Cyber Resilience Architect

We are seeking a Senior Technical Architect to lead our Cyber Resilience program across a large, complex academic medical center with more than 50,000 employees, multiple hospitals, and two premier medical schools. This role is responsible for strengthening the organization’s ability to anticipate, withstand, and recover from cyber incidents and disruptive events, with a focus on ransomware and destructive attacks impacting critical clinical and business systems. The Senior Technical Architect will develop and enhance the organization’s cyber resilience capabilities, including the design, build, and implementation of an Isolated Recovery Environment (IRE) and supporting recovery architectures across on premises and cloud environments. The role drives the use of automation to enhance cyber recovery workflows and improve the speed, consistency, and reliability of recovery operations.

Cyber Resilience & Ransomware Recovery

• 8+ years of experience in enterprise infrastructure, recovery architecture, or cyber resilience roles within large, complex environments
• Demonstrated experience designing and implementing cyber resilience strategies with a focus on ransomware and destructive cyber events
• Deep understanding of assume breach scenarios, including loss of production trust, and large scale system encryption
• Experience supporting ransomware recovery efforts, including incident response, recovery execution, or formal cyber recovery simulations

Isolated Recovery Environment (IRE)

• Proven experience designing, building, and operating an Isolated Recovery Environment (IRE) or clean room cyber recovery platform across on premises and cloud environments
• Strong knowledge of isolation strategies, privileged access separation, and secure recovery workflows
• Experience validating system and data integrity prior to restoration and managing staged reintroduction of recovered systems

Healthcare Environment

• Experience working in or supporting healthcare provider environments, such as academic medical centers or large hospital systems
• Understanding of clinical system dependencies and impacts to patient care during cyber incidents
• Ability to align recovery sequencing to clinical criticality and operational safety

Infrastructure & Recovery Architecture

• Senior level technical expertise across enterprise infrastructure, including:

• Server virtualization and bare metal compute platforms (VMware VCF, Horizon VDI, Cisco UCS)
• Enterprise database platforms (SQL Server and Oracle)
• Enterprise storage systems, including immutable and ransomware resistant technologies (EverPure SAN, Dell PowerScale NAS)
• Data protection and recovery platforms (Rubrik Enterprise Edition)
• Network segmentation and secure enclave design
• Experience architecting hybrid and cloud based recovery solutions (Azure)
• Identity and access recovery considerations in cloud environments
• Ability to document recovery architectures, dependencies, and restoration runbooks

Automation & Workflow Enablement

• Experience using automation to enhance cyber recovery workflows across on premises and cloud environments
• Ability to apply scripting, orchestration, or infrastructure as code concepts to improve recovery speed, consistency, and reliability
• Focus on automation as an enabler of operational resilience during cyber events

Incident Leadership & Communication

• Ability to serve as the senior technical authority during cyber incident activation and recovery
• Experience operating within incident command or emergency operations structures
• Strong written and verbal communication skills, including executive level technical briefings