Senior Cyber Recovery Engineer

Apex Systems; Chicago, Northern (IL, KY); Hybrid; USD 150,000 - 190,000; Full time

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

401K matching

Employee stock purchase program (ESPP)

HSA (Health Savings Account)

EAP with counseling

Job summary

Everforth Apex is seeking a hands-on Senior Cyber Recovery Engineer to contribute to an in-flight initiative building an Isolated Recovery Environment (IRE) to improve ransomware recovery capabilities. You will restore systems and maintain minimal viable operations in a production-like setting.

The role emphasizes practical execution over theory, with responsibilities spanning automation, air-gapped backups, network segmentation, and collaboration with app owners, DBAs, and platform teams to

Qualifications

• Hands-on experience designing, building, and testing Isolated Recovery Environments (IREs) and air-gapped environments.
• 10+ years in infrastructure, platform, or resilience engineering, including at least 4 years in a financial institution.

Responsibilities

• Contribute to design, build, and maintenance of the Isolated Recovery Environment (IRE) and clean room infrastructure.
• Execute end-to-end recovery testing cycles to validate RTOs and RPOs for critical applications.
• Develop and maintain recovery runbooks and automation scripts using Terraform, Ansible, and Python.
• Support forensic validation procedures within the IRE to confirm system integrity before production re-entry.
• Architect and operate air-gapped backup and replication pipelines.
• Engineer network segmentation and identity isolation controls within the IRE to prevent lateral movement.
• Collaborate with application owners, DBAs, and platform teams to validate recovery sequencing.
• Participate in tabletop, simulation, and full-failover cyber recovery exercises.

Skills

Cyber recovery

Disaster recovery

Infrastructure resilience

Python

Terraform

Ansible

Education

Bachelor's degree in CS/Engineering

Tools

Terraform

Ansible

Python

PowerShell

Job description

Senior Cyber Recovery Engineer

Location: Chicago, Illinois (Hybrid)

Role Overview

This organization is seeking a hands-on Senior Cyber Recovery Engineer to contribute to an in-flight initiative focused on building an Isolated Recovery Environment (IRE). This role is critical for enhancing cyber recovery capabilities, specifically for ransomware scenarios, by helping to restore systems and maintain minimal viable operations. This is a technical, execution-focused position, not a theoretical or people management role.

Key Responsibilities

• Contribute to the design, build, and maintenance of the Isolated Recovery Environment (IRE) and clean room infrastructure.
• Execute end-to-end recovery testing cycles to validate recovery time and point objectives (RTOs/RPOs) for critical applications.
• Develop and maintain recovery runbooks, playbooks, and automation scripts using tools like Terraform, Ansible, and Python.
• Support technical forensic validation procedures within the IRE to confirm system integrity before production re-entry.
• Architect and operate air-gapped or logically isolated backup and replication pipelines.
• Engineer network segmentation and identity isolation controls within the IRE to prevent lateral movement risk.
• Collaborate with application owners, DBAs, and platform teams to validate application-layer recovery sequencing.
• Participate in the design and execution of tabletop, simulation, and full-failover cyber recovery exercises.

Required Qualifications

• Demonstrated hands-on experience in cyber recovery or disaster recovery, including designing, building, implementing, and testing Isolated Recovery Environments (IREs), air-gapped environments, and clean rooms.
• 10+ years of infrastructure, platform, or resilience engineering experience, with at least 4 years in a financial institution.
• Proficiency with enterprise backup and replication platforms such as Cohesity, Rubrik, Zerto, Veeam, Commvault, or NetBackup.
• Working knowledge of Infrastructure as Code (IaC) tooling (Terraform, Ansible) and scripting (Python, Bash, PowerShell) for recovery automation.
• Strong understanding of infrastructure and data recovery, network segmentation, identity isolation, and zero-trust concepts as applied to clean room environments.
• Familiarity with ransomware TTPs, destructive malware incident response, and forensic triage in a recovery context.
• Experience with FFIEC guidance or the NIST Cybersecurity Framework (CSF) as they pertain to operational resilience.

Preferred Qualifications

• Experience within a large bank, GSIB, SIFI, or similar institution with heightened regulatory scrutiny.
• Direct experience engaging with financial regulators (e.g., OCC, FDIC, Federal Reserve) in the context of technology examinations.
• Professional certifications such as CISSP, CISA, or AWS/Azure Disaster Recovery specialty.
• Experience with cyber recovery in hybrid cloud environments (AWS, Azure, or GCP).
• Familiarity with Digital Operational Resilience Act (DORA) implementation.
• Background in incident response or cyber threat intelligence with a recovery engineering perspective.

Benefits Overview

Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Everforth Apex team member can provide.

Equal Opportunity Employer

Everforth Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.

Accommodation Request

If you require an accommodation under the Americans with Disabilities Act to participate in an interview with a virtual recruiter or to use our website for a search or application, please contact our Benefits Department at [e-mail] or 804-523-8228. Please note that this contact information is strictly to be used for medical ADA accommodations and that no other inquiries will be answered.