Chari Pollard

Information Security Engineering · Agency Compliance

Information Systems Security Engineer

AT&T

• Provides technical support to ensure agency systems meet monthly SLA requirements and remain aligned with security expectations.
• Supports Authorization and Accreditation efforts using NIST 800-53 RMF across the design lifecycle for classified and unclassified systems.
• Reviews risk and security assessment reports and provides recommendations to support reauthorization activities.
• Configures and validates secure systems and physical controls and tests security products to detect weaknesses.
• Assists ISSOs with waivers, liens, information gathering, compliance monitoring, vulnerability scanning coordination, and system self-test validation.
• Provides technical guidance for security incidents, reporting activities, and integrated security system support.

ISSO / ISSE · RMF Execution

Information Systems Security Officer / ISSE (Level 1)

AiTech

• Served as security technical advisor for full system security testing to ensure agency and NIST policy enforcement.
• Acted as liaison between administrators, engineers, and authorizing stakeholders to help deploy new technologies and complete QRC efforts.
• Made recommendations using RMF guidance under NIST SP 800-30 and 800-39.
• Completed self-testing reports across more than 300 security controls during authorization and reauthorization efforts.
• Conducted Nessus scans, interpreted results, and recommended baseline fixes to administrators and engineers.
• Reviewed OS settings, monitored security requirements, and supported continuous monitoring across mission-critical platforms.

DoD Continuous Monitoring · Security Documentation

Information Systems Security Officer

Jacobs Engineering

• Supported DoD information system security posture through RMF continuous monitoring activities.
• Performed daily, weekly, and monthly reviews to sustain system compliance and audit collection management.
• Conducted decommissioning activities and created System Security Plans using DoD in-house tools.
• Performed risk assessments in accordance with RMF and NIST SP 800-30 / 800-39 guidance.
• Tracked vulnerabilities, IAVAs, patches, and POA&Ms through mitigation and risk acceptance.
• Worked with stakeholders to maintain current system security documentation, access controls, and system responsibilities.

Systems & Network Administration · Security Planning

Systems and Network Administrator

Leidos

• Provided security planning, assessment, risk analysis, and risk management for secure infrastructure systems.
• Supported DNS, email, VPN, wireless networks, firewalls, and enterprise authentication through troubleshooting and maintenance.
• Performed system audits to assess security issues, mitigate findings, and report results.
• Maintained virtual machines, DNS, DHCP, and implementation support for multiple IT systems.
• Ensured systems were operated, maintained, and disposed of in accordance with internal security plans and practices.
• Supported four active system security plans and tracked patches for compliance using agency tooling.

Deployed IT Security Support · Afghanistan

IT Security Specialist / System Administrator

DSCI · Network Operation Center, Camp Phoenix, Kabul, Afghanistan

• Provided enterprise-level administration and engineering support across Windows Server, SAN, and desktop systems in NIPR, SIPR, and Centrix networks.
• Worked with ISSE teams to conduct weekly security and vulnerability scans across multiple networks.
• Helped enforce government policies protecting confidentiality, integrity, and availability of information systems.
• Supported preventive maintenance and secure operation of complex datacenter virtual environments using VMware vSphere and ESXi.
• Implemented security patches using SCCM and scanning tools in alignment with IAVA and other defense guidance.

Enterprise Monitoring · Patch Compliance

Windows System Administrator

Tech USA Inc. · Global Enterprise Command Center, National Security Agency, Fort Meade, MD

• Monitored, diagnosed, troubleshot, and escalated issues on Windows Server environments supporting global warfighter operations.
• Processed agency-approved IAVA patches for Microsoft and RHEL/Linux systems and tested releases before deployment.
• Maintained 100% functional systems through enterprise monitoring tools and updated antivirus definitions across managed environments.
• Tracked issues through Service Manager and maintained standard operating procedures as needed.
• Applied incident response knowledge to develop, manage, and administer procedures and scripts for system response activities.

Active Directory · Rapid Response Operations

Windows System Administrator

L-3 STRATIS · V44 Rapid Response Center, National Security Agency, Fort Meade, MD

• Managed Active Directory environments including Group Policy, server and file access, and user account lifecycle administration.
• Monitored and diagnosed system performance using enterprise monitoring platforms to ensure continuous functionality.
• Worked with ISSOs to validate privileged access and keep authorizations current.
• Supported system owners by enforcing malware protection and ensuring incidents were reported according to NSA/CSS policy.
• Developed standard operating procedures, coordinated corrective actions, and escalated complex issues to senior management when needed.