Profiles search
Malachi D. Robinson, M.S., CISSP
Information Security Specialist at U.S. Department of Health and Human Services, Information Security and Privacy Group
Ft. Washington, MD, United States
Details
Education:
Master of Science (M.S.), Summa Cum Laude
Cybersecurity
Marymount University
Bachelor of Arts (B.A.), Magna Cum Laude
Information Technology
The Catholic University of America
Cybersecurity
Marymount University
Bachelor of Arts (B.A.), Magna Cum Laude
Information Technology
The Catholic University of America
Experience:
Collaborate with senior level Departmental personnel and the CMS Information Security and Privacy Group (ISPG) in scheduling, planning, coordinating, and implementing an Independent Oversight Cyber Security Appraisal Program – i.e., Cyber Executive Order (EO) 14028 Task Force – to establish an enterprise-wide, Zero Trust (ZT) solution by working collectively with CMS application business owners, technical leads, and stakeholders on ZT and ZTA implementation across the agency.
• Demonstrate ISSO support to the IDM modernization and migration effort to ‘lift and shift’ CMS business applications currently hosted on the legacy EIDM platform to a distributed, cloud-based solution in Okta by implementing cybersecurity (CS) initiatives following established Agile project management methodologies and best practices, compliance requirements and risk mitigation.
• Maintain continued technical liaison with the appropriate staff elements throughout the agency by providing direct ISSO support to the CMS Digital Identity Tiger Team--through a joint agency initiative—to define requirements and implement procedures to meet upcoming NIST 800.63.3 remote identity proofing and digital identities guidelines for CMS beneficiaries and federal Marketplace consumers.
• Direct and monitor contractor performance for the IDM program by providing technical advice, counsel, and instruction on cyber security issues to support the IDM modernization effort.
• Participate in the collection and analysis of technical and management data associated with the agency cyber security programs by documenting and reporting remediation evidence for findings that results from CFO, OIG and A-123 audits to ESSG leadership, including demonstrated experience conducting security assessment of IDM, security documentation updates, POA&M management, and coordination of security team interviews to ensure appropriate security measures are in place, and audit activities are scheduled and completed in a timely manner.
2016 : Present
Centers for Medicare & Medicaid Services
Information Security Specialist/ SaaS Governance Lead
Enterprise Identity Management (EIDM) Task Lead, CMS-OTS
Directly supported the EIDM Project Management Office (PMO) by providing guidance and expertise to EIDM and its sponsors to specify and implement FISMA-compliant Identity and Access (IdM) strategies, capabilities, reference architectures and solutions. Ensured proper reporting of EIDM activities to achieve the confidentiality, integrity, and availability of systems, networks, and data on existing or future hosting platforms or environments.
• Coordinated with EIDM ISSO to ensure system adheres to Agency security policy and requirements including participation in annual comprehensive Security Controls Assessment (SCA) and Risk Vulnerability Assessments (RVA).
• Collaborated with EIDM ISSO in the review and development of the Symantec and Experian Interconnect Security Agreement (ISA) and EIDM Memorandum of Understanding (MOU) documentation to ensure that all aspects of security-related guidelines and policies were adhered to and maintained accordingly.
• Monitored IT projects related to the application and infrastructure development of the Baltimore Data Center Disaster Recovery (DR) operations environments and buildout of the Hewlett-Packard Enterprise DR site.
• Maintained Risk Register, Decision Log and Lessons Learned artifacts to identify, document, monitor and remediate EIDM security risks.
• Developed and maintained EIDM project management documents, including the EIDM Master Project Schedule, Executive Management Dashboards, Master Metrics, EIDM Integration and Environments timelines, and Work-in-Progress (WOP) reports.
• Collaborated with team members in the liaison with Government agents, performing contractors and technical community to review and prepare PMO presentations and IT lifecycle documents (e.g. PRA, SORN, AOA, MITBC Acquisition Plan, etc.).
2014 : 2016
Noblis
Lead IT Analyst
Provided Tier II technical support to 1000+ Windows end users in a medium-size enterprise environment, including contributing technical expertise in evaluating, troubleshooting, and resolving routine computer incidents for internal and external users.
• Led IT initiatives and followed defined SOP for incident isolation and notification, including escalating complex IT issues, evaluating and tracking interactions, incidents and requests within the CA Service Desk Management tool, and providing technical and non-technical users with incident status and outages.
• Reimaged, deployed, tracked and documented inventoried systems, as well as restored end user data and ensured systems and user accounts were moved into the correct Active Directory OU following deployment.
• Provided phone and email support and remote assistance to Noblis employees located at headquarters as well as remote sites and satellite offices.
• Coordinated with vendors for hardware warranty repairs and provided feedback on part replacements and upgrades when necessary.
• Recorded, prioritized, and tracked all assigned help desk calls and documented work efforts in the CA Service Desk Management ticketing system. Additionally, followed up with end-users in a timely manner to diagnose any outstanding incidents or issues not resolved according to the date/time specified in an initial service request.
• Responsible for troubleshooting user account issues, to include unlocking and resetting passwords for domain accounts, sub-administering and tracking Entrust email certificates, managing RSA SecureID tokens and pins as well as installing and updating enterprise applications for company-issued and personal mobile devices.
• Collaborated with Tier I and III specialists on technical issues, processes and procedures and special projects.
• Escalated issues, in accordance with Noblis’ Corporate policies and procedures, to the Service Desk Manager and network and system administrators as necessary.
2013 : 2014
Noblis
Internal Information Technology Specialist
• Demonstrate ISSO support to the IDM modernization and migration effort to ‘lift and shift’ CMS business applications currently hosted on the legacy EIDM platform to a distributed, cloud-based solution in Okta by implementing cybersecurity (CS) initiatives following established Agile project management methodologies and best practices, compliance requirements and risk mitigation.
• Maintain continued technical liaison with the appropriate staff elements throughout the agency by providing direct ISSO support to the CMS Digital Identity Tiger Team--through a joint agency initiative—to define requirements and implement procedures to meet upcoming NIST 800.63.3 remote identity proofing and digital identities guidelines for CMS beneficiaries and federal Marketplace consumers.
• Direct and monitor contractor performance for the IDM program by providing technical advice, counsel, and instruction on cyber security issues to support the IDM modernization effort.
• Participate in the collection and analysis of technical and management data associated with the agency cyber security programs by documenting and reporting remediation evidence for findings that results from CFO, OIG and A-123 audits to ESSG leadership, including demonstrated experience conducting security assessment of IDM, security documentation updates, POA&M management, and coordination of security team interviews to ensure appropriate security measures are in place, and audit activities are scheduled and completed in a timely manner.
2016 : Present
Centers for Medicare & Medicaid Services
Information Security Specialist/ SaaS Governance Lead
Enterprise Identity Management (EIDM) Task Lead, CMS-OTS
Directly supported the EIDM Project Management Office (PMO) by providing guidance and expertise to EIDM and its sponsors to specify and implement FISMA-compliant Identity and Access (IdM) strategies, capabilities, reference architectures and solutions. Ensured proper reporting of EIDM activities to achieve the confidentiality, integrity, and availability of systems, networks, and data on existing or future hosting platforms or environments.
• Coordinated with EIDM ISSO to ensure system adheres to Agency security policy and requirements including participation in annual comprehensive Security Controls Assessment (SCA) and Risk Vulnerability Assessments (RVA).
• Collaborated with EIDM ISSO in the review and development of the Symantec and Experian Interconnect Security Agreement (ISA) and EIDM Memorandum of Understanding (MOU) documentation to ensure that all aspects of security-related guidelines and policies were adhered to and maintained accordingly.
• Monitored IT projects related to the application and infrastructure development of the Baltimore Data Center Disaster Recovery (DR) operations environments and buildout of the Hewlett-Packard Enterprise DR site.
• Maintained Risk Register, Decision Log and Lessons Learned artifacts to identify, document, monitor and remediate EIDM security risks.
• Developed and maintained EIDM project management documents, including the EIDM Master Project Schedule, Executive Management Dashboards, Master Metrics, EIDM Integration and Environments timelines, and Work-in-Progress (WOP) reports.
• Collaborated with team members in the liaison with Government agents, performing contractors and technical community to review and prepare PMO presentations and IT lifecycle documents (e.g. PRA, SORN, AOA, MITBC Acquisition Plan, etc.).
2014 : 2016
Noblis
Lead IT Analyst
Provided Tier II technical support to 1000+ Windows end users in a medium-size enterprise environment, including contributing technical expertise in evaluating, troubleshooting, and resolving routine computer incidents for internal and external users.
• Led IT initiatives and followed defined SOP for incident isolation and notification, including escalating complex IT issues, evaluating and tracking interactions, incidents and requests within the CA Service Desk Management tool, and providing technical and non-technical users with incident status and outages.
• Reimaged, deployed, tracked and documented inventoried systems, as well as restored end user data and ensured systems and user accounts were moved into the correct Active Directory OU following deployment.
• Provided phone and email support and remote assistance to Noblis employees located at headquarters as well as remote sites and satellite offices.
• Coordinated with vendors for hardware warranty repairs and provided feedback on part replacements and upgrades when necessary.
• Recorded, prioritized, and tracked all assigned help desk calls and documented work efforts in the CA Service Desk Management ticketing system. Additionally, followed up with end-users in a timely manner to diagnose any outstanding incidents or issues not resolved according to the date/time specified in an initial service request.
• Responsible for troubleshooting user account issues, to include unlocking and resetting passwords for domain accounts, sub-administering and tracking Entrust email certificates, managing RSA SecureID tokens and pins as well as installing and updating enterprise applications for company-issued and personal mobile devices.
• Collaborated with Tier I and III specialists on technical issues, processes and procedures and special projects.
• Escalated issues, in accordance with Noblis’ Corporate policies and procedures, to the Service Desk Manager and network and system administrators as necessary.
2013 : 2014
Noblis
Internal Information Technology Specialist
Company:
Centers for Medicare & Medicaid Services
Years of Experience:
10
Skills
Active Directory, Apple iOS, Dell Workstations, Desktop Deployment, DHCP, Help Desk Support, Information Technology, LAN-WAN, Linux Desktop, Mac OS, Major Gift Development, Microsoft Certified Professional, Microsoft Office, Microsoft Technologies, Mobile Devices, Mobile Technology, Network Administration, Norton Ghost, Printers, Remote Desktop, SharePoint, Software Installation, Symantec Endpoint Protection, TCP/IP, Technical Support, Troubleshooting, VMware Fusion, VMware Workstation, VPN, WDS, Windows 7, Windows Server, Wireless Networking, Symantec Endpoint, Microsoft Certified
About
CISSP certified, goal driven, and self-motivated IT professional with 7+ years of consulting and cybersecurity risk and program management experience with the United States Department of Health and Human Services (HHS). Demonstrated experience managing large scale, federal IT acquisitions and professional services contracts (>$20 million) to support the Centers for Medicare and Medicaid Services (CMS) Identity Management and Medicare Eligibility, Enrollment and Payment programs.
Profile Photo
