# Hugh McClimans Hugh McClimans is a remote worker on Himalayas, Sr. Analyst Security Engineering at AGCO Corporation, based in United States. Their ID is verified. Source: https://himalayas.app/@hughmcclimans ```text Senior Security Engineer (15+ yrs) specializing in Zero Trust, Palo Alto firewalls, PAM, penetration testing, and AI governance ``` | Detail | Value | | --- | --- | | Availability | Looking for a job | | Location | United States | | Authorized to work in | United States | | Salary expectations | 135k+ USD | | Job categories | Security Infrastructure and AI Governance Engineer | | Skills | Security Engineering, AI Governance, Cybersecurity, Enterprise AI Security, Claude Enterprise, Shadow AI Mitigation, Data Loss Prevention (DLP), Secure Web Gateways, URL and Content Filtering, Palo Alto Firewalls, Palo Alto Panorama, Firewall Rulebase Governance, Zero Trust Micro Segmentation, IPsec VPN, SSL VPN | | LinkedIn | https://https://www.linkedin.com/in/hpmjr/ | ## What I'm looking for ```text Targeting senior remote roles in Security Infrastructure, PAM/Identity, or AI Governance. Backed by 15+ years across enterprise and defense, I thrive in high-autonomy teams solving root-cause challenges—blending Zero Trust, firewall governance, privileged access, and AI security with practical automation that strengthens security fast. ``` ## About ```text I am a Senior Security Infrastructure & Cybersecurity Engineer with 15+ years of experience architecting Zero Trust environments, securing enterprise AI adoption, and engineering resilient infrastructure across manufacturing, healthcare, energy, and federal defense sectors. Based in Northwestern Pennsylvania, I thrive in asynchronous, documentation-first remote teams where clear SOPs and self-directed execution are essential. Career Highlights & Achievements - AI Governance & Data Protection: At AGCO Corporation, I partner with AI Governance to secure Claude Enterprise—enforcing network access controls, web gateway policies, and DLP rules to block unapproved LLMs, mitigate shadow IT, and prevent corporate data exfiltration. - Network, OT & Endpoint Security: I govern Palo Alto Panorama firewall policies across global corporate and OT networks, drive Zero Trust micro-segmentation, and monitor Cortex XDR telemetry. I also lead Tenable Nessus vulnerability initiatives and built Power Automate + Copilot workflows to automate CMDB auditing. - Offensive Security: Previously, I conducted network, wireless, and physical penetration tests for Jefferson Wells, the County of Los Angeles, and the Department of Energy—building Linux/Windows red team labs, running Rapid7 Nexpose/Nessus assessments, and managing NPK + AWS password-cracking operations. - Identity, PAM & Hardened Infrastructure: Earlier, I managed Active Directory, Entra ID, ADFS, PKI lifecycles, and privileged access (CyberArk, Delinea Secret Server) for UMass Memorial Hospital and Penn State University. Across a decade supporting U.S. Army and Air Force contracts, I engineered high-availability VMware/Hyper-V clusters, automated 900,000+ account migrations via PowerShell, and hardened systems to DoD STIG, NIST 800, and CIS Benchmarks. Interests & Target Roles Outside of work, I enjoy exploring AI security guardrails, OT Zero Trust architectures, and building custom security tooling in my home Proxmox lab. I am targeting senior remote roles in Security Engineering, Security Infrastructure, PAM/Identity Architecture, or AI Governance where I can solve complex root-cause challenges and build practical security baselines. ``` ## Experience ### Sr. Analyst Security Engineering (current) [AGCO Corporation](https://himalayas.app/companies/agco). Mar 2023 - Present ```text Interface with AI Governance team to secure enterprise AI tools, enforce web filtering and DLP controls, maintain Cortex XDR agent fleet health, and govern Palo Alto firewall changes. ``` Skills: AI-Governance, Claude-Enterprise, DLP, Secure-Web-Gateways, Cortex-XDR, Palo-Alto, Panorama, Zero-Trust, ServiceNow, ITSM ### Penetration Tester & Lab Administrator Jefferson Wells. Nov 2022 - Mar 2023 ```text Conducted wireless, network, and physical penetration tests and external vulnerability assessments using Rapid7 Nexpose and Tenable Nessus. ``` Skills: Penetration-Testing, Vulnerability-Assessment, Nexpose, Tenable-Nessus ### System Administrator TekSystems / UMass Memorial Hospital. Feb 2022 - Dec 2022 ```text Supported Active Directory GPO operations and cleanup of legacy configurations. Assisted with ADFS trust setups for SSO integration and used CyberArk and Delinea Secret Server for privileged access workflows. ``` Skills: Active-Directory, GPO, ADFS, SSO, CyberArk, Secret-Server, O365, Knowledge-Base ### System Administrator CGT Staffing. Oct 2021 - Dec 2021 ```text Consulting for Penn State University FBIT EAD Migration Project. Migrating Microsoft Windows 2012r2 services and applications to Windows Server 2016/2019 in VMware 6.7, configuring AzureAD with Atlassian Confluence for SSO, and writing PowerShell scripts for automation. ``` Skills: Windows-Server-Migration, VMWare, Azure-AD, Confluence, PowerShell, Mentorship ### Senior System Admin Pyramid Healthcare. Jul 2021 - Dec 2021 ```text Designed and implemented High Availability for the System Infrastructure, configured Microsoft Hyper-V hosts, and migrated services to virtual machines. Implemented ManageEngine OpsManager Pro, ELK Stack with Wazuh, and created PowerShell automation scripts. ``` Skills: High-Availability, Hyper-V, VMWare, Active-Directory, ADFS, Naps, DNS, File-And-Print-Servers, Certificate-Authorities-(CAs), ServiceNow, Office-365, ManageEngine-OpsManager, ELK-Stack, Wazuh, PowerShell, CIS-Benchmarks, NIST-800, Maltego, N-Able-Central, Druva, ILand ### Senior System Admin & Tier 3 Engineering Various Prime Federal Contracts / Enterprise Healthcare. Jan 2010 - Dec 2021 ```text Managed large-scale infrastructure across DoD/Federal Prime Contracts and healthcare systems, leading VMware vSphere, Active Directory/PKI migrations, STIG/NIST-800 hardening, and red team operations. ``` Skills: VSphere, Active-Directory, PKI, DISA-STIGs, NIST-800, ACAS, Nessus, Red-Team ### System Administrator Tier 3 Various Prime Federal Contracts. Nov 2019 - Jul 2021 ```text Utilized VMware virtual Splunk and Microsoft SCOM for event management, performed monthly patching using SCCM, and administered Office 365. Used PowerShell scripts for migrating, licensing, and provisioning 900k accounts in Azure AD and Office 365. ``` Skills: VMWare, Splunk, SCOM, SCCM, Office-365, PowerShell, Azure-AD, Remedy, NIST-800, NetScout-NGeniusONE, Active-Directory, GPO, DNS, DHCP, File-And-Print-Servers, VSphere, Dell-EqualLogic, ISCSI, High-Availability, P2V-Migration, DISA-STIGs, Cisco, Brocade, ACAS, Nessus, SCAP, RMF, WSUS, PDQ-Deploy ### Cyber Security Analyst Ardent Cyber Solutions. Oct 2018 - Oct 2019 ```text Led penetration testing for Windows-based systems and identified critical vulnerabilities in the Windows Domain Environment. Enumerated networks using tools like nmap, masscan, and Nessus, and exploited vulnerabilities using Metasploit and PowerShell scripting. ``` Skills: Penetration-Testing, Network-Enumeration, Nmap, Masscan, Nessus, Metasploit, PowerShell, Active-Directory, VSphere, Linux, Snipe-IT, 3D-Printing ### Cyber Security Penetration Testing Specialist and Lab Administrator Eagle Research Group. Nov 2017 - Oct 2018 ```text Member of a penetration testing team with Independent Oversight at Department of Energy. Performed technical on-site assessments in mixed Windows and Linux environments and managed VMware vSphere infrastructure. ``` Skills: Penetration-Testing, Red-Team, VSphere, Linux, Windows, Nmap, Masscan, Nessus, PFsense, Cisco, PIV, LDAP, Active-Directory, Certificate-Authority, ACAS, SCAP, DOD-STIG, Snipe-IT ### System Administrator II Various Prime Federal Contracts. Aug 2015 - Nov 2017 ```text Managed VMware vSphere 5.5 infrastructure and created virtual server templates for Red Hat 6 and Windows Server 2012 r2. Managed IBM Tivoli for backup and recovery and VMware Horizon View 7 VDI infrastructure. ``` Skills: VSphere, Red-Hat, Windows-Server, Tivoli, NetApp-Storage, LTO5, VMWare-Horizon, Teradici, McAfee-HBSS, HP-OneView, HP-3PAR-Storage, HP-C7000, PowerShell, WSUS, SCCM, ACAS, Nessus, SCAP, DOD-STIG, Remedy, Symantec-Norton-Ghost, PXE ### Intermediate System Administrator Network Enterprise Center. Jun 2010 - Aug 2015 ```text Managed SAN for IBM Storwize V7000 and HP EVA8400, and managed VMware virtual and physical Red Hat Enterprise Linux and Windows servers. Provided support for networking, help desk, and desktop support teams. ``` Skills: SAN, IBM-Storwize, EVA, VMWare, Red-Hat-Enterprise-Linux, Windows-Server, LDAP, Active-Directory, Kickstarts, rpm, yum, VMWare-Horizon, HP-C7000, BlackBerry-Enterprise-Server, SCCM, WSUS, Symantec-Antivirus, Tivoli, Remedy, ACAS, Nessus, SCAP, DOD-STIG, Symantec-Norton-Ghost, PXE ### Technology Specialist Tuscarora Intermediate Unit. Mar 2008 - Dec 2009 ```text Provided IT support for multiple facilities and classrooms, including hardware and software deployments. Maintained Windows Server environments and Active Directory, and performed network installations. ``` Skills: IT-Support, Hardware-Deployments, Software-Deployment, Symantec-Ghost, Windows-2000-2003-Server, Windows-2008, Group-Policy, Active-Directory, Networking, Wireless-Access-Points ## Education ### South Hills School of Business & Technology Associate Degree, Computer Information Systems ```text Associate Degree in Computer Information Systems from South Hills School of Business & Technology. ``` ## Tech stack - Docker - VMware vSphere To contact Hugh, message them from this profile with a Himalayas employer account: [Hire on Himalayas](https://himalayas.app/hire). ## People also viewed - [Allen Furst](https://himalayas.app/@allenfurst): Senior Security Engineer, Wipro Health Plan Services - [Brett Cohen](https://himalayas.app/@brettcohen): IT Endpoint Security Administration , Pacific Gas and Electric - [Paul Oyola](https://himalayas.app/@pauloyola): AI Security Researcher, Decisive Algorithms - [Russell Dwyer](https://himalayas.app/@dwyer93): Principal Security Consultant, IronIntelligence, LLP - [Jason Thomas](https://himalayas.app/@jasonthomas): Senior Network & Systems Engineer, Highwoods Properties - [Wyatt Draggoo](https://himalayas.app/@wyattdraggoo): Principal Systems & Networking Architect, DragLab (Personal R&D Lab) - [Tom Bernsdorff](https://himalayas.app/@tombernsdorff): Hardware Specialist, Self Employed / Systems Integration - [Michael Barry](https://himalayas.app/@michaelbarry): Global Cyber Security Manager, Staff Security Engineer, Showpad - [Redha Bouali](https://himalayas.app/@redhabouali): Senior Security Engineer AI & LLM Security, Independent Consulting - [Lee Johnson](https://himalayas.app/@leejohnson1): Principal Cyber Security Engineer, ManTech