Senior IT Security Architect, Isolated Recovery Expert

AHEAD; United States; Remote; USD 180,000 - 200,000; Full time

Benefits offered by this job

Medical, Dental, Vision Insurance

401(k)

Paid time off

Paid holidays

Parental and caregiver leave

Job summary

AHEAD is seeking a Senior Enterprise IT Security Architect to lead the design and deployment of Isolated Recovery Environments (IREs) for enterprise clients, in on-premises, cloud, and hybrid environments. This hands-on, client-facing role directs teams 3–15 through architecture, validation, and delivery.

You will implement strong isolation, AD forest recovery in isolation, PAM/PAW concepts, and data-flow integration with Rubrik or Cohesity. Leadership and clear communication are essential.

Qualifications

• Minimum 10 years of enterprise IT security architecture, infrastructure, or cyber recovery experience.
• Hands-on experience designing isolated, air-gapped, or highly segmented recovery environments.
• Strong knowledge of network segmentation, firewalls, VLANs, routing, and isolation in on-prem and cloud.
• Deep understanding of Active Directory forest recovery in isolation, DNS/time dependencies, identity separation.
• Experience with virtualization platforms and cloud infrastructure (VMware/Hyper‑V, AWS/Azure/GCP).
• Knowledge of modern backup and cyber recovery platforms (Rubrik, Cohesity).
• Ability to lead technical teams of varying sizes on complex infrastructure projects.
• Strong consulting and client communication skills.
• U.S. Citizenship required.

Responsibilities

• Lead architecture, design, and hands-on deployment of Isolated Recovery Environments for on-prem, cloud, and hybrid setups.
• Design robust isolation controls and one-way data paths.
• Architect independent IRE platform services (compute, storage, networking, DNS, DHCP, monitoring).
• Guide AD forest recovery processes within the isolated environment.
• Define secure administration models and IAM controls for PAWs and PAM solutions.
• Develop recovery runbooks and testing approaches for safe restoration of workloads.
• Mentor delivery teams (3–15 consultants/engineers) across design and deployment phases.
• Engage with client stakeholders to translate cyber resilience requirements into practical IRE designs.

Skills

IT security architecture

Isolated recovery design

AD forest recovery

Cloud+on-prem

Backup platform knowledge

Tools

VMware

Hyper-V

AWS

Azure

GCP

Rubrik

Cohesity

Job description

AHEAD is seeking a Senior Enterprise IT Security Architect to lead the design and deployment of Isolated Recovery Environments (IREs) for enterprise clients, in on-premises, cloud, and hybrid environments. This hands-on, client-facing role directs teams 3–15 through architecture, validation, and delivery.

You will implement strong isolation, AD forest recovery in isolation, PAM/PAW concepts, and data-flow integration with Rubrik or Cohesity. Leadership and clear communication are essential.