Thurman A. Williams

About Thurman A. Williams

PKI Engineer - Engineering Subject Matter Specialist. Seasoned Public Key Infrastructure Cryptography Specialist will assist in providing policy, process and technical support to the design, mature and sustain Microsoft Certificate Services and Entrust Identity Guard credential management systems, based Public Key Infrastructure (PKI).Essential Duties and Responsibilities: Technical contributions to the development and sustainment of the USAID Certificate Policy (CP) and Certification Practices Statement (CPS), Experience with configuring and deploying the following technologies in accordance with the USAID Agency CP/CPS: Thales nShield Connect Hardware Security Module HSM suites SafeNet middleware and HSM suitesMicrosoft Windows Server 2012 Certificate Services Infrastructure (CA, CRL, AD integration) Entrust Entelligence Security Provider (ESP) Entrust Certificate Authority Services Experience in the design, install and configuring of Certificate Lifecycle Management solutions Experience providing architecture and integration support including registration, authentication, authorization, and workflow processes Experience with Federal PKI (PIV and PIV-1) issuance and FISAM LOA4 Credentialing Experience supporting system validation and operational testing Experience provide architecture and integration support leveraging current infrastructure and new cloud services

Experience

1. Security Engineer

   ShorePoint, LLC

   Nov 2019 — Present · Fort Washington, MD, US

   ShorePoint, Inc. – Reston, VASecurity Engineer / Account Administration Team Lead (Nov 2019 – Present)Client: USAIDTeam Leadership & Operations• Lead team of 3–10 admins managing AD, RSA, Entrust IDG, Duo, and enterprise provisioning.• Instituted daily stand-ups and ServiceNow dashboards, cutting backlog and improving SLA performance.• Directed execution of onboarding/offboarding, account updates, alias transfers, and GAL entries.• Built cross-training programs to reduce silos and strengthen resilience.Systems Administration & Identity Management• Active Directory: Account lifecycle, GPO enforcement, privileged reviews.• RSA: Token lifecycle, VPN auth reporting.• Duo: Rolled out Universal Prompt, enforced WebAuthn/FIDO2, MFA lifecycle.• Entrust IDG: Led PIV-A/YubiKey transition and PIV-only enforcement.• PowerShell: Automated provisioning, deactivation, and reporting.• ServiceNow: Created dashboards to track KPIs and accelerate MTTC.Zero Trust & Cybersecurity Initiatives• Supported M/CIO in deploying phishing-resistant auth per EO 14028.• Directed Entrust IDG migration to PIV-only auth for USAID’s Zero Trust roadmap.• Integrated mobile device/YubiKey authentication with ICAM team.Key Achievements• Reduced Incident MTTC from 22 days → 3.5 days.• Cut task resolution time 50%(2 days → 1).• Lowered escalations by 49.2%(2023–2024).• Boosted compliance via automated privilege/expiry audits.Collaboration & Governance• Partnered with sysadmins, RAs, and app owners to align SSO/security standards.• Delivered training on Entrust IDG, Duo, RSA, ServiceNow.• Maintained audit readiness for USAID, NIST, and federal policies.As Team Lead, I’ve guided my group through leadership shifts, integrated automation, and delivered measurable gains in speed, compliance, and resilience—ensuring ShorePoint’s continued success supporting USAID’s mission.

Education

• University of Maryland Eastern Shore

  Bachelor of Arts (BA), Sociology