Staff Cyber Resilience Engineer: Cloud Recovery Architect

Socket.dev; Denver (CO); Hybrid; USD 205,000 - 233,000; Full time

Benefits offered by this job

401(k) match

Medical, dental and vision insurance

Paid time off

Life and disability insurance

Job summary

Xometry is seeking a Staff Cyber Resilience Engineer to lead our defense against ransomware and data loss. You will own the Recovery Architecture, set the standard for Infrastructure as Code across the organization, and ensure fast restoration if our AWS environment is compromised.

You will work with a high‑caliber engineering team, design automated recovery playbooks, automate tests, and drive resilience across multi‑region deployments with SRE.

Qualifications

• 8+ years of experience in complex cloud environments
• Experience with AWS/GCP/Azure, with 3+ years in AWS
• Terraform and IaC expertise
• Kubernetes/EKS experience
• Scripting in Python or Go
• CI/CD tooling knowledge (GitHub Actions, Scalr)
• Recovery orchestration and automation background

Responsibilities

• Design and build Isolated Recovery Environment with immutable vaults in a hardened AWS account
• Threat model cloud environments against IAM privilege escalation, backup deletion, ransomware, and lateral movement
• Validate and improve backup configurations for recoverability
• Lead transition to 100% Infrastructure as Code using Terraform across all assets
• Create automated recovery workflows to redeploy clean environments from verified code
• Write executable recovery playbooks with API calls and CLI steps, tested and runnable
• Develop Python or Go scripts to validate data integrity after recovery
• Lead hands-on recovery drills and drive after-action improvements
• Shape high-availability architecture decisions and influence design reviews
• Collaborate with Site Reliability Engineering on multi-region deployments to embed resilience
• Champion IaC and immutable infrastructure practices

Job description

Xometry is seeking a Staff Cyber Resilience Engineer to lead our defense against ransomware and data loss. You will own the Recovery Architecture, set the standard for Infrastructure as Code across the organization, and ensure fast restoration if our AWS environment is compromised.

You will work with a high‑caliber engineering team, design automated recovery playbooks, automate tests, and drive resilience across multi‑region deployments with SRE.