I half messed up like this, but not nearly this big. Point being, he made a mistake, but he did save companies money and probably lots of it. Give him prohbation, or some force deal so he works for a few months/years under supervision doing authorized intrustion testing, and let by gones be by gones.

-JESSUS IS COMING!!! QUICK EVERYBODY LOOK BUSY!!!!!-