Cyber Recovery Engineer

• Contribute to the design, build, and maintenance of the Isolated Recovery Environment (IRE) and clean room infrastructure.
• Execute end-to-end recovery testing cycles to validate recovery time and point objectives (RTOs/RPOs) for critical applications.
• Develop and maintain recovery runbooks, playbooks, and automation scripts using tools like Terraform, Ansible, and Python.
• Support technical forensic validation procedures within the IRE to confirm system integrity before production re-entry.
• Architect and operate air-gapped or logically isolated backup and replication pipelines.
• Engineer network segmentation and identity isolation controls within the IRE to prevent lateral movement risk.
• Collaborate with application owners, DBAs, and platform teams to validate application-layer recovery sequencing.
• Participate in the design and execution of tabletop, simulation, and full-failover cyber recovery exercises.

• Demonstrated hands-on experience in cyber recovery or disaster recovery, including designing, building, implementing, and testing Isolated Recovery Environments (IREs), air-gapped environments, and clean rooms.
• 10+ years of infrastructure, platform, or resilience engineering experience, with at least 4 years in a financial institution.
• Proficiency with enterprise backup and replication platforms such as Cohesity, Rubrik, Zerto, Veeam, Commvault, or NetBackup.
• Working knowledge of Infrastructure as Code (IaC) tooling (Terraform, Ansible) and scripting (Python, Bash, PowerShell) for recovery automation.
• Strong understanding of infrastructure and data recovery, network segmentation, identity isolation, and zero-trust concepts as applied to clean room environments.
• Familiarity with ransomware TTPs, destructive malware incident response, and forensic triage in a recovery context.
• Experience with FFIEC guidance or the NIST Cybersecurity Framework (CSF) as they pertain to operational resilience., * Experience within a large bank, GSIB, SIFI, or similar institution with heightened regulatory scrutiny.
• Direct experience engaging with financial regulators (e.g., OCC, FDIC, Federal Reserve) in the context of technology examinations.
• Professional certifications such as CISSP, CISA, or AWS/Azure Disaster Recovery specialty.
• Experience with cyber recovery in hybrid cloud environments (AWS, Azure, or Google Cloud Platform).
• Familiarity with Digital Operational Resilience Act (DORA) implementation.
• Background in incident response or cyber threat intelligence with a recovery engineering perspective.

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Everforth Apex uses a virtual recruiter as part of the application process. Click for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at