Cyber Disaster Recovery Architect

Realtime Recruitment Limited; Dublin; On-site; EUR 120,000 - 160,000; Full time

Job summary

Realtime Recruitment Limited is seeking a visionary Cyber Security Architect specialising in Cyber Resilience to help organisations withstand incidents and bounce back instantly.

Your mission includes designing near-zero Recovery Time Objectives, leading evaluation of security products, and driving automated, immutable infrastructure with IaC to harden the enterprise posture.

Collaborate with SOC and Incident Response teams to deliver clean-room restoration environments for rapid recovery.

Qualifications

• Minimum 10 years in dedicated cyber security architecture with hands-on experience in business continuity and disaster recovery at scale.
• Proven ability to hit aggressive RTO/RPO targets under attack conditions.
• Strong familiarity with IaC, automation, and modern cloud security architectures.

Responsibilities

• Architect for Recovery by designing high-availability, zero-trust infrastructures for rapid breach containment.
• Minimize blast radii with micro-segmentation and identity isolation across ecosystems.
• Automate resilience using IaC and automation pipelines for rapid rebuilds.
• Oversee immutable backup systems ensuring data integrity and quick restorations post-incident.
• Lead product evaluation, PoCs, and tooling strategy for EDR/XDR, SIEM/SOAR, and data protection.
• Collaborate with SOC and IR to translate business continuity plans into automated runbooks.

Skills

Cyber security architecture

Business continuity planning

Incident response collaboration

Executive communication

Tools

Terraform

Ansible

CloudFormation

Kubernetes

EDR/XDR

SIEM/SOAR

Data protection tools

Job description

We are seeking a visionary and battle-tested Cyber Security Architect with a specialized focus on Cyber Resilience.

While traditional security focuses heavily on preventing breaches, this role is built around a critical reality: assuming a breach will happen and ensuring our business can withstand and bounce back from it instantly.

Your mission will be two-fold: architecting systems that achieve near-zero Recovery Time Objectives (RTO) following a cyber incident, and leading the strategic evaluation and selection of security products to radically harden our enterprise defense posture.

Key Responsibilities

• Architect for Recovery: Design, build, and maintain high-availability, zero-trust infrastructure architectures optimized for rapid deployment and containment during or after an incident.
• Minimize Blast Radii: Implement robust micro-segmentation, identity isolation, and blast-radius containment strategies across application ecosystems.
• Automated Resilience: Partner with engineering teams to leverage Infrastructure as Code (IaC) and automation pipelines, enabling the environment to self-heal or rebuild from scratch in minutes rather than days.
• Immutable Infrastructure: Oversee the architecture of air-gapped, immutable backup systems, ensuring data integrity and rapid restoration capabilities post-ransomware attack.
• Product Selection & Tool Strategy: Act as the technical authority for evaluating, benchmarking, and selecting security products (e.g., EDR/XDR, SIEM/SOAR, Data Protection, Zero Trust tools). Conduct rigorous Proof of Concepts (PoCs) to avoid vendor lock-in.
• Incident Response Collaboration: Translate business continuity plans into automated, executable engineering playbooks. Collaborate closely with the SOC and Incident Response teams to build "clean room" restoration environments.

What We Are Looking For

• Proven Track Record: Minimum of 10 years in dedicated cyber security architecture, with distinct, hands-on experience handling business continuity, disaster recovery, or active incident remediation at scale.
• The "Recovery" Mindset: Demonstrated experience architecting systems to hit aggressive RTO/RPO targets under simulated or real cyber-attack conditions.
• Automation Mastery: Strong familiarity with infrastructure automation tools (e.g., Terraform, Ansible, CloudFormation) to drive rapid environment reconstruction.
• Technical Depth: Deep knowledge of cloud environments [insert AWS / Azure / GCP as applicable], hybrid networks, identity and access management (IAM), and modern container security (Kubernetes).
• Strategic Evaluation Skills: A highly analytical approach to vendor assessments, capable of evaluating security tools against real-world technical requirements, interoperability, and cost-efficiency.
• Strong Communicator: Ability to explain complex technical risks and architecture trade-offs to executive stakeholders, while retaining the technical authority to guide engineering teams.

Preferred Certifications (Any of the following is a plus)

• Certified Information Systems Security Professional (CISSP) / Information Systems Security Architecture Professional (CISSP-ISSAP)
• Certificate of Cloud Security Knowledge (CCSK) / CCSP
• Certified Disaster Recovery Engineer (CDRE) or equivalent business continuity credentials