IT infrastructure,built right andaudit ready.
I’m Don Pham, an independent IT consultant with 20+ years designing, securing, and running Windows Server, Active Directory, Entra ID, Intune, Azure, and AWS, including hands-on CMMC 2.0 Level 2 compliance work.
Based in Washington, DC and Los Angeles, CA. On site in both metro areas, remote anywhere.
What I can take off your plate
Project work or ongoing support for small and mid-sized organizations, defense contractors, schools, and research groups. Hands-on work, with documentation your team can actually use.
CMMC 2.0 and NIST 800-171 readiness
System Security Plans, DISA STIG baselines, GCC High enclaves, audit logging, and vulnerability remediation that an assessor can trace from control to evidence. CMMC 2.0, NIST SP 800-171 and 800-53, DFARS, FedRAMP
Identity and access
Hybrid Active Directory and Entra ID done cleanly: directory sync, Conditional Access, privileged access, MFA rollout, and single sign-on for your apps. Active Directory, Entra ID, Entra Connect, Microsoft 365, AWS IAM
Endpoint management
Move from Configuration Manager or legacy tools to Intune, enforce encryption and device compliance, and automate patching so devices stay current without anyone chasing them. Intune, Configuration Manager, Group Policy, Windows and macOS
Servers and virtualization
Domain controller builds, upgrades off end-of-life Windows Server, virtualization, and centralized patching for servers on premises and in the cloud. Windows Server, VMware vSphere, Azure, Azure Arc, AWS (Amazon EC2, VPC)
Backup and disaster recovery
Recovery you have actually tested. Backup and retention design, cloud failover, and live recovery drills so the plan works on the day you need it. AWS Elastic Disaster Recovery, Azure, hybrid failover
Security operations
Endpoint detection and response, threat triage, and a vulnerability remediation process that closes findings instead of just reporting them.
Fractional IT leadership
Microsoft licensing from entitlement analysis to reclamation, vendor escalations and renewals, budgets, and mentoring an in-house team.
The motto I work by
People Process Tech
Technology only works when it serves the people who use it and the way they actually work. I start by understanding your team, then tighten the process behind the work, and only then choose and build the technology. The result is systems that are secure, well documented, and dependable long after the project ends.
Where I’ve done this work
Two decades across higher education and research, K–12, real estate, engineering, and media, as an engineer and as an IT manager.
-
V
USC Viterbi School of Engineering
The University of Southern California’s engineering school, home to research spanning campus and its affiliated institutes.
- Manager, Research Technology Operations2026 – Present
-
ICT
USC Institute for Creative Technologies
A U.S. Army–sponsored University Affiliated Research Center known for pioneering work in virtual humans, simulation, and immersive training.
- Senior Systems Administrator2024 – 2026
-
PW
Prince William County Schools
One of the largest public school districts in Virginia.
- Senior Systems Engineer2023
-
LF
Long & Foster Companies
A Berkshire Hathaway affiliateOne of the largest independent real estate brokerages in the country, and part of HomeServices of America, a Berkshire Hathaway affiliate in Warren Buffett’s portfolio. I grew from engineer to leading the endpoint team, and owned the security controls required at the parent-company level.
- Endpoint Systems Manager2021 – 2023
- Senior Systems Engineer2015 – 2021
-
J
Jacobs Engineering
Fortune 500 engineering and professional services firm.
- Systems Engineer (contract)2015
-
R
Revolution LLC and the Case Foundation
Steve Case, AOL co-founderThe Washington, DC investment firm founded by AOL co-founder Steve Case, and the Case Foundation, the philanthropy he started with Jean Case. Over nine years I went from executive support to running IT for the firm and its affiliated non-profits, with a team of three, the IT budget, and vendor management.
- Manager, Information Technology / Systems Engineer III2011 – 2014
- Client Services Engineer2008 – 2011
- Executive Support Specialist2005 – 2008
-
+
Earlier
IT consulting for SnagFilms and help desk leadership at Electronic Data Systems (EDS).
- IT Consultant, SnagFilms2011
- Help Desk Analyst / Team Lead, EDS2005
Full resume and project details available on request.
- 20+ years of Windows, identity, and cloud infrastructure.
- Led IT teams, with hiring, reviews, procurement, and budgets.
- Hands-on compliance work under CMMC 2.0 Level 2.
- Comfortable across Azure, AWS, and government cloud.
How an engagement runs
No surprises and no black boxes. You see the findings, agree the priorities, and keep everything when we’re done.
Assess
I inventory what you have and give you a written list of gaps, risks, and quick wins.
Plan
We rank the work by risk and cost, and agree scope and schedule before anything changes.
Build
I do the work, alongside your staff if you have them, tested and scheduled around your business.
Hand off
You get runbooks, diagrams, and evidence your team or your auditor can pick up and use.
After hours, I DJ and MC.
I’ve been DJing and MCing for about twenty years, at weddings, corporate events, fashion shows, sporting events, and pro-level boxing events. I play open format across decades and genres and read the crowd, though old-school hip-hop, EDM, and the ’80s are where my heart is. On the mic, I’ve hosted many events and weddings, from grand entrances and toasts to keeping the whole night on schedule. I treat a room the way I treat a server room: plan it, read it, keep it running.
- Weddings multicultural, DJ and MC
- Corporate events holiday parties, launches
- Sporting events game day, halftime, tailgates
- Pro-level boxing walkouts and fight nights
- Fashion shows runway sets
- Karaoke events hosted sing-along nights
Tell me what you’re running and what’s worrying you.
A short email is plenty. I’ll reply within one business day with questions or a time to talk.
mail@donpham.com