Operate within incident command or emergency operations structures and communicate recovery status to executive leadership.
Qualifications
Required
8+ years of experience in enterprise infrastructure, recovery architecture, or cyber resilience roles within large, complex environments.
Demonstrated experience designing and implementing cyber resilience strategies with a focus on ransomware and destructive cyber events.
Deep understanding of assume breach scenarios, including loss of production trust and large-scale system encryption.
Experience supporting ransomware recovery efforts, including incident response, recovery execution, or formal cyber recovery simulations.
Proven experience designing, building, and operating an Isolated Recovery Environment (IRE) or clean room cyber recovery platform across on-premises and cloud environments.
Strong knowledge of isolation strategies, privileged access separation, and secure recovery workflows.
Experience validating system and data integrity prior to restoration and managing staged reintroduction of recovered systems.
Experience working in or supporting healthcare provider environments, such as academic medical centers or large hospital systems.
Understanding of clinical system dependencies and impacts to patient care during cyber incidents.
Senior-level technical expertise across enterprise infrastructure, including:
Server virtualization and bare metal compute platforms (VMware VCF, Horizon VDI, Cisco UCS).
Enterprise database platforms (SQL Server and Oracle).
Enterprise storage systems, including immutable and ransomware-resistant technologies (EverPure SAN, Dell PowerScale NAS).
Data protection and recovery platforms (Rubrik Enterprise Edition).
Network segmentation and secure enclave design.
Identity and access recovery considerations in cloud environments.
Experience using automation to enhance cyber recovery workflows across on-premises and cloud environments.
Ability to apply scripting, orchestration, or infrastructure-as-code concepts to improve recovery speed, consistency, and reliability.
Strong written and verbal communication skills, including the ability to deliver executive-level technical briefings.
Preferred
Experience architecting hybrid and cloud-based recovery solutions using Azure.
Familiarity with automation frameworks and tools that enhance operational resilience during cyber events.
