Senior Cybersecurity Recovery Architect

Nutrien; Loveland (CO); On-site; USD 120,000 - 200,000; Full time

Job summary

Nutrien in Deerfield, IL and Loveland, CO seeks a Senior Cyber Recovery Architect to lead design, deployment and validation of cyber resilience programs. You will work at the intersection of infrastructure, cybersecurity and recovery readiness to ensure rapid restoration after incidents.

The role requires hands-on experience building isolated recovery environments, IaC pipelines, and live-fire exercises, plus collaboration with app owners and platform teams to validate RTOs/RPOs and recovery

Qualifications

• A relevant undergraduate degree with 10+ years of progressive engineering experience across infrastructure, platform, or organizational resilience domains; or 15+ years with a relevant diploma.
• Operational experience implementing and validating cyber recovery strategies within recovery environments or clean-room infrastructure, including live-fire testing.
• Experience with backup architectures, replication platforms, and data synchronization tools.

Responsibilities

• Design, deploy and validate cyber resilience programs and recovery environments.
• Engineer isolated recovery environments (IRE) and clean-room infrastructure; maintain for exercises and events.
• Execute end-to-end recovery testing cycles for critical systems; validate RTOs and RPOs.
• Develop runbooks, playbooks, and automated restoration scripts; ensure safe production re-entry.

Skills

Recovery Architecture

IaC Terraform

Python

Ansible

Zero Trust

Ransomware TTPs

Cloud Security

Education

Bachelor's degree in a related field

Tools

Python

Bash

PowerShell

Terraform

Ansible

Job description

Job Title: Senior Cybersecurity Recovery Architect

Requisition ID: 34393

Location: Deerfield, IL, USA, 60015 | Loveland, CO, USA, 80538

Workplace Type: On-Site

Experience Level: Mid-Senior Level

Job Type: Full Time

Nutrien is a leading provider of crop inputs and services, and our business results make a positive impact on the world. Our purpose, Feeding the Future, is the reason we come to work each day. We're guided by our culture of care and our core values: We put safety first. We act with integrity. We are stronger together. We deliver with excellence.

Through the collective expertise of our nearly 26,000 employees, we operate a world-class network of production, distribution, and ag retail facilities. We efficiently serve growers' needs and strive to provide a more profitable, sustainable, and secure future for all stakeholders. Help us raise the expectation of what an agriculture company can be and grow your career with Nutrien.

The Senior Cyber Recovery Architect serves as a hands-on technical leader responsible for designing, deploying, and continuously validating the organization's cyber resilience framework. Operating at the intersection of infrastructure engineering, cybersecurity, and organizational requirements, this role ensures the rapid restoration of critical systems and data following a security incident.

The ideal candidate possesses deep operational expertise within complex disaster recovery frameworks. They must demonstrate a proven track record of executing technical recovery exercises within our recovery environment and clean-room configurations. This position requires an execution-oriented practitioner who has actively managed simulation drills, authored technical runbooks, and empirically validated recovery assumptions.

What You'll Do

• Isolated & Clean Room Recovery
  • Engineer secure Isolated Recovery Environments (IRE) and clean room infrastructure
  • Maintain infrastructure for cyber recovery exercises and live declared events.
  • Execute end-to-end recovery testing cycles for critical systems
  • Validate Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs)
  • Develop comprehensive recovery runbooks, playbooks, and automated restoration scripts
  • Ensure workloads are sanitized to guarantee safe production re-entry
• Recovery Architecture & Engineering
  • Validate air-gapped or logically isolated backup and replication pipelines
  • Enforce data immutability standards across all secondary storage layers
  • Mitigate lateral movement and re-infection risks during restoration phases
  • Script reproducible infrastructure-as-code (IaC) environments using Python and Bash
  • Partner with application owners, DBAs, and platform teams on recovery sequencing
• Exercise Program & Continuous Improvement
  • Manage the enterprise cyber recovery exercise calendar and scheduling
  • Design and facilitate diverse simulation scenarios including ransomware and supply chain attacks
  • Report program maturity and health metrics to the CISO and Senior IT Leadership
  • Mentor junior engineers on clean room protocols and regulatory compliance standards

What You'll Bring

• Professional Experience: A relevant undergraduate degree with 10+ years of progressive engineering experience across infrastructure, platform, or organizational resilience domains; or a relevant technical diploma with 15+ years of progressive engineering experience across the same domains. Relevant cybersecurity or recovery certifications would be considered an asset
• Core Cyber Recovery Expertise: Proven operational experience implementing and validating technical cyber recovery strategies within a Recovery Environment or clean-room infrastructure. This must include active, live-fire scenario testing rather than high-level business continuity (BC) or disaster recovery (DR) planning
• Data Management: Enterprise-level mastery of corporate backup architectures, replication platforms, and data synchronization tools
• Automation & Orchestration: Direct experience building automated recovery pipelines utilizing Infrastructure as Code (IaC) tools such as Terraform or Ansible, alongside scripting proficiency in Python, Bash, or PowerShell
• Security & Network Architecture: Advanced comprehension of advanced network segmentation, strict identity isolation, and Zero Trust models as applied to compromised network restoration
• Threat Mitigation: Practical understanding of ransomware Tactics, Techniques, and Procedures (TTPs), destructive malware incident response methodologies, and standard forensic triage within an active recovery lifecycle

What You'll Get

• Purpose-Driven Work -Make an impact as part of a global team feedingthe future and support farmerslocally and around the world
• Excellent Benefits - Comprehensive medical, dental and vision coverage, plus a retirement program with generous employer matching foryour future
• Grow Your Career - Tuition assistancefor future education and ongoing learning and training opportunities for career advancement pathwaysacross the organization
• Support When it Matters- Employee Assistance Programs, inclusive leaves, and paid time for holidays, volunteering, vacation, and wellness
• Thrive in a Strong Culture - Guided by our core valueswe put safety first, act with integrity, are stronger together, and deliver with excellence in a collaborative, high-performing environment

Compensation & Benefits

The salary range for this role, in Deerfield, IL, is between $121,500 - $190, 850 and in Loveland, CO, is between is between $127,500 - $200,310. While we provide this range as general guidance, several factors are taken into consideration when making compensation decisions including, but not limited to, candidate skill set, experience and training, licensure and certifications, work location, and other business and organizational needs. Actual salary and benefits may differ based upon location.

We provide an attractive benefits package that includes comprehensive medical, dental, vision coverage, and life insurance and well as disability coverage for positions working more than 30 hours per week. In addition, we have a retirement program that encourages our employees to save for the longer term, with generous matching employer contributions. Our benefit package also demonstrates our culture of care with paid vacation, sick days and holidays as well as paid personal and maternity/parental leaves and an Employee and Family Assistance Program. Details of the benefits package will be shared in the application process.

In addition to base pay, this role is also eligible to participate in our annual incentive plan and long-term incentive plan consistent with the terms of our program(s) where discretionary pay out of awards is reflecting components such as performance of the company and the employee. Details will be discussed through the application process.

This information is provided in compliance with applicable state equal pay and pay equity legislation and is the company's good faith and reasonable estimate of the compensation range and benefits offered for this position. The compensation offered to the successful applicant may vary based on factors including experience, skills, education, location, and other job-related reasons. Nutrien also makes internal equity a consideration in all pay decisions.

The estimated salary that Indeed, Glassdoor and LinkedIn lists does not represent Nutrien's compensation structure. Nutrien is an equal opportunity employer.We evaluate qualified applicants without regard to race, color, religion, sex, age, national origin, disability, veteran status, genetic information, and other legally protected categories.

This job will remain posted until filled. In accordance with Nutrien policies, you will be required to undergo a background check, and may be required to undergo a substance test. While we appreciate all applications we receive, only candidates under consideration will be contacted. Applicants must meet minimum age requirements, as permitted by law.

Please be advised that pre-screen interviews may be transcribed (there will be no audio or video recording) and that artificial intelligence tools may be used to summarize the transcript of the discussion. These tools will not be used to make or influence hiring decisions. Biometric identifiers and biometric information will not be captured. If you wish to request an alternative process or a reasonable accommodation, please contact the recruiter identified in this posting.

Our Recruitment Process: Application > Resume Review > Pre-screen/Interview > Offer > Pre-Employment Conditions > Welcome to Nutrien

To stay connected to us and for the latest job postings and news, follow us on: LinkedIn, Facebook, and Instagram.