1. Chris J. Bucklin
~ Current Secret Security Clearance ~
QUALIFICATIONS PROFILE
18 years’ experience in Server, Networkand Storage Administration, Information Assurance, Information Security,
Certification and Accreditation, Disaster Recovery Planning, Risk Management, Continuous Monitoring, Vulnerability
Assessments, Threat Assessments, Incident Response Planning, Change Configuration Management, Security
Architecture Analysis and Security Compliance predominantly on classified systems.
Exceptional troubleshooting skills, with the ability to analyze system issues, determine the root cause and quickly
implement lasting solutions.
Outstanding communicator, coordinates across functionalareas to collaborate in development of information
systems leading to increased productivity throughout the enterprise.
Skilled in configuring virtual environments and associated hardware.
Broad background in dealing with changing environments.
Virtual Environment Management / Information Assurance Compliance
Systems Design and Implementation / System Troubleshooting and Remediation
TECHNICAL PROFICIENCIES
Platforms: Windows Server 2003 and 2008R2, VMWare ESXi 5.0and 5.5, VMWare Security Center, McAfee
Host Based Security System (HBSS): McAfeeePO,McAfee VirusScan (VSE),McAfeeHost Intrusion
Protection(HIPS),McAfeeAsset Baseline Monitor (ABM),McAfee Data Loss Prevention(DLP),
McAfee Policy Auditor(PA).
HP SAN, HP OA, HP Virtual Connect, Fiber Channel Switch,
Tools/Devices: Assured Compliance Assessment Solution (ACAS): Security Center 4.6 – 4.8, Nessus Scanner 5.5 –
6.42, NetworkSecurity – Information Assurance – Computer Security – Security+ -- Servers –
Information Security – IDS – Cisco ASA Firewalls – Active Directory – Intrusion Detection –
Disaster Recovery – Network Administration – TCP/IP – VMware – ForeScout
PROFESSIONAL EXPERIENCE
NCI, Inc. – Supporting the National Guard Bureau in various roles September2001 – Present
ACAS Administrator February2014 – Present
Technical lead for Assured Compliance Assessment Solution (ACAS) for the National Guard Bureau
Headquarters and all 54 states and territories for SIPRNET classified systems. Provideday today maintenanceon
ACASSecurity CenterandNessusscannerstoincludeYUMupdatesontheSecurityCenterandpatchandversionmaintenanceon
all NessusScanners. Provide operational engineering support for the Configuration Management (CM) process in support
of routine patching, softwareand day-to-day operational issues of the ACAS software,hardware and storage and network
infrastructure.
KeyAchievements:
BuiltandmigratedACASSecurityCenterfromonoffsitefacilitytolocalNGBheadquarterstosupportall54statesin
supportof theirvulnerabilityandcompliancescanning.
MigratedfromindividualRetinascannersinallof thestatesandheadquarterstothecentrallymanagedACASsolution,
toincluderemotelyadministeredACASSecurityCenterandinitialdeploymentof SIPRNETNESSUSscannersattheNGB
headquartersandattheJFHQinall54statesandterritoriesduringandextremelytimecompressedrollout.
Providedtechnicalguidancefor9Statesfortheirsuccessfulpassingof theirCommandCyberReadinessInspections
(CCRI). TrackchangesandprovideguidanceonSecurityTechnicalImplementationGuidance(STIGs),andInformation
Assurance&VulnerabilityAssessments(IAVAs) applicabletotheNessusScannersandSecurityCenter.
2. HBSS Administrator September2013 – Present
HBSS Administrator responsible for ePolicy Orchestratorinfrastructureconfiguration, modification and
deployment of all HBSS modules (MA, PA, ABM, HIPS, DLP, VSE, ACCM and RSD) for the NGB SIPRNET network
including the Headquarter and all 54 States and territories. Manageday todaysystemandserversecurityposture
usingHBSSaccordingtoorganizationalsecurityregulations.
KeyAchievements:
ProvidedtechnicalguidanceonHBSSfor8StatesfortheirsuccessfulpassingoftheirCommandCyberReadiness
Inspections(CCRI).
Developed and implemented a STIG compliant HIPSfirewall policy whichwas deployed to all SIPRNET
workstations and servers with no interruption in service.
LeadtheinitialimplementationofHBSSontheNationalGuardBureauSIPRNETnetwork,toincludetheHeadquarters
andall54 StatesandTerritories.
Network,Serverand VirtualizationAdministrator September2001– Present
Undergeneraldirection,responsibleforDesigning,ImplementingandManagingcoreITNetworkandServerinfrastructure
NGBSIPRNET. EnsuredserversweretestedagainstthelatestDISASTIG’sthroughtheuseof GroupPolicyObjectsand
environmentalsecurityrequirements. MaintainfirmwareandIOSonNetworkswitches(CiscoandBrocade),CiscoASA
firewallsandIPSandHP bladeinfrastructuretoincludeVirtualConnects,OnboardAdministratorandfiberchannel
modules.
KeyAchievements:
Transitioned server infrastructure from individual physical server blades to a VMWare environment. Established
VMWare networkand server infrastructure through the configuration of switches (fiber channel, physical and
virtual), Virtual Connects, and SAN allocation.
Managed Virtual Machine Architecture utilizing VMWare, ESXi,VCenter, VSphere, High Availability Configuration,
and VMotion.
Maintained Active Directory domain for NGB Headquarters and all 54 states and territories to include all GPO’s.
EstablishedandmaintainAccessControlLists(ACLs)forCiscoASA5510firewallsfortheNGBHeadquartersSIPRNET
enclaveasperSTIGandDODrequirements.
Implement necessary Ports, Protocols and Service Managements (PPSM) on local firewalls
Establish and document standards and procedures
Bi-weekly patch maintenance on Windows 2008 Servers
Replication STUFF
Continuing Operations (COOP) Administrator August2005 – Present
Lead SIPRNET Network and Systems Administrator for the National Guard Bureau COOP site. Responsible for
KeyAchievements:
Upgrade,design,configurationandimplementationofSIPRNETcorenetworkat theNGBCOOPsite,duringanextreme
timeconstrainttoallowthepassageof anACAinspection.
Successfully configured and moved operations to a new facility on base. This included configuration of a new
Brocade network infrastructure, relocation of 50 blade servers and a 20 Terabyte SAN and reconnection back to
the host site.
Deployed and supported over 100 SIPRNET workstations during
Moved entire SIPRNETITinfrastructure to a new facility.
3. CertificationandAccreditation May2008– Present
Part of the 3 member team responsible for preparing and maintaining Network,Server and workstation configurations to
meet accreditation standards for SIPRNET ACA and CCRI inspections
KeyAchievements:
Currently transitioning from DIACAP to RMF through eMASS for Network Reaccreditation in February 2016.
Configured and STIG’d Server and Network infrastructure in preparation for SIPRNET circuit reaccreditation
through the DIACAP process.
IntegralinpassingtheACAinspectionontheNGBSIPRnetworkby mitigatingthesecurityviolationsfoundduringthe
RetinaandSCAP scans.Thiswasachievedby creatingthenecessaryGPO'sandsystemupdatesrequiredtomitigate
thoseviolations.
Assisted 8 states to successfully pass their CCRI inspection through the user of ACAS, HBSS and Server GPO
configuration.
i2, Inc. August2000 – July2001
NetworkManager
Responsible forall activities relating to maintenance, configurationand day to day activities fora small officeNetwork,
Server and telecommunication infrastructure comprising of over 50 users.
Oversaw activities of small IT staff forall user and workstation daily needs and requirements.
MS Windows File, Print, Exchange, and Backup Server administration.
Sozaand Co.– Supporting the National Institutes of Health (NIAID) December1997 – August2000
IT Administrator
General server administration to include file, print and email servers.
Day to day desktop administration for the Executive officescomprising of over200 users.
CERTIFICATION & TRAINING
Certifications:
VMware Certified Associate – Data Center Virtualization (VCA-DCV)
DISA HBSS Admin (201) MR5 Certification - February 2014, ePO5.1 (2014 Version) – March 2016
DISA HBSS Admin (301) Advanced Certification - March 2014, ePO5.1 (2014 Version) – March 2016
HBSS 3.0 DOD Certification– June 2010, HBSS 4.5 DOD Admin Certification– July 2011
DISA ACAS Version 4.6 – February 2014
DISA ACAS Version 4.8, Assured Compliance Assessment Solution Operator and Supervisor – February 2016
CompTIA Security+ (ce) – September 2010, current
Training:
eMASS
VMware vSphere: Install, Configure, Manage Version 5.5 - On Demand Training
Certificate of Training Department of the Army Functional CISSP – 72 hours
EDUCATION
Bachelor of Science, Marketing West Virginia University Morgantown, WV