM) adoption & ISCM -Chief SME contractor leading Cloud Adoption for FAA IRS PTCA: (Penetration Testing and Code Analysis) -Program Lead for the Internal Revenue Service

Conceived of, designed and led the build of software products, guiding their evolution from concept to global market launch. Major contributor to product and sales strategies, global messaging and training. My first product with CSG (INVOTAS Division) was a Dynamic Adaptive Defense offering combining human selected automation and orchestration capabilities with sensors, management consoles and security elements to create massive evolutionary leaps in situational awareness, and speed of response, and reduction in threat impacts.

Managed this service organization, its resources utilization, and margin while also providing hands on delivery on numerous projects and supporting new business efforts. Example projects: DISA: Worked with DISA personnel and DISA Intrusion Detection contractors to design solutions to defend the US Military Global Information Grid (GIG) from warfare grade Distributed Denial of Service Attacks (DDoS) Identity & Passport Service UK: Reviewed the Passport Service’s security requirements provided recommendations on how to continue to meet those requirements. Provided a new architecture & implementation plan to fill the security gaps - saving of over £10M. US Army: IT and business consulting for the US Army. Managed the ESCC Emerging Technology Evaluation Program Led large software development team in: Attribute based (ABAC) security trimming Single Sign on (SSO) Shared Web Part Repository Automated Workflow Authored on DoDAF Architected SOA web services Federated ID Management Proof FAA EMS: (Enterprise Messaging Service) Security Lead deploying Cloud Email, Converged Voice/Video/Chat and Office applications. Hands on delivery lead for security architecture Compliance lead bringing the cloud service to a FISMA Moderate accreditation Architected Multifactor, Single Sign On, Federated Authentication approach IRS MeF: (Modernized e-File) Created an Application & Process Architecture to allow for XML based Application to Application (A2A) tax return submissions to go directly to the IRS processing tape-based computing backbone American Red Cross (ARC): Designed the next generation architectures for Business Continuity capabilities for Red Cross chapters across the country US Department of Education: Performed strategic IT and business consulting for the Office of the Chief Information Officer. Worked closely with the Chief Architect of the Department of Education (DoED)

Planning and testing of Army and Pentagon Information System fail over and recovery capabilities. US Army CIO Office: Concurrently, Project lead for Emerging Technology Evaluation Program, Project Manager for the Defense Acquisition Challenge Program, and Senior Technologist for the Department of Defense’s (DoD) and Pentagon’s Business Continuity and Disaster Recovery Programs (DCIN/PCIS) Architected, solicited and won cross-Army support (CIO/G6/GAKO/AKO/DKO) for the Globally Accessible Folder (GACF) concept, the new Defense Knowledge Online solution for COOP, Global Remote Access and Telecommuting for over 3 million customers Developed a continuity of operations architecture and plan for one of the world’s largest organizations Managed numerous concurrent multimillion dollar test projects Worked and trained side-by-side with NATO representatives from numerous countries Developed a system for rating technologies and products against identified organizational needs and priorities (rather than against competing products) Worked in conjunction with CIO/G6, SAP (Special Access Programs Office) and multiple vendors to create an Enterprise Architecture for Biometrically controlled access to facilities and compartments. Architecture concept integrated physical and logical Identity Management, Geospatial Information and Access Control Represented the Office of the US Army CIO at presentations, seminars, budget negotiations, and Allied Coalition meetings Won an average $1.2 million annually in new grant awards to fund emerging technology research Published and presented white papers, tutorials, and reports for Defense and Private sector consumption Conducted a series of Pentagon briefings to Army Generals on the details of the Army CIO’s Emerging Technology Evaluation Methodology Validated architectures and guided proof-of-concept efforts Conducted/participated in tabletop, walk-through & functional disaster/disruption exercises

Prime Contractor – Company Spin-off Project: Submitted a project plan and won this competitive-bid engagement to plan, manage and implement the creation and separation of information, hardware and network infrastructures to allow the spin-off and day-one operations of an independent weapon’s guidance systems company, Athena Technologies, from its aeronautics parent, Aurora Flight Sciences. Completed the project early and below cost estimates. Conducted in-depth interviews and network data gathering to determine the future needs of the new company and the types of technology service and performance to which users were already accustomed. Sourced and hired multiple subcontractors to handle various parts of the overall project scope Grew the account by over three times. Areas included IT outsourcing, security analysis, contingency and continuity planning and a large-scale shared storage solution. Designed and implemented new data models, network designs, storage designs, and Internet connection options (including Optical Ethernet and wireless public spaces). Negotiated on the company’s behalf and shaved 45% off of their previously quoted financial outlays. Received special commendations from the CEO at a company awards/recognition ceremony after successfully completing the project on time at more than $20,000 under budget. Prime Contractor – Disaster Recovery Project: Submitted a project plan and won this competitive-bid project to plan, manage and implement a business continuity solution for Athena Technologies. Completed this project on time and below cost estimates. The responsibilities were similar to the one above but also included: Carried out in-depth interviews determining company’s data types, locations and use patterns/requirements. Created programs to launch desktop-to-tape backups that saved about5 $10,000 in licensing fees. Led testing and development efforts for custom code and disaster recover solutions

Segment Lead – North America: Retained to establish and grow a practice aimed at very large, and multinational law firms. Oversaw the planning, design, and delivery of legal specific business and technology solutions. Trained, mentored and guided the development team. Grew accounts, maintained predetermined profitability levels. Ultimately responsible for all program and project completion and customer satisfaction. In a concurrent role, aided in defining and establishing the company’s homeland security practice, and worked closely with the INS to plan for its transition into Department of Homeland Security (DHS). Became familiar with the processes, systems and personnel of the INS and the newly forming DHS. CMM level 2 environment. Created standardized documentation for developing Information Strategic Plans for Industry players. Produced strategic document deliverables market-valued from $125k to $300k that became a basis for generating competitive advantage for multinational firms in all legal practice areas. Lead teams from information gathering to turn-key completion of Internet site development and redesign. Conducted product and service evaluations for firms trying to determine ‘best fit’ enterprise applications and solutions in the areas of Knowledge Management, Collaboration, Intelligent Search Tools, Document Management, Imaging, WAN services, Remote Connectivity, Document Assembly, Wireless, Desktop faxing, Telephony and LAN/WAN design. Program managed large-scale projects for Intranets, Internets, Extranets, LAN/WAN implementation planning, Enterprise end-user application roll out planning and Disaster Recovery/Avoidance planning. http://imc.com/

Very large scale infrastructure planning and deployment practice. Lead North, South & Central America group. Deputy Director, Infrastructure Solutions – Americas: Global Professional Services Division (Telecommunications and Network Infrastructure Delivery). Lead teams in the planning, design, and delivery of Information Technology infrastructure commitments across North, South, and Central America, and the Caribbean. Sourced and developed highly skilled, professional resources. Achieved revenue targets and maintained margin and chargeability levels. Managed vendors. Accountable for P&L (Profit & Loss). Owned Partnering Increased utilization by 45% and revenue over 400%, in 12 months. Maintained 35% profit margins Developed and implemented successful policies for remote & distributed teams Monitored technology trends in real-time. Modified procedures and skill balances to ensure readiness & viability Ensured services and solutions were supported by standardized methodologies and documentation Knowledge Transfer/Training Owner Practice Manager: Internet Data Center and Application Services Provider division. Led team to deliver turn-key Internet Data Centers, Server Farms, and NOC's to world ranked businesses such as Intel, IBM and EinsteiNet, ranging from $2 million to over $100 million Grew the team by over 200%. Developed hiring, training, and retention policies that standardized practices, cut cost percentages, and allowed us to deliver the expertise needed and retain critical resources Led the team of fifty plus specialists in Network and Computer Security, Servers and Systems, Carrier-Grade Networking, Highly Available Storage (HA), and Disaster Recovery Created workforce plans, which included staffing and training requirements for all solution offerings for up to three simultaneous, full-scale implementations Created implementation and contingency plans Managed to a budget