Carl Ballenger

About Carl Ballenger

CISSP, CCSP certified with 20+ years of experience in cloud architecture and security operations. Proven ability to lead complex IT projects, including enterprise infrastructure deployments, security transformation initiatives, and custom cloud migrations. Expertise in data governance, IAM, risk management and proper FISMA alignments with NIST/FedRAMP. Always interested in new opportunities to leverage my skills and experience to drive innovation and enhance security posture within the organization.Spearheaded the design and implementation of private and hybrid cloud security solutions, encompassing Zero Trust networks, SIEM, IAM, and vulnerability management projects for federal agencies.Managed duties of private cloud IaaS operations for federal agencies, including enterprise production workload virtualization solutions across HA/DRS enabled VMware ESXi clusters in a multi-tenant on premises datacenter environment.Reported and managed metrics of monthly and annual Nessus DISA STIG vulnerability scans, and subsequent mitigations, for Tier 0 security boundary Microsoft Windows Server 2022 authentication systems infrastructure.Privacy Threshold Assessment (PTA) baselining and support for federal agency authentication systems.Developed information security policies aligned to FedRAMP, NIST, DISA, and DoD standards.

Experience

1. IT Specialist - Sr Cloud Engineer, Cissp

   Federal Aviation Administration

   May 2009 — Present · Oklahoma City, OK, US

   CISSP and CCSP certified IT professional with 20 years of experience in cloud architecture and security operations. Proven ability to lead and implement complex IT projects, including enterprise infrastructure deployments, security transformation initiatives, and cloud migrations. Expertise in data governance, IAM, DevSecOps, and NIST/FedRAMP compliance. Always interested in new opportunities to leverage my skills and experience to drive innovation and enhance security posture.Lead enterprise infrastructure deployments and security transformation initiatives in Microsoft Azure and VMware infrastructure environments.Enforce DISA/DOD STIG/CIS policy compliance benchmarks.Management and support of $1M+ VMware and Oracle licensing budgets.Design and deploy private and hybrid cloud security solutions, including Zero Trust networks, SIEM, IAM, and vulnerability management projects.Develop cost estimates and proposals for government RFPs.Ensure FedRAMP NIST SP 800-53 security controls compliance.Implement and manage VMware ESXi cluster architecture designs.Automate infrastructure builds using Terraform and PowerShell.Perform risk assessments and security audit analysis.Conduct BC/DR planning, exercises, and DR tests.Enforce DISA/DOD STIG/CIS policy compliance benchmarks.

Education

• Oklahoma State University

  Graduate Certificate - Information Assurance

  2020 — 2022

• Oklahoma State University

  BS

  1995 — 2000

Skills

• Cisco Nexus
• Disaster Recovery
• Vmware Esx
• Information Technology
• System Administration
• Active Directory
• Unix
• Windows Server
• Hardware
• Vdr 5.8
• Troubleshooting
• Sql
• Vdp 5.8
• Hp Openview
• Rhel
• Microsoft Sql Server
• Red Hat Linux
• Solaris
• Vmware
• Networking
• Hp
• Server Architecture
• Software Documentation
• Virtualization
• Vcloud
• San
• Vmware Esxi
• Databases
• Storage
• Sql Server 2005
• System Deployment
• Servers
• Itil
• Security
• Enterprise Software
• Enterprise Architecture
• Microsoft Windows Server 2008
• Storage Area Networks
• Software Installation
• Network Security