Senior Cyber Recovery Engineer

Role Overview

This organization is seeking a hands-on Senior Cyber Recovery Engineer to contribute to an in-flight initiative focused on building an Isolated Recovery Environment (IRE). This role is critical for enhancing cyber recovery capabilities, specifically for ransomware scenarios, by helping to restore systems and maintain minimal viable operations. This is a technical, execution-focused position, not a theoretical or people management role.

Key Responsibilities

• Contribute to the design, build, and maintenance of the Isolated Recovery Environment (IRE) and clean room infrastructure.
• Execute end-to-end recovery testing cycles to validate recovery time and point objectives (RTOs/RPOs) for critical applications.
• Develop and maintain recovery runbooks, playbooks, and automation scripts using tools like Terraform, Ansible, and Python.
• Support technical forensic validation procedures within the IRE to confirm system integrity before production re-entry.
• Architect and operate air-gapped or logically isolated backup and replication pipelines.
• Engineer network segmentation and identity isolation controls within the IRE to prevent lateral movement risk.
• Collaborate with application owners, DBAs, and platform teams to validate application-layer recovery sequencing.
• Participate in the design and execution of tabletop, simulation, and full-failover cyber recovery exercises.

Required Qualifications

• Demonstrated hands-on experience in cyber recovery or disaster recovery, including designing, building, implementing, and testing Isolated Recovery Environments (IREs), air-gapped environments, and clean rooms.
• 10+ years of infrastructure, platform, or resilience engineering experience, with at least 4 years in a financial institution.
• Proficiency with enterprise backup and replication platforms such as Cohesity, Rubrik, Zerto, Veeam, Commvault, or NetBackup.
• Working knowledge of Infrastructure as Code (IaC) tooling (Terraform, Ansible) and scripting (Python, Bash, PowerShell) for recovery automation.
• Strong understanding of infrastructure and data recovery, network segmentation, identity isolation, and zero-trust concepts as applied to clean room environments.
• Familiarity with ransomware TTPs, destructive malware incident response, and forensic triage in a recovery context.
• Experience with FFIEC guidance or the NIST Cybersecurity Framework (CSF) as they pertain to operational resilience.

Preferred Qualifications

• Experience within a large bank, GSIB, SIFI, or similar institution with heightened regulatory scrutiny.
• Direct experience engaging with financial regulators (e.g., OCC, FDIC, Federal Reserve) in the context of technology examinations.
• Professional certifications such as CISSP, CISA, or AWS/Azure Disaster Recovery specialty.
• Experience with cyber recovery in hybrid cloud environments (AWS, Azure, or GCP).
• Familiarity with Digital Operational Resilience Act (DORA) implementation.
• Background in incident response or cyber threat intelligence with a recovery engineering perspective.