Tom O'Neill Email & Phone Number

• Web application penetration testing on client and internal systems• Created custom tools for penetration testing engagements• Created phishing sites for social engineering engagements• Identity & Access Management framework assessments and planning• SCIM, Microsoft Identity Manager, Midpoint, various vendor solutions• Single sign-on assessments, implementation, and security audits• SAML 2.0, OAuth, CAS, custom integrations• Azure (Entra ID) Security management and auditing• Vulnerability and risk assessment, remediation, and mitigation• Generated deliverables, including enterprise-level documentation and report templates.• Promoted to new IAM Team Lead position with management responsibilities• Developed new higher education-specific cybersecurity service offerings• Presented at and attended industry conferences, both in-person and virtually.

San Diego

Accomplishments• Identified and credited with responsibly reported cross-site scripting vulnerability in the WSO2 Identity Server product (WSO2-2023-2447)• Lead and coordinated client remediation efforts for RCE in WSO2 Identity Server (CVE-2022-29464).• Created identity & access management (IAM) and single sign-on (SSO) consulting practices.• Developed a portfolio of IAM and SSO service offerings focused on serving the unique needs of higher education.• Developed the methodology, approach, and deliverable materials for IAM and SSO assessments.• Created and delivered best practice deployment and management frameworks for common SSO identity provider solutions.• Developed a custom multi-factor authentication (MFA) connector to integrate an identity provider with a third-party vendor platform.• Presented at industry conferences in person and virtually.• Authored blog content on security and SSO.Responsibilities• Partnering and collaborating with cross-functional client teams to ensure customer success.• Supporting the sales team by identifying leads, participating in sales calls, developing the scope of work, and providing estimated effort.• Support for identity providers and service providers using the CAS and SAML 2.0 protocols on various platforms.• Implementation planning and technical support for Ellucian's Luminis portal.• Load testing web applications using Apache JMeter• Multi-factor authentication (MFA) planning and implementation support.• Developing training materials and delivering on-site/remote training on various technical topics.• Custom development using the Ellucian Page Builder platform.• Management of single sign-on architecture for internal projects and resources• Developing custom, secure SSO integrations for applications that do not support a standard.• Conducting interviews, as necessary• Travel for client engagements and internal meetings.• Logistics for on-site work, including agenda, travel, and lodging arrangements.

Software Engineer / Systems Architect. Coordinated technical resources with a geographically diverse team. Configured Vanilla Forum and Wordpress integration. Developed custom PHP functionality. Front end development using jQuery/HTML/CSS interacting via AJAX with the PHP back end. Developed a solution for accepting payments through the authorize.net API.

Installed, configured and maintained several web applications. Spent most time on administration of the school's Luminis portal application which included regular system maintenance, patching, troubleshooting, and custom development. Wrote and reviewed technical documentation. Provided web application support on both Unix and Windows operating systems. Worked with various languages including but not limited to PHP, JavaScript, CSS, HTML, XHTML, XML, Perl, Java, JSP, Oracle SQL, BASH and BATCH system scripting.

Programming contracting work in desktop application development and web application development. Programming in Visual Basic .NET, web application development in PHP, JavaScript, XML, HTML, MySQL. Developed on the Drupal PHP content management system as well as the Symfony PHP application framework creating custom code and modules. Worked on a coding team that created a social networking website with mobile content delivery (2005-2007).

Computer upgrades, technical support, software and hardware troubleshooting, networking troubleshooting and computer assembly.ImagineEasyProgrammer 5/2004-5/2005Web application programming in PHP, Perl, JavaScript and MySQL administration.TECHNICAL KNOWLEDGEPHP, CSS, HTML, XHTML, XML, JavaScript, Java, C/C++, SQL, Perl, Microsoft Visual Basic, MIPS assembly language, Windows Batch Programming, *nix shell scripting, hardware/software troubleshooting, server setup, Apache and IIS web servers, Luminis portal administration, some *nix administration and coding, systems security and networking. Some experience with Mac desktops.

Developed EasyBib bibliography platform to create MLA and APA formatted bibliographies. Used PHP, JavaScript, Perl, and MySQL.