Senior Enterprise IT Security Architect

Role overview

Lead the design and hands-on delivery of isolated recovery environments that help organizations restore critical systems after ransomware or other destructive cyber incidents. The work spans on-premises, cloud, and hybrid infrastructure, combining security architecture, practical implementation, recovery planning, and direct client engagement. You’ll provide technical direction to project teams through design, deployment, and validation.

Responsibilities - Architect and deploy isolated recovery environments, including network segmentation, air gaps, controlled replication, and firewall and VLAN rules. - Design independent platform services for recovery, such as compute, storage, networking, name resolution, monitoring, and virtualization, without relying on production trust. - Plan isolated directory and identity recovery, including separate identity environments, recovery procedures, and controlled validation. - Define secure administration approaches using restricted access, privileged workstations, just-in-time access, and privileged access management considerations. - Create recovery runbooks and testing procedures for restoring, scanning, and safely promoting workloads. - Lead and mentor delivery teams, communicate with client stakeholders, and document designs and recommendations.

Requirements - At least 10 years of relevant experience in enterprise security architecture, infrastructure, or cyber recovery. - Hands-on experience designing and deploying isolated, air-gapped, or strongly segmented recovery environments. - Strong knowledge of segmentation, firewalls, VLANs, routing controls, and isolation across on-premises and cloud settings. - Deep understanding of directory services and isolated forest recovery, including identity separation, DNS, and time dependencies. - Experience with virtualization, cloud infrastructure, storage, and core networking services. - Ability to lead complex technical projects and communicate effectively with clients; U.S. citizenship is required.

Nice to have Experience with privileged access management, phishing-resistant MFA, privileged workstations, immutable storage, cyber recovery engagements, infrastructure automation, or relevant security and platform certifications. Familiarity with backup and recovery platforms and security frameworks is also useful.

Benefits and work setup The stated on-target earnings range is $180,000–$200,000 per year. U.S. benefits include medical, dental, and vision insurance, a 401(k), paid holidays and time off, and paid parental and caregiver leave. The role also offers access to technical training and certification support.