At Defense Health Agency (DHA) / Sentar, Inc, I manage RMF activities and eMASS documentation across federal information systems and support Authorization to Operate packages. My work covers the RMF lifecycle, from security categorization and control implementation through authorization support and continuous monitoring.
I develop and maintain System Security Plans, Security Assessment Reports, Plans of Action and Milestones, risk assessments, and authorization evidence. For the Relias SaaS environment, I supported FedRAMP Rev. 5 documentation and assessment preparation with DHA stakeholders.
I also conduct vulnerability assessments using ACAS/Nessus and STIG guidance, supporting patching, security hardening, and monitoring for systems serving DHA locations in the United States and overseas. Earlier, I supported Navy communications and networks, including secure infrastructure, firewalls, VPNs, and access controls.
