Capabilities Statement

Core Competencies

• Cisco enterprise network design, upgrade, and hardening (IOS-XE, Catalyst 9200/9500, C8300)
• Cisco Identity Services Engine (ISE) deployment, upgrade, and AAA integration (RADIUS/TACACS+, 802.1x/MAB, NAC)
• Cisco Firepower (FMC/FTD) deployment, upgrade, and STIG hardening
• DoD STIG remediation across network, endpoint, and server platforms (CAT I/II findings)
• RMF/eMASS POA&M development, tracking, and ATO support
• CORA inspections, CCRI preparation, and remediation
• VMware vSphere/vCenter infrastructure management and documentation
• Windows 11 enterprise imaging pipeline build (MDT/WDS) and deployment
• Active Directory design, GPO management, and lifecycle automation
• WSUS patch management and endpoint compliance (SCAP, Forescout SecureConnector)
• Centralized syslog architecture and network monitoring (Kiwi Syslog NG)
• NTP hierarchy design and implementation (DoD-compliant SHA-1/USNO)
• Fiber and physical network infrastructure assessment and documentation
• Cybersecurity compliance documentation (SOPs, STIGs, POA&Ms, Risk Acceptance memos)

Past Performance

DoD Installation — Enterprise Network Remediation & Compliance Cybersecurity | Network Infrastructure | RMF/CORA Compliance

UCSG directed a 14-month enterprise network remediation and compliance campaign across a geographically isolated DoD installation supporting both classified and unclassified network enclaves. Scope included full lifecycle upgrade and hardening of a ~95-node Cisco switching infrastructure (C9200/C9500), identity services platform migration (ISE 3.0→3.3), and next-generation firewall upgrade and policy hardening (Firepower FMC/FTD). Simultaneously executed a complete Windows 11 endpoint imaging pipeline rebuild via MDT/WDS, Active Directory automation, and Forescout-based endpoint compliance enforcement across ~500 managed devices.

Delivered a complete RMF/CORA documentation package — including POA&M, Risk Acceptance artifacts, and supporting evidence — submitted to the Authorizing Official. Campaign resulted in a Moderate risk rating, meeting compliance thresholds across all assessed control families for both network enclaves.

Scope highlights: Enterprise switching infrastructure · Identity & access management · NGFW policy hardening · Endpoint compliance · Windows imaging pipeline · RMF documentation · POA&M development