Paul Holzmann
Information Assurance Analyst @Sandia National Laboratories
Signup · Get unlimited contacts
WORK HISTORY
Information Assurance Analyst @Sandia National Laboratories
Albuquerque, NM, US
As an Information Assurance Analyst supporting classified mission systems, I execute Risk Management Framework (RMF) lifecycle activities and perform NIST SP 800-53 security control analysis to ensure systems align with DOE security requirements and maintain accreditation readiness.My work includes reviewing and validating System Security Plans (SSPs), assessing risk exception packages, and formalizing risk acceptance decisions in collaboration with cybersecurity and engineering stakeholders. I conduct security assessments of COTS and open-source software prior to deployment in classified environments, identifying vulnerabilities and recommending mitigation strategies to reduce operational risk exposure.I support secure Azure and hybrid cloud implementations by ensuring cloud-based services align with established security baselines, identity and access management controls (RBAC, Conditional Access), and continuous monitoring requirements. I contribute to vulnerability management efforts and ongoing compliance validation across both on-premise and cloud-integrated systems.Additionally, I manage cybersecurity workflows within ServiceNow, overseeing access control requests, compliance documentation tracking, and risk-related support tickets to ensure efficient resolution and audit traceability.Through structured documentation, cross-functional collaboration, and risk-informed decision-making, I help strengthen overall system security posture within highly regulated and security-sensitive environments.
EDUCATION
Boise State University
Masters of Science , Cybersecurity
Central New Mexico Community College
Associate's degree, Business Administration and Management, General
The University of New Mexico
Project Management
ABOUT PAUL HOLZMANN
I am a Microsoft Certified Azure Security Engineer (AZ-500) and cybersecurity professional supporting classified mission systems within highly regulated environments. My work focuses on Risk Management Framework (RMF) execution, NIST SP 800-53 security control analysis, vulnerability assessment, and secure Azure and hybrid cloud alignment.In my current role as an Information Assurance Analyst at Sandia National Laboratories, I support accreditation readiness through system security plan validation, risk exception review, risk acceptance formalization, and continuous monitoring activities. I collaborate cross-functionally with engineering and cybersecurity stakeholders to translate governance requirements into practical, defensible technical controls across both on-premise and cloud-integrated systems.I am particularly interested in the intersection of cloud security, governance, and resilience. My graduate studies in Cybersecurity, with specialization in Threat Intelligence and Resilience Engineering, reinforce a proactive, risk-informed approach to security program development and operational security posture management.I bring a disciplined, methodical approach shaped by experience in classified environments, where documentation integrity, compliance alignment, and structured risk evaluation are critical. As I continue growing professionally, I am focused on advancing further into cloud security engineering and security architecture roles that integrate governance with technical implementation.If you\'re interested in discussing cloud security, RMF, compliance strategy, or secure hybrid architectures, I would welcome the opportunity to connect.
This profile is compiled from publicly available professional sources. Unifers is not affiliated with or endorsed by LinkedIn. Request removal of this profile.