Deputy CISO at Utah Valley University

Jon Barclay

Cybersecurity Professional, Educator & Technologist

CISSPCISMProfessorBuilder

Try the interactive terminal and CTF

guest@barclay-server: ~

Type 'help' for available commands.

I’m the Deputy Chief Information Security Officer at Utah Valley University, where I lead cybersecurity strategy for Utah’s largest public university, protecting critical infrastructure, research data, and the digital lives of 47,000 students and 5,500 faculty and staff.

With over 28 years of progressive experience in information security, I’ve built my career at the intersection of higher education and enterprise security. My focus areas include Zero Trust architecture, Identity and Access Management (IAM), cloud security, and penetration testing. I believe in security that enables rather than obstructs, building systems that protect institutions while keeping education accessible and open.

At UVU, I’ve led transformative initiatives that have fundamentally changed how we approach security. I architected and deployed a Zero Trust network infrastructure across campus, implemented university-wide multi-factor authentication with 100% adoption, and introduced passwordless authentication options for all users. I also led the deployment of endpoint detection and response (EDR) solutions protecting over 7,500 devices and worked on a unified IAM platform that streamlined access management across the institution.

Beyond UVU, I coordinate security efforts across the entire Utah System of Higher Education (USHE). As leader of the USHE Security Assessment Team, I direct penetration testing assessments across all 16 public colleges and universities in the state.

In 2024, I was honored to receive the Presidential Award of Excellence from Utah Valley University.

I’m also passionate about developing the next generation of security professionals. As an adjunct professor, I teach courses in penetration testing, network defense, and security architecture, giving students hands-on experience with the same tools and techniques used by practitioners in the field.

I hold a CISSP certification along with eight GIAC certifications in penetration testing, defensive security architecture, threat detection, and systems administration. My education includes an MBA from Utah State University and a B.S. in Information Technology from Utah Valley University.

Outside of cybersecurity, bagpiping is a major part of my family's life. My two sons and I play with the Utah Pipe Band, and we've had the privilege of participating in some incredible events — including the 80th anniversary of Pearl Harbor in Hawaii and the 80th anniversary of D-Day in Normandy, France. Throughout the summer, we play in parades and compete at Scottish festivals across the region.

16+

Years in Cybersecurity

CISSP

Certified Professional

Campuses Pen Tested

Adjunct

Professor

Utah Pipe Band members in full highland dress posed in front of the USS Missouri at Pearl Harbor

Utah Pipe Band marching through the streets of Sainte-Mere-Eglise during D-Day anniversary celebrations

Bagpipers in kilts and highland dress playing on a sandy Normandy beach

About
My Background

With over 28 years of progressive experience in information security, I’ve built my career at the intersection of higher education and enterprise security. My focus areas include Zero Trust architecture, Identity and Access Management (IAM), cloud security, and penetration testing. I believe in security that enables rather than obstructs, building systems that protect institutions while keeping education accessible and open.

At UVU, I’ve led transformative initiatives that have fundamentally changed how we approach security. I architected and deployed a Zero Trust network infrastructure across campus, implemented university-wide multi-factor authentication with 100% adoption, and introduced passwordless authentication options for all users. I also led the deployment of endpoint detection and response (EDR) solutions protecting over 7,500 devices and worked on a unified IAM platform that streamlined access management across the institution.

Beyond UVU, I coordinate security efforts across the entire Utah System of Higher Education (USHE). As leader of the USHE Security Assessment Team, I direct penetration testing assessments across all 16 public colleges and universities in the state.

In 2024, I was honored to receive the Presidential Award of Excellence from Utah Valley University.

I’m also passionate about developing the next generation of security professionals. As an adjunct professor, I teach courses in penetration testing, network defense, and security architecture, giving students hands-on experience with the same tools and techniques used by practitioners in the field.

I hold a CISSP certification along with eight GIAC certifications in penetration testing, defensive security architecture, threat detection, and systems administration. My education includes an MBA from Utah State University and a B.S. in Information Technology from Utah Valley University.

Outside of cybersecurity, bagpiping is a major part of my family's life. My two sons and I play with the Utah Pipe Band, and we've had the privilege of participating in some incredible events — including the 80th anniversary of Pearl Harbor in Hawaii and the 80th anniversary of D-Day in Normandy, France. Throughout the summer, we play in parades and compete at Scottish festivals across the region.

View My Expertise

Professional Certifications

Industry-recognized certifications demonstrating expertise in information security, penetration testing, and cloud architecture.

CISSP

Certified Information Systems Security Professional

GIAC Certifications

GPEN

GIAC Penetration Tester

GDSA

GIAC Defensible Security Architecture

GWAPT

GIAC Web Application Penetration Tester

GDAT

GIAC Defending Advanced Threats

GCDA

GIAC Cloud Digital Forensics & Incident Response

GCWN

GIAC Certified Windows Security Administrator

GSNA

GIAC Systems and Network Auditor

Areas of Focus

My work focuses on building secure, resilient systems through modern security frameworks and proactive defense strategies.

Zero Trust Architecture

Implementing never-trust, always-verify security models across campus infrastructure

Identity & Access Management

Securing digital identities and access controls across enterprise systems

Cloud Security

Protecting cloud infrastructure and applications across hybrid environments

Penetration Testing

Identifying vulnerabilities before adversaries do across all 16 USHE campuses

Resume

Professional experience, certifications, and education

Download PDF Resume

JON BARCLAY

Deputy Chief Information Security Officer

American Fork, UT | jon@barclay.pro | linkedin.com/in/jonbarclay

Professional Summary

Strategic cybersecurity executive with 16+ years of progressive experience protecting critical infrastructure in higher education. Proven leader in developing and implementing enterprise security programs serving 50,000+ students and staff. Expert in building cross-institutional security partnerships, leading penetration testing programs across multi-campus systems, and driving security transformation through zero-trust architecture, identity management, and advanced threat detection. Recognized with the 2024 Presidential Award of Excellence for outstanding contributions to institutional security.

Areas of Expertise

▸ Security Strategy & Leadership

▸ Zero-Trust Architecture

▸ Penetration Testing

▸ Cloud Security (Azure/M365)

▸ Identity & Access Management

▸ Incident Response

▸ Security Operations (SOC)

▸ AI Security & Automation

▸ PCI-DSS Compliance

▸ Vulnerability Management

▸ SIEM & EDR Implementation

▸ Cross-Institutional Collaboration

Professional Experience

Utah Valley University

Utah's largest public university serving 47,000 students and 5,500 employees

Deputy Chief Information Security Officer

July 2024 – Present

Serve as principal deputy to the CISO, providing strategic direction and operational oversight for the university's comprehensive cybersecurity program. Lead security initiatives protecting critical infrastructure, student data, and institutional assets.

▸ Lead the Utah System of Higher Education (USHE) Security Assessment Team, directing penetration testing programs across 16 institutions statewide, completing full assessment cycles for all 8 degree-granting universities with 8 technical colleges in progress
▸ Coordinate the USHE Information Security Officer group and represent the security community at CIO and IT Directors meetings, driving cross-institutional collaboration and best practice sharing
▸ Spearhead security transformation initiatives including internal penetration testing, cloud security (Azure/M365), AI security and automation, and SOC optimization
▸ Drive strategic planning for enterprise security architecture, risk assessment frameworks, and regulatory compliance programs

Senior Cybersecurity Analyst

2019 – 2024

▸ Architected and deployed zero-trust network infrastructure, fundamentally transforming the university's security posture
▸ Implemented enterprise-wide MFA achieving 100% coverage for all students and employees, with passwordless authentication available university-wide
▸ Led deployment of advanced EDR solution protecting 7,500+ endpoints across campus systems
▸ Designed and implemented unified IAM platform with single sign-on, streamlining access management and enhancing security controls
▸ Implemented advanced security controls for Active Directory and Azure environments
▸ Orchestrated enterprise incident response operations, coordinating cross-functional teams to protect institutional assets

Senior PCI Security Analyst

2013 – 2019

▸ Established PCI-DSS compliance program managing 9 payment systems across campus, achieving and maintaining certification
▸ Implemented and managed SIEM infrastructure for continuous monitoring and threat detection across PCI-scoped systems
▸ Deployed enterprise firewall infrastructure (Palo Alto, Cisco) and VPN solutions
▸ Conducted penetration testing on campus and PCI systems; served on the USHE Security Audit Team
▸ Managed network IDS, application whitelisting, and host-based intrusion detection systems

Banner Security Officer

2010 – 2013

▸ Designed and implemented fine-grained access control (FGAC) for enterprise ERP system protecting sensitive institutional data
▸ Developed a comprehensive security awareness program for the university community
▸ Established user access governance and auditing frameworks for campus systems
▸ Managed network security infrastructure, including intrusion prevention systems, firewalls, and web security appliances

IT Manager

2004 – 2008

▸ Managed IT infrastructure, including databases, file servers, and desktop environments supporting 100+ users
▸ Supervised technical team responsible for 5 computer labs and campus computing resources

Adams & Smith

IT Manager

2008 – 2010

▸ Directed IT operations, including network infrastructure, Cisco VoIP systems, and enterprise security
▸ Managed ERP system security through role-based access control and privilege auditing

Certifications

CISSP – Certified Information Systems Security Professional

GPEN – GIAC Penetration Tester

GWAPT – GIAC Web Application Penetration Tester

GDSA – GIAC Defensible Security Architecture

GDAT – GIAC Defending Advanced Threats

GCDA – GIAC Certified Detection Analyst

GCWN – GIAC Certified Windows Security Administrator

GSNA – GIAC Systems and Network Auditor

Education

Master of Business Administration | Utah State University

Bachelor of Science, Information Technology | Utah Valley University

Awards & Recognition

Presidential Award of Excellence | Utah Valley University | 2024

Public Appearances

Presentations, interviews, and media coverage

Presentation February 25, 2026

AI at the Gates: Balancing Innovation and Security in Higher Education

UVU Data Summit • Orem, UT

Presentation on balancing AI innovation with security in higher education, covering shadow AI risks, enterprise AI tools, the UVU AI Hub, vibe coding dangers, and a framework for safe AI decisions.

Slides

Presentation October 27, 2025

SecuriDay @ UVU: Cybersecurity Awareness Workshop

Utah Valley University • Orem, UT

Interactive cybersecurity awareness workshop for students covering phishing attacks, password security, deepfakes, and practical defense strategies.

Slides

Media July 19, 2024

Expert Analysis: Worldwide Technology Outage

KUTV Channel 2 News

Live TV interview discussing the global CrowdStrike outage that disrupted businesses, airlines, and critical infrastructure worldwide.

View Coverage

Latest Insights

Thoughts on cybersecurity, technology trends, and lessons from the field.

View All Posts

Managing Guest Visibility in SharePoint: The ShowPeoplePickerSuggestionsForGuestUsers Setting

March 8, 2026

Photo Gallery

Beyond cybersecurity, bagpiping and travel are a big part of my life. Here are some highlights from conferences, pipe band events, and adventures around the world.

View All

Sainte-Mere-Eglise Church

Pipe band in highland dress posed among white crosses at an American military cemetery in Normandy

American Cemetery in Normandy

Couple posing on the deck of the USS Missouri with the ship's main gun turrets behind them

Pearl Harbor - USS Missouri

Utah Pipe Band members in full highland dress posed in front of the USS Missouri

Utah Pipe Band at USS Missouri

Let's Connect

Interested in discussing cybersecurity strategy or collaboration? I'd love to hear from you.

Connect on LinkedIn Email Me

Jon Barclay

About
My Background

Professional Certifications