Enterprise IT Security & Isolated Recovery Architect

AHEAD; Chicago (IL); On-site; USD 160,000 - 210,000; Full time

Benefits offered by this job

Medical, Dental, and Vision Insurance

401(k)

Paid holidays

Paid time off

Parental and caregiver leave

Job summary

AHEAD is seeking a Senior Enterprise IT Security Architect to lead the design and deployment of isolated recovery environments for enterprise clients across on-premises, cloud, and hybrid setups.

You will own end-to-end IRE architecture, guide project teams of 3–15 engineers, and collaborate with client stakeholders to translate cyber resilience requirements into practical, validated designs. This role is highly technical and client-facing.

Qualifications

• Minimum 10 years of enterprise IT security architecture or cyber recovery experience.
• Hands-on experience designing isolated, air-gapped recovery environments.
• Strong knowledge of network segmentation, firewalls, VLANs, and isolation.
• Deep AD forest recovery, DNS/time dependencies, and identity separation.
• Experience with virtualization, cloud infra, storage, and core networking.
• Familiarity with Rubrik/Cohesity for data transfer into isolated environments.
• Ability to lead delivery teams and communicate with clients effectively.
• U.S. Citizenship required and willingness to travel as needed.

Responsibilities

• Lead architecture, design, and deployment of Isolated Recovery Environments.
• Define isolation controls and network strategies for on-prem, cloud, and hybrid.
• Architect platform services within IRE with no shared trust to production.
• Guide AD forest recovery and independent validation within isolation.
• Define secure admin models and just-in-time access for PAM integrations.
• Ensure immutable storage and backup ingestion designs in IRE.
• Develop recovery runbooks, validation procedures, and testing approaches.
• Lead and mentor delivery teams across design and deployment phases.
• Engage with client stakeholders to translate resilience requirements into designs.
• Document architectures, standards, and recommendations for clients.

Skills

10+ years security architecture

Hands-on isolation design

Network segmentation

Active Directory recovery

Platform services (VMware/Hyper-V)

Cloud infrastructure (AWS/Azure/GCP)

Backup and cyber recovery platforms

Technical team leadership

Client communication

U.S. Citizenship

Education

CISSP or CISM certification

Tools

VMware

Hyper-V

Rubrik

Cohesity

AWS/Azure/GCP

Job description

AHEAD is seeking a Senior Enterprise IT Security Architect to lead the design and deployment of isolated recovery environments for enterprise clients across on-premises, cloud, and hybrid setups.

You will own end-to-end IRE architecture, guide project teams of 3–15 engineers, and collaborate with client stakeholders to translate cyber resilience requirements into practical, validated designs. This role is highly technical and client-facing.