G.D. Boozer, MSIS, CISM, CRISC, AAISM, PMP

• Cybersecurity Capability Lead for the company, shaped service offerings, market positioning, and go-to-market strategy. • Designed and delivered tailored cybersecurity solutions for DoD and Federal Civilian agencies in response to RFIs/RFPs/RFQs, supporting pursuits spanning $5M–$5B+ in total contract value. • Built and expanded strategic teaming partnerships, leveraging industry relationships to strengthen pipeline and increase p-win probability. • Led capability briefings and requirements-gathering workshops with government stakeholders to surface mission needs, align solution approaches, and deepen client relationships. • Provided executive-level thought leadership across multiple cybersecurity domains, including Zero Trust roadmaps, proof-of-concept (PoC) designs, and solution narratives. • Advised agencies on accelerating Authority to Operate (ATO) outcomes through automation and AI-enabled compliance workflows and tooling. • Authored a white paper and workflow diagram introducing GRC Cortex, a collaborative GRC concept designed to reduce ATO time and effort for new or existing applications by up to 96%. • Developed an Authority to Operate as a Service (ATOaaS) offering, delivering subscription-based ATO and cybersecurity support to reduce reliance on full-time hires and improve ROI while driving sustained compliance.

• Served as the sole Enterprise Security Architect for the Bureau of Diplomatic Security's Office of Cybersecurity Monitoring and Operations (CMO), providing expert cybersecurity guidance aligned with Gartner’s Cybersecurity Mesh Architecture (CSMA) to drive achievement of Target Security Architecture (TSA) objectives. • Led quarterly enterprise security tool assessments, benchmarking the agency’s security posture against CISA’s Zero Trust Maturity Model and delivering actionable recommendations to accelerate progress towards advanced maturity levels. • Delivered Zero Trust architecture expertise, applying CISA Zero Trust Maturity Model 2.0 and NIST SP800-207/204 a/b/c/d standards to shape policy, guide implementation, and inform security strategy. • Developed and implemented security tool roadmaps using Scaled Agile Framework (SAFe) methodologies, streamlining evaluation and deployment of security solutions across the Department of State enterprise. • Conducted comprehensive Analysis of Alternatives (AoA) for Network Detection and Response (NDR) and Endpoint Detection and Response (EDR) solutions, ensuring alignment with Target Security Architecture requirements and advancing the Department’s Zero Trust maturity. • Conducted a feasibility study to modernize on-premises Splunk infrastructure, recommending a strategic migration to Splunk SaaS, resulting in $10M+ in cost savings over three years and a 40% reduction in daily data ingestion. • Acted as security liaison and advisor for a key AWS cloud migration initiative with the Bureau of Consular Affairs, identifying and mitigating risks while implementing robust security monitoring and alerting for cloud-based applications. • Leveraged business development and federal acquisition expertise to author and guide the Department of State’s solicitation for a Network Detection and Response (NDR) tool, ensuring alignment with operational requirements and industry best practices.

• Designed and delivered tailored cybersecurity solutions for Department of Defense (DoD), Federal Civilian, and State, Local, and Education (SLED) agencies in response to RFIs, RFPs, and RFQs, supporting pursuits ranging from $1M to over $1B in contract value. • Presented capability briefings and led requirements-gathering sessions with government stakeholders, identifying challenges, introducing innovative solutions, and building strong client partnerships. • Advised agencies on rapid Authority to Operate (ATO) achievement and implementation of FedRAMP-approved security tools, providing expert consultation on evolving Governance, Risk, and Compliance (GRC) requirements. • Authored and developed a Zero Trust implementation strategy, Zero Trust Architectural Services (ZTAS), which integrated advanced cybersecurity tools to address DoD’s Zero Trust roadmap (all 7 capabilities, 152 activities), CISA’s Zero Trust Maturity Model 2.0, and OMB’s 22-09 Federal Zero Trust Architecture Strategy. • Authored and developed the Zero Trust Continuous Cycle (ZTCC) framework, a comprehensive approach enabling organizations to assess risk and maturity, remediate vulnerabilities, implement and validate Zero Trust controls, and drive ongoing improvement. • Engineered solutions for migrating legacy applications and on-premise data centers to AWS, Google Cloud, and Azure, leveraging Agile methodologies to ensure secure and efficient cloud transitions. • Researched and architected DevSecOps and CI/CD pipeline solutions, supporting secure migration of systems, applications, and data to cloud environments.

• Program Manager for a 4-year, $10.2M contract delivering cybersecurity engineering, GRC management, FITARA reporting, and strategic consulting to the Substance Abuse and Mental Health Services Administration (SAMHSA). • Directed three cross-functional teams (FITARA, cybersecurity engineering, federal compliance) supporting 30+ applications subject to FISMA, FIPS, NIST, and other federal GRC requirements. • Enabled secure access to sensitive data by implementing Okta and CyberArk for Single Sign-On and Multi-Factor Authentication, supporting Zero Trust initiatives for federal clients. • Oversaw enterprise-wide cybersecurity operations using Splunk, AWS WAF Manager, CrowdStrike, and Nessus for vulnerability management, incident response, IOC blocking, IP blacklisting, and continuous monitoring. • Led the successful migration of SAMHSA’s Splunk enterprise to Splunk Cloud, enhancing scalability, resilience, and operational efficiency. • Delivered Authority to Operate (ATO) support for 30 public-facing websites serving millions of Americans seeking mental health and substance abuse resources. • Provided Security Assessment & Authorization (SA&A) services for cloud-based and legacy tools, leveraging FedRAMP attestation, NIST 800-53 rev5 controls, and RSA Archer GRC to ensure compliance and Supply Chain Risk Management (SCRM). • Directed external penetration testing of all SAMHSA public-facing websites and internal networks, utilizing Burp Suite, Metasploit, and Nessus to identify and remediate vulnerabilities. • Produced and delivered executive reporting and briefings (weekly, bi-weekly, monthly) to the SAMHSA CIO, CISO, and COR, ensuring transparency and accountability. • Conducted Quality Assurance audits, ensuring program adherence to CMMI-SVC Maturity Level 3 certification standards. • Provided strategic leadership that resulted in winning Option Year 1 and securing a contract modification to add a Splunk Engineer, expanding the program’s scope and capabilities.

• Managed the Bureau of Consular Affairs’ Key Management Infrastructure (KMI) Application Team, leading the Department of State’s efforts to encrypt Data at Rest (DAR) for critical global applications, including Microsoft SQL, Oracle databases, Oracle Wallet Keys, and PKI certificates across Windows and Red Hat Linux environments. • Led a 5-person engineering team delivering multi-platform services for file encryption, PKI/certificate management, key escrow, and troubleshooting, collaborating closely with development, firewall, security operations, and systems engineering teams to expand and schedule enterprise encryption services. • Planned and executed multiple Change Management updates for the KMI platform using Scaled Agile Framework (SAFe) methodologies—including sprint planning, IV&V testing, firmware upgrades, Multifactor Authentication (MFA) enhancements, 2+N failover, legacy integration, and secure communications protocols—achieving >99% uptime and reduced latency for encrypted systems. • Authored and submitted Knowledge Base Articles (KBAs) and Visio architecture diagrams to the IT Service Management Team, enhancing ServiceNow documentation and improving customer response to system errors and outages. • Developed, reviewed, and implemented Change Requests (CRs), Configuration Items (CIs), and deployment plans, overseeing IV&V lab testing and ECM process workflows via ServiceNow, Confluence, and IBM ELM. • Directed Risk Management Framework (RMF) processes for the KMI platform, maintaining application SSPs, architectural diagrams, SIAs, ISCPs, SOPs, and supporting A&A activities to secure and sustain Authority to Operate (ATO) for FISMA compliance. • Utilized Splunk, iPost, and AppDynamics SIEM tools to monitor the KMI platform, developing custom Splunk dashboards and queries to rapidly detect and address fatal and warning alerts, significantly improving incident response times.