Senior Cybersecurity Recovery Architect

Nutrien; Deerfield (IL); On-site; USD 122,000 - 191,000; Full time

Benefits offered by this job

Excellent medical, dental and vision

Retirement program with employer match

Tuition assistance and ongoing career-

Employee Assistance Programs

Annual incentive plan and long-term-in

Job summary

Nutrien is seeking a Senior Cyber Recovery Architect in Deerfield, IL to lead hands-on design, deployment, and validation of our cyber resilience framework across infrastructure engineering and cybersecurity. You will drive isolated recovery environments, automated runbooks, and end-to-end recovery testing for critical systems.

The role emphasizes live-fire exercises, data immutability, and coordination with application owners and platform teams.

Qualifications

• A relevant undergraduate degree with 10+ years of progressive engineering experience across infrastructure, platform, or organizational resilience domains; or a relevant technical diploma with 15+ years of progressive engineering experience across the same domains.
• Relevant cybersecurity or recovery certifications would be asset
• Experience implementing and validating cyber recovery strategies in Recovery Environments or clean-room infrastructure
• Active, live-fire scenario testing experience
• Automation and orchestration of recovery pipelines

Responsibilities

• Engineer secure Isolated Recovery Environments (IRE) and clean room infrastructure.
• Maintain infrastructure for cyber recovery exercises and live declared events.
• Execute end-to-end recovery testing cycles for critical systems.
• Validate Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs).
• Develop recovery runbooks, playbooks, and automated restoration scripts.
• Ensure workloads are sanitized for safe production re-entry.
• Validate air-gapped backup and replication pipelines.
• Enforce data immutability across secondary storage layers.
• Mitigate lateral movement and re-infection risks during restoration.
• Script reproducible IaC environments using Python and Bash.
• Partner with application owners and DBAs on recovery sequencing.
• Manage enterprise cyber recovery exercise calendar and scenarios.
• Report program maturity to CISO and Senior IT Leadership.

Skills

Infrastructure

Cyber Recovery

Disaster Recovery

IaC Automation

Python

Bash

PowerShell

Zero Trust

Ransomware TTPs

Backup Architectures

Education

Undergraduate degree in a relevant field

Relevant technical diploma with 15+ years experience

Tools

Terraform

Ansible

Python

Job description

Nutrien is a leading provider of crop inputs and services, and our business results make a positive impact on the world. Our purpose, Feeding the Future, is the reason we come to work each day. We're guided by our culture of care and our core values: We put safety first. We act with integrity. We are stronger together. We deliver with excellence.

Through the collective expertise of our nearly 26,000 employees, we operate a world-class network of production, distribution, and ag retail facilities. We efficiently serve growers' needs and strive to provide a more profitable, sustainable, and secure future for all stakeholders. Help us raise the expectation of what an agriculture company can be and grow your career with Nutrien.

The Senior Cyber Recovery Architect serves as a hands-on technical leader responsible for designing, deploying, and continuously validating the organization's cyber resilience framework. Operating at the intersection of infrastructure engineering, cybersecurity, and organizational requirements, this role ensures the rapid restoration of critical systems and data following a security incident.

The ideal candidate possesses deep operational expertise within complex disaster recovery frameworks. They must demonstrate a proven track record of executing technical recovery exercises within our recovery environment and clean-room configurations. This position requires an execution-oriented practitioner who has actively managed simulation drills, authored technical runbooks, and empirically validated recovery assumptions.

What You'll Do:

• Isolated & Clean Room Recovery
  
  • Engineer secure Isolated Recovery Environments (IRE) and clean room infrastructure
  • Maintain infrastructure for cyber recovery exercises and live declared events.
  • Execute end-to-end recovery testing cycles for critical systems
  • Validate Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs)
  • Develop comprehensive recovery runbooks, playbooks, and automated restoration scripts
  • Ensure workloads are sanitized to guarantee safe production re-entry
• Recovery Architecture & Engineering
  
  • Validate air-gapped or logically isolated backup and replication pipelines
  • Enforce data immutability standards across all secondary storage layers
  • Mitigate lateral movement and re-infection risks during restoration phases
  • Script reproducible infrastructure-as-code (IaC) environments using Python and Bash
  • Partner with application owners, DBAs, and platform teams on recovery sequencing
• Exercise Program & Continuous Improvement
  
  • Manage the enterprise cyber recovery exercise calendar and scheduling
  • Design and facilitate diverse simulation scenarios including ransomware and supply chain attacks
  • Report program maturity and health metrics to the CISO and Senior IT Leadership
  • Mentor junior engineers on clean room protocols and regulatory compliance standards

What You'll Bring:

• Professional Experience: A relevant undergraduate degree with 10+ years of progressive engineering experience across infrastructure, platform, or organizational resilience domains; or a relevant technical diploma with 15+ years of progressive engineering experience across the same domains. Relevant cybersecurity or recovery certifications would be considered an asset
• Core Cyber Recovery Expertise: Proven operational experience implementing and validating technical cyber recovery strategies within a Recovery Environment or clean-room infrastructure. This must include active, live-fire scenario testing rather than high-level business continuity (BC) or disaster recovery (DR) planning
• Data Management: Enterprise-level mastery of corporate backup architectures, replication platforms, and data synchronization tools
• Automation & Orchestration: Direct experience building automated recovery pipelines utilizing Infrastructure as Code (IaC) tools such as Terraform or Ansible, alongside scripting proficiency in Python, Bash, or PowerShell
• Security & Network Architecture: Advanced comprehension of advanced network segmentation, strict identity isolation, and Zero Trust models as applied to compromised network restoration
• Threat Mitigation: Practical understanding of ransomware Tactics, Techniques, and Procedures (TTPs), destructive malware incident response methodologies, and standard forensic triage within an active recovery lifecycle

What You’ll Get:

• Purpose-Driven Work -Make an impact as part of a global team feedingthe future and support farmerslocally and around the world
• Excellent Benefits - Comprehensive medical, dental and vision coverage, plus a retirement program with generous employer matching foryour future
• Grow Your Career - Tuition assistancefor future education and ongoing learning and training opportunities for career advancement pathwaysacross the organization
• Support When it Matters - Employee Assistance Programs, inclusive leaves, and paid time for holidays, volunteering, vacation, and wellness
• Thrive in a Strong Culture - Guided by our core valueswe put safety first, act with integrity, are stronger together, and deliver with excellence in a collaborative, high-performing environment

The salary range for this role, in Deerfield, IL, is between $121,500 - $190, 850. While we provide this range as general guidance, several factors are taken into consideration when making compensation decisions including, but not limited to, candidate skill set, experience and training, licensure and certifications, work location, and other business and organizational needs. Actual salary and benefits may differ based upon location.

We provide an attractive benefits package that includes comprehensive medical, dental, vision coverage, and life insurance and well as disability coverage for positions working more than 30 hours per week. In addition, we have a retirement program that encourages our employees to save for the longer term, with generous matching employer contributions. Our benefit package also demonstrates our culture of care with paid vacation, sick days and holidays as well as paid personal and maternity/parental leaves and an Employee and Family Assistance Program. Details of the benefits package will be shared in the application process.

In addition to base pay, this role is also eligible to participate in our annual incentive plan and long-term incentive plan consistent with the terms of our program(s) where discretionary pay out of awards is reflecting components such as performance of the company and the employee. Details will be discussed through the application process.

This information is provided in compliance with applicable state equal pay and pay equity legislation and is the company's good faith and reasonable estimate of the compensation range and benefits offered for this position. The compensation offered to the successful applicant may vary based on factors including experience, skills, education, location, and other job-related reasons. Nutrien also makes internal equity a consideration in all pay decisions.

The estimated salary that Indeed, Glassdoor and LinkedIn lists does not represent Nutrien's compensation structure. Nutrien is an equal opportunity employer.We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information, and other legally protected categories.

This job will remain posted until filled. In accordance with Nutrien policies, you will be required to undergo a background check, and may be required to undergo a substance test. While we appreciate all applications we receive, only candidates under consideration will be contacted. Applicants must meet minimum age requirements, as permitted by law.

Please be advised that pre-screen interviews may be transcribed (there will be no audio or video recording) and that artificial intelligence tools may be used to summarize the transcript of the discussion. These tools will not be used to make or influence hiring decisions. Biometric identifiers and biometric information will not be captured. If you wish to request an alternative process or a reasonable accommodation, please contact the recruiter identified in this posting.

Our Recruitment Process: Application > Resume Review > Pre-screen/Interview > Offer > Pre-Employment Conditions > Welcome to Nutrien