Looking for a job

Hugh McClimans

@hughmcclimans

Senior Security Engineer (15+ yrs) specializing in Zero Trust, Palo Alto firewalls, PAM, penetration testing, and AI governance

United States

Message

What I'm looking for

Targeting senior remote roles in Security Infrastructure, PAM/Identity, or AI Governance. Backed by 15+ years across enterprise and defense, I thrive in high-autonomy teams solving root-cause challenges—blending Zero Trust, firewall governance, privileged access, and AI security with practical automation that strengthens security fast.

I am a Senior Security Infrastructure & Cybersecurity Engineer with 15+ years of experience architecting Zero Trust environments, securing enterprise AI adoption, and engineering resilient infrastructure across manufacturing, healthcare, energy, and federal defense sectors. Based in Northwestern Pennsylvania, I thrive in asynchronous, documentation-first remote teams where clear SOPs and self-directed execution are essential.

Career Highlights & Achievements

AI Governance & Data Protection: At AGCO Corporation, I partner with AI Governance to secure Claude Enterprise—enforcing network access controls, web gateway policies, and DLP rules to block unapproved LLMs, mitigate shadow IT, and prevent corporate data exfiltration.
Network, OT & Endpoint Security: I govern Palo Alto Panorama firewall policies across global corporate and OT networks, drive Zero Trust micro-segmentation, and monitor Cortex XDR telemetry. I also lead Tenable Nessus vulnerability initiatives and built Power Automate + Copilot workflows to automate CMDB auditing.
Offensive Security: Previously, I conducted network, wireless, and physical penetration tests for Jefferson Wells, the County of Los Angeles, and the Department of Energy—building Linux/Windows red team labs, running Rapid7 Nexpose/Nessus assessments, and managing NPK + AWS password-cracking operations.
Identity, PAM & Hardened Infrastructure: Earlier, I managed Active Directory, Entra ID, ADFS, PKI lifecycles, and privileged access (CyberArk, Delinea Secret Server) for UMass Memorial Hospital and Penn State University. Across a decade supporting U.S. Army and Air Force contracts, I engineered high-availability VMware/Hyper-V clusters, automated 900,000+ account migrations via PowerShell, and hardened systems to DoD STIG, NIST 800, and CIS Benchmarks.

Interests & Target Roles Outside of work, I enjoy exploring AI security guardrails, OT Zero Trust architectures, and building custom security tooling in my home Proxmox lab. I am targeting senior remote roles in Security Engineering, Security Infrastructure, PAM/Identity Architecture, or AI Governance where I can solve complex root-cause challenges and build practical security baselines.

Experience

Work history, roles, and key accomplishments

Current

Sr. Analyst Security Engineering

Current

AGCO Corporation

Mar 2023 - Present (3 years 8 months)

Interface with AI Governance team to secure enterprise AI tools, enforce web filtering and DLP controls, maintain Cortex XDR agent fleet health, and govern Palo Alto firewall changes.

AI Governance Claude Enterprise DLP Secure Web Gateways Cortex XDR Palo Alto Panorama Zero Trust ServiceNow ITSM

Penetration Tester & Lab Administrator

Jefferson Wells

Nov 2022 - Mar 2023 (4 months)

Conducted wireless, network, and physical penetration tests and external vulnerability assessments using Rapid7 Nexpose and Tenable Nessus.

Penetration Testing Vulnerability Assessment Nexpose Tenable Nessus

System Administrator

TekSystems / UMass Memorial Hospital

Feb 2022 - Dec 2022 (10 months)

Supported Active Directory GPO operations and cleanup of legacy configurations. Assisted with ADFS trust setups for SSO integration and used CyberArk and Delinea Secret Server for privileged access workflows.

Active Directory GPO ADFS SSO CyberArk Secret Server O365 Knowledge Base

System Administrator

CGT Staffing

Oct 2021 - Dec 2021 (2 months)

Consulting for Penn State University FBIT EAD Migration Project. Migrating Microsoft Windows 2012r2 services and applications to Windows Server 2016/2019 in VMware 6.7, configuring AzureAD with Atlassian Confluence for SSO, and writing PowerShell scripts for automation.

Windows Server Migration VMWare Azure AD Confluence PowerShell Mentorship

Senior System Admin

Pyramid Healthcare

Jul 2021 - Dec 2021 (5 months)

Designed and implemented High Availability for the System Infrastructure, configured Microsoft Hyper-V hosts, and migrated services to virtual machines. Implemented ManageEngine OpsManager Pro, ELK Stack with Wazuh, and created PowerShell automation scripts.

Senior System Admin & Tier 3 Engineering

Various Prime Federal Contracts / Enterprise Healthcare

Jan 2010 - Dec 2021 (11 years 11 months)

Managed large-scale infrastructure across DoD/Federal Prime Contracts and healthcare systems, leading VMware vSphere, Active Directory/PKI migrations, STIG/NIST-800 hardening, and red team operations.

VSphere Active Directory PKI DISA STIGs NIST 800 ACAS Nessus Red Team

System Administrator Tier 3

Various Prime Federal Contracts

Nov 2019 - Jul 2021 (1 year 8 months)

Utilized VMware virtual Splunk and Microsoft SCOM for event management, performed monthly patching using SCCM, and administered Office 365. Used PowerShell scripts for migrating, licensing, and provisioning 900k accounts in Azure AD and Office 365.

Cyber Security Analyst

Ardent Cyber Solutions

Oct 2018 - Oct 2019 (1 year)

Led penetration testing for Windows-based systems and identified critical vulnerabilities in the Windows Domain Environment. Enumerated networks using tools like nmap, masscan, and Nessus, and exploited vulnerabilities using Metasploit and PowerShell scripting.

Penetration Testing Network Enumeration Nmap Masscan Nessus Metasploit PowerShell Active Directory VSphere Linux Snipe IT 3D Printing

Cyber Security Penetration Testing Specialist and Lab Administrator

Eagle Research Group

Nov 2017 - Oct 2018 (11 months)

Member of a penetration testing team with Independent Oversight at Department of Energy. Performed technical on-site assessments in mixed Windows and Linux environments and managed VMware vSphere infrastructure.

Penetration Testing Red Team VSphere Linux Windows Nmap Masscan Nessus PFsense Cisco PIV LDAP Active Directory Certificate Authority ACAS SCAP DOD STIG Snipe IT

System Administrator II

Various Prime Federal Contracts

Aug 2015 - Nov 2017 (2 years 3 months)

Managed VMware vSphere 5.5 infrastructure and created virtual server templates for Red Hat 6 and Windows Server 2012 r2. Managed IBM Tivoli for backup and recovery and VMware Horizon View 7 VDI infrastructure.

VSphere Red Hat Windows Server Tivoli NetApp Storage LTO5 VMWare Horizon Teradici McAfee HBSS HP OneView HP 3PAR Storage HP C7000 PowerShell WSUS SCCM ACAS Nessus SCAP DOD STIG Remedy Symantec Norton Ghost PXE

Intermediate System Administrator

Network Enterprise Center

Jun 2010 - Aug 2015 (5 years 2 months)

Managed SAN for IBM Storwize V7000 and HP EVA8400, and managed VMware virtual and physical Red Hat Enterprise Linux and Windows servers. Provided support for networking, help desk, and desktop support teams.

Technology Specialist

Tuscarora Intermediate Unit

Mar 2008 - Dec 2009 (1 year 9 months)

Provided IT support for multiple facilities and classrooms, including hardware and software deployments. Maintained Windows Server environments and Active Directory, and performed network installations.