Senior Cybersecurity Recovery Architect
for section headings, - for lists,
for prose. No job title heading. No Job ID. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. Must preserve all substantive info.
We need to identify sections: About the role? The posting starts with description of Nutrien, purpose, etc. Then role description: Senior Cyber Recovery Architect responsibilities etc. Then "What You'll Do" with bullet points. Then "What You'll Bring" with sub-sections: Professional Experience, Core Cyber Recovery Expertise, Data Management, Automation & Orchestration, Security & Network Architecture, Threat Mitigation. Then "What You'll Get" with bullet points: Purpose-Driven Work, Excellent Benefits, Grow Your Career, Support When it Matters, Thrive in a Strong Culture. Then "Compensation & Benefits" with salary range and benefits description.
We need to decide which sections to include as headings. According to rules: use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). We should map content to these headings where appropriate. We should not create sections with filler. So we need to decide which headings have real content.
We have:
- About the role: could be the introductory paragraph about Nutrien and role purpose. That seems appropriate.
- Responsibilities: corresponds to "What You'll Do" bullet list.
- Requirements / Qualifications: could be "What You'll Bring" sections (Professional Experience, Core Cyber Recovery Expertise, etc). Might combine into Requirements.
- Skills: could be specific skills like IaC, Python, Bash, etc. But we already have them in Requirements.
- Benefits: "What You'll Get" includes benefits.
- Pay: compensation section includes salary range.
- Schedule: not mentioned, so omit.
We should not repeat job title. Also we should not include metadata like Job ID.
We need to preserve all substantive info: include details about Nutrien purpose, role purpose, responsibilities bullet list, requirements details, benefits bullet list, compensation details.
We must not include boilerplate like EEO, equal opportunity, background check, substance test, application instructions, etc. Also remove duplicated lines.
We need to output only HTML fragment, no /, no markdown fences.
Let's craft.
Structure:
About the role
Nutrien is a leading provider of crop inputs and services... (the introductory paragraph about Nutrien purpose, culture, etc.) plus maybe the role purpose sentence: "The Senior Cyber Recovery Architect serves as a hands-on technical leader responsible for designing, deploying, and continuously validating the organization’s cyber resilience framework." We'll include that.
Then
Responsibilities
- ... each bullet from "What You'll Do". Need to capture all bullet points.
List them:
- Engineer secure Isolated Recovery Environments (IRE) and clean room infrastructure
- Maintain infrastructure for cyber recovery exercises and live declared events.
- Execute end-to-end recovery testing cycles for critical systems
- Validate Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs)
- Develop comprehensive recovery runbooks, playbooks, and automated restoration scripts
- Ensure workloads are sanitized to guarantee safe production re-entry
- Validate air-gapped or logically isolated backup and replication pipelines
- Enforce data immutability standards across all secondary storage layers
- Mitigate lateral movement and re-infection risks during restoration phases
- Script reproducible infrastructure-as-code (IaC) environments using Python and Bash
- Partner with application owners, DBAs, and platform teams on recovery sequencing
- Manage the enterprise cyber recovery exercise calendar and scheduling
- Design and facilitate diverse simulation scenarios including ransomware and supply chain attacks
- Report program maturity and health metrics to the CISO and Senior IT Leadership
- Mentor junior engineers on clean room protocols and regulatory compliance standards
We need to ensure each bullet is a
- .
Then
Requirements
(or Qualifications). We'll include the "What You'll Bring" content.
We need to preserve all details: Professional Experience bullet (two options), Core Cyber Recovery Expertise bullet, Data Management bullet, Automation & Orchestration bullet, Security & Network Architecture bullet, Threat Mitigation bullet.
We could format as - each bullet with sub-bullets? The spec says use
- for any list of duties/requirements/benefits. So we can have nested lists? Probably okay but we can just have each main bullet as
- and include the detail text inside.
Let's list:
- Professional Experience: A relevant undergraduate degree with 10+ years of progressive engineering experience across infrastructure, platform, or organizational resilience domains; or a relevant technical diploma with 15+ years of progressive engineering experience across the same domains. Relevant cybersecurity or recovery certifications would be considered an asset
- Core Cyber Recovery Expertise: Proven operational experience implementing and validating technical cyber recovery strategies within a Recovery Environment or clean-room infrastructure. This must include active, live-fire scenario testing rather than high-level business continuity (BC) or disaster recovery (DR) planning
- Data Management: Enterprise-level mastery of corporate backup architectures, replication platforms, and data synchronization tools
- Automation & Orchestration: Direct experience building automated recovery pipelines utilizing Infrastructure as Code (IaC) tools such as Terraform or Ansible, alongside scripting proficiency in Python, Bash, or PowerShell
- Security & Network Architecture: Advanced comprehension of advanced network segmentation, strict identity isolation, and Zero Trust models as applied to compromised network restoration
- Threat Mitigation: Practical understanding of ransomware Tactics, Techniques, and Procedures (TTPs), destructive malware incident response methodologies, and standard forensic triage within an active recovery lifecycle
We could also include that these are bullet points.
Then
Benefits
from "What You'll Get". List bullet points:
- Purpose-Driven Work – Make an impact as part of a global team feeding the future and support farmers locally and around the world
- Excellent Benefits – Comprehensive medical, dental and vision coverage, plus a retirement program with generous employer matching for your future
- Grow Your Career – Tuition assistance for future education and ongoing learning and training opportunities for career advancement pathways across the organization
- Support When it Matters – Employee Assistance Programs, inclusive leaves, and paid time for holidays, volunteering, vacation, and wellness
- Thrive in a Strong Culture – Guided by our core values we put safety first, act with integrity, are stronger together, and deliver with excellence in a collaborative, high-performing environment
We could also include the compensation details under Pay
. The compensation section includes salary range and benefits description. However we already have Benefits section; but Pay is separate for salary. We'll include Pay with salary range and maybe mention incentive plans.
We need to preserve all substantive info: salary range $121,500 - $190,850, description of factors, benefits package details, retirement program, incentive plans, etc.
We should not duplicate benefits already listed; but we can include Pay section focusing on compensation and mention that benefits are described elsewhere.
We must not include filler like "commensurate with experience". The posting includes specific salary range, so we include.
We need to avoid repeating the same benefit points; but we can include Pay section with salary range and note that benefits are as described.
Let's craft Pay section:
Pay
The salary range for this role, in Deerfield, IL, is between $121,500 - $190,850. While we provide this range as general guidance, several factors are taken into consideration when making compensation decisions including, but not limited to, candidate skill set, experience and training, licensure and certifications, work location, and other business and organizational needs. Actual salary and benefits may differ based upon location. In addition to base pay, this role is also eligible to participate in our annual incentive plan and long-term incentive plan consistent with the terms of our program(s) where discretionary pay out of awards is reflecting components such as performance of the company and the employee.
We should not include the boilerplate about compliance with state equal pay etc. That's legal boilerplate; we should remove.
Now Benefits section we already have; we should not repeat the benefits description from compensation. The Benefits section we have from "What You'll Get" includes bullet points; we can keep that.
We also need to ensure we didn't include any duplicated lines. Check.
Now we need to output only HTML fragment.
Let's assemble:
About the role
Nutrien is a leading provider of crop inputs and services, and our business results make a positive impact on the world. Our purpose, Feeding the Future, is the reason we come to work each day. We’re guided by our culture of care and our core values: We put safety first. We act with integrity. We are stronger together. We deliver with excellence. Through the collective expertise of our nearly 26,000 employees, we operate a world-class network of production, distribution, and ag retail facilities. We efficiently serve growers' needs and strive to provide a more profitable, sustainable, and secure future for all stakeholders. Help us raise the expectation of what an agriculture company can be and grow your career with Nutrien. The Senior Cyber Recovery Architect serves as a hands-on technical leader responsible for designing, deploying, and continuously validating the organization’s cyber resilience framework. Operating at the intersection of infrastructure engineering, cybersecurity, and organizational requirements, this role ensures the rapid restoration of critical systems and data following a security incident.
Responsibilities
- Engineer secure Isolated Recovery Environments (IRE) and clean room infrastructure
- Maintain infrastructure for cyber recovery exercises and live declared events.
- Execute end-to-end recovery testing cycles for critical systems
- Validate Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs)
- Develop comprehensive recovery runbooks, playbooks, and automated restoration scripts
- Ensure workloads are sanitized to guarantee safe production re-entry
- Validate air-gapped or logically isolated backup and replication pipelines
- Enforce data immutability standards across all secondary storage layers
- Mitigate lateral movement and re-infection risks during restoration phases
- Script reproducible infrastructure-as-code (IaC) environments using Python and Bash
- Partner with application owners, DBAs, and platform teams on recovery sequencing
- Manage the enterprise cyber recovery exercise calendar and scheduling
- Design and facilitate diverse simulation scenarios including ransomware and supply chain attacks
- Report program maturity and health metrics to the CISO and Senior IT Leadership
- Mentor junior engineers on clean room protocols and regulatory compliance standards
Requirements
- Professional Experience: A relevant undergraduate degree with 10+ years of progressive engineering experience across infrastructure, platform, or organizational resilience domains; or a relevant technical diploma with 15+ years of progressive engineering experience across the same domains. Relevant cybersecurity or recovery certifications would be considered an asset
- Core Cyber Recovery Expertise: Proven operational experience implementing and validating technical cyber recovery strategies within a Recovery Environment or clean-room infrastructure. This must include active, live-fire scenario testing rather than high-level business continuity (BC) or disaster recovery (DR) planning
- Data Management: Enterprise-level mastery of corporate backup architectures, replication platforms, and data synchronization tools
- Automation & Orchestration: Direct experience building automated recovery pipelines utilizing Infrastructure as Code (IaC) tools such as Terraform or Ansible, alongside scripting proficiency in Python, Bash, or PowerShell
- Security & Network Architecture: Advanced comprehension of advanced network segmentation,
for prose. No job title heading. No Job ID. Remove boilerplate: cookie/navigation/legal/EEO/equal-opportunity/scam-warning, duplicated lines, application instructions. Must preserve all substantive info. We need to identify sections: About the role? The posting starts with description of Nutrien, purpose, etc. Then role description: Senior Cyber Recovery Architect responsibilities etc. Then "What You'll Do" with bullet points. Then "What You'll Bring" with sub-sections: Professional Experience, Core Cyber Recovery Expertise, Data Management, Automation & Orchestration, Security & Network Architecture, Threat Mitigation. Then "What You'll Get" with bullet points: Purpose-Driven Work, Excellent Benefits, Grow Your Career, Support When it Matters, Thrive in a Strong Culture. Then "Compensation & Benefits" with salary range and benefits description. We need to decide which sections to include as headings. According to rules: use
for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). We should map content to these headings where appropriate. We should not create sections with filler. So we need to decide which headings have real content.
We have:
- About the role: could be the introductory paragraph about Nutrien and role purpose. That seems appropriate.
- Responsibilities: corresponds to "What You'll Do" bullet list.
- Requirements / Qualifications: could be "What You'll Bring" sections (Professional Experience, Core Cyber Recovery Expertise, etc). Might combine into Requirements.
- Skills: could be specific skills like IaC, Python, Bash, etc. But we already have them in Requirements.
- Benefits: "What You'll Get" includes benefits.
- Pay: compensation section includes salary range.
- Schedule: not mentioned, so omit.
We should not repeat job title. Also we should not include metadata like Job ID.
We need to preserve all substantive info: include details about Nutrien purpose, role purpose, responsibilities bullet list, requirements details, benefits bullet list, compensation details.
We must not include boilerplate like EEO, equal opportunity, background check, substance test, application instructions, etc. Also remove duplicated lines.
We need to output only HTML fragment, no /, no markdown fences.
Let's craft.
Structure:
About the role
Nutrien is a leading provider of crop inputs and services... (the introductory paragraph about Nutrien purpose, culture, etc.) plus maybe the role purpose sentence: "The Senior Cyber Recovery Architect serves as a hands-on technical leader responsible for designing, deploying, and continuously validating the organization’s cyber resilience framework." We'll include that. Then
Responsibilities
- ... each bullet from "What You'll Do". Need to capture all bullet points. List them: - Engineer secure Isolated Recovery Environments (IRE) and clean room infrastructure - Maintain infrastructure for cyber recovery exercises and live declared events. - Execute end-to-end recovery testing cycles for critical systems - Validate Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs) - Develop comprehensive recovery runbooks, playbooks, and automated restoration scripts - Ensure workloads are sanitized to guarantee safe production re-entry - Validate air-gapped or logically isolated backup and replication pipelines - Enforce data immutability standards across all secondary storage layers - Mitigate lateral movement and re-infection risks during restoration phases - Script reproducible infrastructure-as-code (IaC) environments using Python and Bash - Partner with application owners, DBAs, and platform teams on recovery sequencing - Manage the enterprise cyber recovery exercise calendar and scheduling - Design and facilitate diverse simulation scenarios including ransomware and supply chain attacks - Report program maturity and health metrics to the CISO and Senior IT Leadership - Mentor junior engineers on clean room protocols and regulatory compliance standards We need to ensure each bullet is a
- .
Then
Requirements
(or Qualifications). We'll include the "What You'll Bring" content. We need to preserve all details: Professional Experience bullet (two options), Core Cyber Recovery Expertise bullet, Data Management bullet, Automation & Orchestration bullet, Security & Network Architecture bullet, Threat Mitigation bullet. We could format as- each bullet with sub-bullets? The spec says use
- for any list of duties/requirements/benefits. So we can have nested lists? Probably okay but we can just have each main bullet as
- and include the detail text inside.
Let's list:
- Professional Experience: A relevant undergraduate degree with 10+ years of progressive engineering experience across infrastructure, platform, or organizational resilience domains; or a relevant technical diploma with 15+ years of progressive engineering experience across the same domains. Relevant cybersecurity or recovery certifications would be considered an asset
- Core Cyber Recovery Expertise: Proven operational experience implementing and validating technical cyber recovery strategies within a Recovery Environment or clean-room infrastructure. This must include active, live-fire scenario testing rather than high-level business continuity (BC) or disaster recovery (DR) planning
- Data Management: Enterprise-level mastery of corporate backup architectures, replication platforms, and data synchronization tools
- Automation & Orchestration: Direct experience building automated recovery pipelines utilizing Infrastructure as Code (IaC) tools such as Terraform or Ansible, alongside scripting proficiency in Python, Bash, or PowerShell
- Security & Network Architecture: Advanced comprehension of advanced network segmentation, strict identity isolation, and Zero Trust models as applied to compromised network restoration
- Threat Mitigation: Practical understanding of ransomware Tactics, Techniques, and Procedures (TTPs), destructive malware incident response methodologies, and standard forensic triage within an active recovery lifecycle
We could also include that these are bullet points.
Then
Benefits
from "What You'll Get". List bullet points: - Purpose-Driven Work – Make an impact as part of a global team feeding the future and support farmers locally and around the world - Excellent Benefits – Comprehensive medical, dental and vision coverage, plus a retirement program with generous employer matching for your future - Grow Your Career – Tuition assistance for future education and ongoing learning and training opportunities for career advancement pathways across the organization - Support When it Matters – Employee Assistance Programs, inclusive leaves, and paid time for holidays, volunteering, vacation, and wellness - Thrive in a Strong Culture – Guided by our core values we put safety first, act with integrity, are stronger together, and deliver with excellence in a collaborative, high-performing environment We could also include the compensation details underPay
. The compensation section includes salary range and benefits description. However we already have Benefits section; but Pay is separate for salary. We'll include Pay with salary range and maybe mention incentive plans. We need to preserve all substantive info: salary range $121,500 - $190,850, description of factors, benefits package details, retirement program, incentive plans, etc. We should not duplicate benefits already listed; but we can include Pay section focusing on compensation and mention that benefits are described elsewhere. We must not include filler like "commensurate with experience". The posting includes specific salary range, so we include. We need to avoid repeating the same benefit points; but we can include Pay section with salary range and note that benefits are as described. Let's craft Pay section:Pay
The salary range for this role, in Deerfield, IL, is between $121,500 - $190,850. While we provide this range as general guidance, several factors are taken into consideration when making compensation decisions including, but not limited to, candidate skill set, experience and training, licensure and certifications, work location, and other business and organizational needs. Actual salary and benefits may differ based upon location. In addition to base pay, this role is also eligible to participate in our annual incentive plan and long-term incentive plan consistent with the terms of our program(s) where discretionary pay out of awards is reflecting components such as performance of the company and the employee.
We should not include the boilerplate about compliance with state equal pay etc. That's legal boilerplate; we should remove. Now Benefits section we already have; we should not repeat the benefits description from compensation. The Benefits section we have from "What You'll Get" includes bullet points; we can keep that. We also need to ensure we didn't include any duplicated lines. Check. Now we need to output only HTML fragment. Let's assemble:About the role
Nutrien is a leading provider of crop inputs and services, and our business results make a positive impact on the world. Our purpose, Feeding the Future, is the reason we come to work each day. We’re guided by our culture of care and our core values: We put safety first. We act with integrity. We are stronger together. We deliver with excellence. Through the collective expertise of our nearly 26,000 employees, we operate a world-class network of production, distribution, and ag retail facilities. We efficiently serve growers' needs and strive to provide a more profitable, sustainable, and secure future for all stakeholders. Help us raise the expectation of what an agriculture company can be and grow your career with Nutrien. The Senior Cyber Recovery Architect serves as a hands-on technical leader responsible for designing, deploying, and continuously validating the organization’s cyber resilience framework. Operating at the intersection of infrastructure engineering, cybersecurity, and organizational requirements, this role ensures the rapid restoration of critical systems and data following a security incident.
Responsibilities
- Engineer secure Isolated Recovery Environments (IRE) and clean room infrastructure
- Maintain infrastructure for cyber recovery exercises and live declared events.
- Execute end-to-end recovery testing cycles for critical systems
- Validate Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs)
- Develop comprehensive recovery runbooks, playbooks, and automated restoration scripts
- Ensure workloads are sanitized to guarantee safe production re-entry
- Validate air-gapped or logically isolated backup and replication pipelines
- Enforce data immutability standards across all secondary storage layers
- Mitigate lateral movement and re-infection risks during restoration phases
- Script reproducible infrastructure-as-code (IaC) environments using Python and Bash
- Partner with application owners, DBAs, and platform teams on recovery sequencing
- Manage the enterprise cyber recovery exercise calendar and scheduling
- Design and facilitate diverse simulation scenarios including ransomware and supply chain attacks
- Report program maturity and health metrics to the CISO and Senior IT Leadership
- Mentor junior engineers on clean room protocols and regulatory compliance standards
Requirements
- Professional Experience: A relevant undergraduate degree with 10+ years of progressive engineering experience across infrastructure, platform, or organizational resilience domains; or a relevant technical diploma with 15+ years of progressive engineering experience across the same domains. Relevant cybersecurity or recovery certifications would be considered an asset
- Core Cyber Recovery Expertise: Proven operational experience implementing and validating technical cyber recovery strategies within a Recovery Environment or clean-room infrastructure. This must include active, live-fire scenario testing rather than high-level business continuity (BC) or disaster recovery (DR) planning
- Data Management: Enterprise-level mastery of corporate backup architectures, replication platforms, and data synchronization tools
- Automation & Orchestration: Direct experience building automated recovery pipelines utilizing Infrastructure as Code (IaC) tools such as Terraform or Ansible, alongside scripting proficiency in Python, Bash, or PowerShell
- Security & Network Architecture: Advanced comprehension of advanced network segmentation,
- each bullet with sub-bullets? The spec says use