- Cybersecurity
- Department of Defense
DoD cloud server security analyst credits certification with easing career change and transition to management
Certifications have propelled Robert Zarp through his cybersecurity career, enabling him to master complex technical skills and approach challenges with a fresh perspective.
Robert Zarp has always had a love for mathematics and a competitive drive for self-improvement. A career change led him to cybersecurity, where his passions and proficiencies align in the ever-evolving field.
Robert Zarp, Information Security Systems Engineer (ISSE), Department of Defense
What is your official title and job description?
I’ve recently started a new role as an Information Security Systems Engineer (ISSE), working on risk management framework assessment and authorization for the Department of Defense (DoD). Prior to that, I was the cyber operations lead for the Navy Continuous Training Education Environment, leading the Endpoint Security System (ESS) and the ACAS security teams. We did a lot of blue team testing, system monitoring, endpoint detection – a lot of reconnaissance and reporting to the government.
What made you want to get certified?
I worked in corporate sales and manual labor, but I wanted to do something different, so I took a few different aptitude tests that revealed I should pursue IT-related work. I investigated what those jobs would entail, and I started getting the necessary certifications. I have two from Microsoft, the SC-200 and the AZ-900. I also have A+, Network+, Security+, and Data+ from CompTIA. Most recently, I earned the CISSP certification from ISC2, and I am currently awaiting the results of the CompTIA DataX beta exam.
—Robert Zarp
Certification helps me to be a better all-around employee for myself and my employer, as well as build a portfolio that shows my skills and what I can do
What tools and resources (people, materials, classes etc.) did you use to prepare for your certification?
I use flash cards in one-hour intervals to study and get comfortable with the content. I try to see how many I can get correct and chart my progress on an Excel sheet to see if I beat my high score. Then I use practice tests because they give you the chance to review the answers with explanations, and I can also compare my practice test score with my flash cards to identify topics to focus on next.
Have you noticed any changes in IT certification as you’ve progressed through your career?
The higher up you go, the less technical it gets. You’re going to have technical questions, and you need to know what you are talking about, but at the same time you need to understand how different sections of management will react. For instance, asking, “What are the appropriate measures from a records retention or compliance standpoint?” shows how your mindset evolves beyond just technical aptitude. Having to think about the big picture throws a lot of people off because we’re so used to being “in the weeds” with the technical data.
Certification helps me to be a better all-around employee for myself and my employer, as well as build a portfolio that shows my skills and what I can do. Showing dedication and initiative in any job is important, and when people continue to get certifications beyond what is required, I think most people managing these DoD contracts realize that those are people who truly want to grow their career and hopefully continue to work with the DoD.Can you speak to the benefits of certification when collaborating with the DoD?
Can you speak to the benefits of certification when collaborating with the DoD?
When we are on the same page technically and using the same nomenclature as the military ISSOs and ISSEs, we get a lot better results than someone who is familiar with the material but talking from a corporate mentality. When I first started with the DoD, it was a difficult transition because I was focused on PCI compliance coming from the financial sector. So going from that to the classification system was a big change.
I’ve found that patience goes a long way in the military. They might be at a post where they can answer right away, or they might have to stop answering for a week or two because they’re getting stationed in a totally different part of the world. A lot of it is keeping on top of projects, communicating clearly and succinctly on their terms, managing your expectations, and adjusting on the fly if necessary.
—Robert Zarp
Self-evaluation is a big part of the exam process; being able to understand how you learn is a big part of getting to exam day, and how you react is a big part of coming out of exam day successful.
What recommendations do you have for people who are just starting their certification process? Are there particular study and preparation tools and techniques that you recommend?
Finding a mentor goes a long way. I was lucky that early in my career I found an opportunity to intern somewhere that would give me hands-on experience, and I had a manager that was a tremendous mentor to me, very patient and fed my curiosity. Also, don’t be afraid to network and talk to people. Don’t rush for the certification and fail the test; you’ll be disappointed with yourself. Take time and try to plan it out, talk with people and find what works for you and don’t be afraid to try different things.
I also go to blog sites daily to get an idea of what’s coming in the field. [For those considering certification,] I would recommend looking at colleges in your area and finding out what the biggest class is right now, and that will give you an idea of what is going to be in the workplace in five to ten years. In the early 2000s a lot of classes focused on computer architecture, and now you see cybersecurity or machine learning and language modeling.
What should test-takers consider as they prepare for the exam?
Trust that you know what you are talking about and relax. When you start second-guessing, that’s when you’re going to start making those mistakes. Get the retake voucher as insurance and know that if you don’t pass the first time, you have an opportunity to game-plan and get a little bit more confidence or figure out where you took a misstep. Self-evaluation is a big part of the exam process; being able to understand how you learn is a big part of getting to exam day, and how you react is a big part of coming out of exam day successful.