Cyber Recovery Engineer

Join a mission-critical team as a Senior Cyber Recovery Engineer, leading end-to-end design and execution of cyber recovery solutions for a top-tier financial institution. You’ll architect, implement, and validate recovery environments (airgap, IRE, clean room) to safeguard core platforms against cyber threats. This role is hands-on, highly visible, and offers the chance to engage directly with regulators and C-suite leadership. Advance your career in a collaborative, hybrid work environment with significant responsibility and direct impact on business resilience., Build and maintain Isolated Recovery Environments (IRE) and clean room infrastructure for cyber recovery exercises and live events.

• Execute and continuously improve full-cycle cyber recovery testing, validating RTO and RPO for mission-critical systems.
• Develop, update, and automate recovery runbooks and playbooks for banking, trading, and data applications.
• Lead forensic validation and system integrity checks before production re-entry.
• Serve as a subject matter expert for regulatory exams, audits, and compliance inquiries (OCC, FDIC, Federal Reserve, NYDFS).
• Translate regulatory and industry standards (FFIEC, NIST CSF, DORA) into actionable engineering requirements.
• Design and operate air-gapped/isolated backup pipelines using leading enterprise platforms (Cohesity, Rubrik, Zerto, Veeam, Commvault, NetBackup).
• Engineer network segmentation, identity isolation, and zero-trust controls within recovery environments.
• Automate recovery solutions using Terraform, Ansible, Python, Bash, and PowerShell.
• Own the cyber recovery exercise calendar, scenario design, and after-action review process.
• Mentor junior engineers and drive continuous improvement across recovery engineering and documentation.

10+ years in infrastructure, platform, or resilience engineering, with 4+ years in a financial institution.

• Proven hands-on experience implementing and testing cyber recovery in IRE or clean rooms.
• Direct participation in regulatory engagements for cyber recovery (OCC, FDIC, Federal Reserve, NYDFS, SEC, FINRA).
• Advanced proficiency with enterprise backup/replication platforms: Cohesity, Rubrik, Zerto, Veeam, Commvault, or NetBackup.
• Experience with IaC (Terraform, Ansible) and scripting (Python, Bash, PowerShell).
• Deep understanding of network segmentation, identity isolation, and zero-trust for clean room environments.
• Familiarity with ransomware TTPs, destructive malware response, and forensics in recovery.
• Working knowledge of FFIEC, NIST CSF, and/or DORA for operational resilience.

Preferred Skills

• Background in GSIB, SIFI, Category I-III banks or institutions under heightened regulatory scrutiny.
• Relevant certifications: CISSP, CISA, AWS/Azure Disaster Recovery, or backup vendor certifications.
• Experience with DORA implementation for EU operations.
• Knowledge of SWIFT, FedWire, or CHIPS payment system recovery.
• Hands-on cyber recovery in AWS, Azure, or GCP, including cloud-based IRE.
• Incident response or threat intelligence with a recovery focus.

Highly visible, mission-critical role with direct CISO and executive exposure.

• Hybrid work model in Chicago, IL with flexibility.
• Opportunity to influence business resilience at an enterprise scale.
• Professional growth through regulatory engagement, leadership, and mentoring.
• Access to latest technologies and tools in cyber recovery engineering.