Résumé of Gary Gapinski, CCP, CISSP-ISSAP, ISSMP

Contact Information
Gary Gapinski

gary@garygapinski.com
+1 216 820 1849 (SMS)
sip:gary@garygapinski.com
Usually available 0700–2200 US/Eastern
Executive Summary

Over five decades of widely varied technical and practical experience.

  • Articulate — able to coordinate and communicate effectively with individuals at all levels, perform detailed, sensitive assignments with dependability.
  • Capable — able to grasp ideas and concepts quickly, converting these into meaningful results.
  • Dedicated — present a professional and positive attitude in daily approach to assignments and objectives.
Employment History
When What
May 2021
to
present
Flexion Inc., Madison, Wisconsin
Security/XML Engineer
Projects:
Competencies: FISMA, NIST RMF, OSCAL, XML, XSLT, XPath, Schematron, XSpec , git
August 2002
to
August 2022
Banner Quality Management Inc. (BQMI), Fairview Park, Ohio
NASA Glenn Research Center, Cleveland, Ohio
Senior System Engineer
Since 2018: Performing NIST Risk Management Framework Assessment and Authorization for the center CIO organization. Prior to that,
Member of NASA's Enterprise Technology Assessments and Digital Standards (ETADS) team, producing assessments, recommendations, and normative standards for agency desktop system interoperability and configuration. Personal focus was on Linux and effective use of open‐source technologies.
Member of the NASA's Agency Security Configuration Standards team, providing normative and informative guidance for system configuration compliance with the Federal Information Systems Management Act (FISMA), the NIST Risk Management Framework, and OMB and DHS directives. Scope encompassed all operating systems and applications in use within the enterprise.
Competencies: Operating Systems: Linux: Red Hat Enterprise Linux, Ubuntu; Apple: macOS, iOS; Google: Android, ChromeOS; Microsoft: Windows Server 2003–2016, Windows XP–10; Standards: FIPS, NIST RMF, NIST 800‐series, FISMA, HSPD‐12, CIS Benchmarks, NIST SCAP, FDCC, USGCB, W3C, IETF; XML: XHTML, CSS, XPath, XSLT, XML Schema, NIST SCAP, XCCDF, OVAL; Applications: GNU Mailman, RSA SecurID; VMware: vSphere, ESXi, VirtualCenter, Workstation, Server; Oracle Database: 10g, 9i; Apache: HTTP Server, Tomcat
2007–2008
The Center for Internet Security, Hershey, Pennsylvania
Contractor: Created the CIS Configuration Assessment Tool (CIS-CAT), an application to assess the security posture of various operating systems and applications.
Competencies: Operating Systems: Solaris, Linux: Red Hat, SUSE, Slackware, Debian; AIX HP‐UX OS X Microsoft: Windows 2000, Windows 2003 Server, Windows XP, Windows Vista; VMware: Workstation, Server; Oracle Database: 10g, 9i; Development: NetBeans, Ant, Java, Python, PyWin32; XML: XHTML, CSS, XPath, XSLT, Saxon, XML Schema, Schematron, XCCDF, OVAL, NIST SCAP
August 2000
to
July 2002
General Electric Lighting, Cleveland, Ohio
Contractor: Designed, developed, and deployed the database, logic, and user interfaces of a real‐time infrastructure monitoring system for over 600 applications and services worldwide.
Competencies: Operating Systems: Solaris, HP‐UX, Microsoft Windows 2000; Oracle Database 8i Languages: Java, ECMAScript, Perl; Web: Apache HTTP Server, Tomcat, Cocoon, JSP, DHTML; XML: XHTML, CSS, XPath, XSLT, Saxon, Xalan; Applications: Business Objects
September 1998
to
August 2000
Electronic Data Systems Corporation
LTV Steel Benefits Services, Lakewood, Ohio
Senior Infrastructure Specialist: Responsible for the selection, procurement, installation, configuration, and administration of server, desktop, database, network, and voice services for a 25‐seat call center which provided defined benefit, defined contribution, and pension administration to LTV employees and retirees. Responsible for IT, physical security, and business continuity.
Competencies: Hardware: RS/6000, Netfinity, Cisco, Corepoint Voice Response; Operating Systems: Solaris, Linux: SUSE; AIX Microsoft: Windows NT, Windows Terminal Server, Windows 98; Applications: HACMP, Oracle Database 8i, Tivoli Storage Manager
July 1997
to
September 1998
Electronic Data Systems Corporation
Riser Foods, Inc., Bedford Heights, Ohio
Senior Infrastructure Specialist: Managed system and network facilities for warehouse management, point of sale, and associated applications. Provided technical assistance and web application development.
Competencies: Hardware: RS/6000; Operating Systems: Solaris, AIX, Microsoft: Windows NT, Windows 98, Windows 95; Applications: HACMP, Oracle Database 8i
June 1997
to
September 1998
Electronic Data Systems Corporation at Riser Foods, Inc., Bedford Heights, Ohio
Contractor: Provided technical assistance with the deployment of a warehouse management system (OMI TRICEPS, AIX‐hosted, TCP/IP LAN with mobile RF links).
February 1995
to
January 1997
RMS Technologies, Inc.
NASA Lewis Research Center, Cleveland, Ohio
Senior Principal System Engineer: Provided agency‐wide architectural direction and product evaluation as a member of its Lead Center for Hardware/Software Interoperability and Unix Expert Center teams. Provided central services and support for a community of several thousand users on a 140 acre campus, including over 700GB of NFS‐ and SMB‐distributed file systems, hierarchical storage management, trouble‐ticket management, web servers, software license management, electronic mail, and USENET news. Supported multiple OS versions on HP, Intel, IBM, SGI, and Sun hardware.
Competencies: Operating Systems: SunOS, Solaris, AIX, HP‐UX, IRIX, Red Hat Linux
May 1994
to
March 1995
OneNet International Communications Inc.
KeyCorp, Cleveland, Ohio
Contractor: Helped design, develop, and deploy a trust accounting system using Oracle on a high‐availability AIX cluster, OS/2 (for an InterVoice voice response system), and Access and Visual Basic (for workstations) communicating via SQL*Net and ODBC over TCP/IP.
Competencies: Oracle Database 7, AIX, OS/2
April 1994
to
May 1994
OneNet International Communications Inc.
Camelot Music Inc., North Canton, Ohio
Contractor: Helped to enhance and deploy a warehouse distribution system for a large retailer of musical recordings and supplies.
Competencies: Oracle Database 7
April 1993
to
April 1994
Fidelity Investments, Boston, Massachusetts
Contractor: Helped design and implement a cost basis accounting system for mutual fund and brokerage accounts using a large (~10⁹ rows) Pyramid‐hosted Oracle data base with CICS and Powerbuilder user interfaces corresponding via Tuxedo. Created over 10,000 lines of PL/SQL code comprising the core business logic.
Competencies: Oracle Database 7, PL/SQL
March 1993
to
June 1993
EG&G GEOS, Waltham, Massachusetts
Contractor: Helped design and implement an environmental regulation compliance management system using a Solaris‐hosted Oracle data base driven by remote sensors, bar code readers, and AutoCAD and SQL*Forms user interfaces.
Competencies: Applications: Oracle Database 7, AutoCAD; Languages: Lisp, PL/SQL, C, C++
September 1992
to
June 1993
Extel, Inc., Gloucester, Massachusetts
Contractor: Helped design and code a Microsoft Windows‐based problem management system using Visual Basic and C. Created Visual Basic custom controls to encapsulate low‐level Q+E Database Library subroutines.
Competencies: Oracle Database 7
June 1991
to
February 1993
NEC Corporation
NEC Technologies Inc., Boxborough, Massachusetts
Senior Systems Analyst: Oracle‐based applications for NEC's service and support organizations, developed using CASE tools on heterogeneous platforms and networks with traditional, GUI, and natural‐language interfaces. Hardware and software specification, acquisition, installation, administration, tuning, and training. Designed and implemented an electronic mail responder allowing any NEC employee to request database reports or submit SQL queries with output delivered via return email.
Competencies: Oracle Database 6, Oracle Database 7
September 1990
to
July 1991
NEC Corporation
NEC Technologies Inc., Boxborough, Massachusetts
Contractor: Designed and implemented an Oracle‐based revenue reporting system. Designed and implemented a system for capturing and reporting shipment information from Pitney‐Bowes and Federal Express manifesting systems. Designed an Oracle‐based fixed asset control and reporting system. Implemented a Unix/MS‐DOS/Banyan Vines network of Oracle databases. Responsible for hardware, software, and network installation, administration, and performance (SCO Unix, MS‐DOS, OS/2, Oracle, TCP/IP).
Competencies: Oracle Database 6
August 1990
to
September 1990
Data General Corporation, Westborough, Massachusetts
Contractor: Project leader for quality assurance of an OSI‐compliant platform (layers 1–4), FTAM and VT applications for AViiON systems.
June 1990
to
August 1990
NEC Technologies Inc., Boxborough, Massachusetts
Contractor: Designed and implemented Oracle‐based analogs of several existing NEC Astra‐based business systems on an SCO Unix and Banyan Vines platform. Designed and implemented NEC Technologies’ first TCP/IP network. Designed and implemented a COBOL source code to data base schema translator.
Competencies: Oracle Database 6
March 1988
to
April 1990
Bull HN Information Systems Inc., Billerica, Massachusetts
Contractor: Provided assistance to the communications software development organization. Diagnosed communications problems reported worldwide by customers and internal quality assurance organizations. Developed corrections and/or assigned problems for correction by development and maintenance organizations. Products included OSI‐compliant and Bull proprietary (DSA) local‐ and wide‐area network software, X.500, X.400, X.3/X.29, FTAM, 800‐series LAN, SNA, and BSC. Provided network/system configuration and performance tuning for internal organizations. Provided network and system administration for internal organizations on Bull‐proprietary, Sun, and PC‐based systems.
August 1983
to
March 1988
Honeywell Bull, Billerica, Massachusetts
Contractor: Provided software quality assurance assistance. Developed and maintained test specifications, programs, configurations, and procedures for firmware, operating system software, utilities, language translators, transaction processing systems, data base management systems, local‐ and wide‐area network software, and associated components. Designed and performed test procedures using various product line models measuring compliance with corporate, national, and international standards.
Competencies: Oracle Database 5
January 1983
to
August 1983
Compugraphic Corporation, Ballardvale, Massachusetts
Contractor: Provided programming services for on‐line data base applications using the TPS 6 transaction processing system with Screenwrite, COBOL, and assembly language.
June 1978
to
January 1983
Logistics Data Systems
American Bakeries Company, Chicago, Illinois
Contractor: Provided custom data processing services for route distribution including hardware and software evaluation and selection, system configuration and installation, system design and programming, and system software enhancements. On‐line data entry and inquiry via CRTs, telephone audio response, portable terminals, and point‐of‐sale terminals.
1979–1982
Blue Cross/Blue Shield of Michigan, Detroit, Michigan, and Firestone Tire and Rubber Company, Akron, Ohio.
Contractor: Designed, programmed, and installed a custom telephone audio response application interface program.
May 1976
to
June 1978
Honeywell Information Systems
Honeywell Information Systems, Chicago, Illinois
Systems Representative: Provided pre‐ and post‐sales and customer support, ranging from sales presentations, benchmarks, and system configuration, through custom system analysis, design, and programming services, to performance evaluation, system optimization, system software enhancements, and customer training.
1973–1976
Appleton Electric Company, Chicago, Illinois
Programmer Analyst: Provided systems analysis and design, programming, documentation, and maintenance for a variety of business systems, as well as operating system generation, maintenance, and tuning. Designed, programmed, and deployed a minicomputer‐based order entry/inventory control system and communications network for company distribution centers. Trained distribution center personnel in use of system, and programming staff in use of minicomputer software.
1972–1973
Abbott Laboratories, North Chicago, Illinois
Programmer Analyst: Custom analysis and programming for distribution center data collection and reduction.
1972–1973
Abbott Laboratories, North Chicago, Illinois
Network Operator: Distribution center data collection, dissemination, and reporting.
1970–1973
Americana Interstate Corporation, Mundelein, Illinois
Programmer Analyst: Catalog mail order and list processing, on‐line accounts receivable and inventory inquiry.
1969–1970
D. P. S., Incorporated, Waukegan, Illinois
Computer Operator: Demand deposit and installment loan accounting.
Competencies: OS/360
Licenses and Certifications
What Issuing Authority Dates
Certificate in Data Processing (CDP) Institute for Certification of Computing Professionals (ICCP) Since 1976
Certified Computing Professional (CCP) Institute for Certification of Computing Professionals (ICCP) Since 1994
Certified Information Systems Security Professional (CISSP) International Information Systems Security Certification Consortium (ISC)² Since 2007
Information Systems Security Management Professional (ISSMP) International Information Systems Security Certification Consortium (ISC)² Since 2011
Information Systems Security Architecture Professional (ISSAP) International Information Systems Security Certification Consortium (ISC)² Since 2011
ITIL Foundation Certificate in IT Service Management CSME Since 2012
ITIL Intermediate Certificate in IT Service Strategy AXELOS Global Best Practice Since 2017
ITIL Intermediate Certificate in IT Service Design AXELOS Global Best Practice Since 2017
General class Amateur Radio License KA1QHH (US) Federal Communications Commission Valid until 2028
Driver License (US) North Carolina Division of Motor Vehicles Valid until 2029

Revised 2023-11-27