Senior Enterprise IT Security Architect (Cyber Recovery)

Location: Remote within the United States; U.S. Citizenship required.

Company

hirify.global provides security delivery and technical consulting services for enterprise clients.

What you will do

• Lead the architecture, design, and hands-on deployment of Isolated Recovery Environments for on-premises, cloud, and hybrid environments.
• Design network segmentation, air-gapping, one-way replication paths, firewall and VLAN strategies, and independent compute, storage, networking, DNS, DHCP, monitoring, and virtualization services.
• Design and guide isolated Active Directory forest recovery, including separate identity planes, independent time sources, and controlled validation and promotion paths.
• Define secure administration models using Privileged Access Workstations, restricted console or iLO access, just-in-time access, and PAM integration considerations.
• Develop recovery runbooks, validation procedures, immutable backup ingestion designs, and clean data-transfer patterns using platforms such as Rubrik and Cohesity.
• Lead and mentor delivery teams of approximately 3–15 consultants or engineers, provide technical direction and quality oversight, engage client stakeholders, and document architectures and standards.

Requirements

• At least 10 years of relevant enterprise IT security architecture, infrastructure, or cyber recovery experience.
• Hands-on experience designing and deploying isolated, air-gapped, or highly segmented recovery environments.
• Strong practical knowledge of network segmentation, firewalling, VLANs, routing controls, and isolation techniques across on-premises and cloud platforms.
• Deep understanding of Active Directory, including isolated forest recovery, DNS and time dependencies, and identity separation principles.
• Experience with virtualization platforms such as VMware or Hyper-V, AWS, Azure, or GCP cloud infrastructure, storage, and core networking services.
• Architectural knowledge of backup and cyber recovery platforms such as Rubrik and Cohesity sufficient to design integration and data-flow patterns; hands-on operational experience is not required.
• Ability to lead technical teams of varying sizes on complex infrastructure and security projects.
• Strong consulting and client communication skills.
• U.S. Citizenship.

Nice to have

• Experience with Privileged Access Management such as CyberArk, phishing-resistant MFA, and Privileged Access Workstation design.
• Hands-on experience with immutable storage, object lock, or equivalent write-once protections.
• Experience with ransomware recovery, clean-room recovery, or large-scale cyber resilience engagements.
• Relevant certifications such as CISSP, CISM, or platform-specific VMware, Microsoft, or major cloud provider credentials.
• Experience with Infrastructure-as-Code or automation for repeatable Isolated Recovery Environment builds.
• Knowledge of NIST, CIS, or similar frameworks and controls applied to recovery architectures.

Culture & Benefits

• Remote full-time position.
• USA employment benefits are referenced in the posting, but specific benefits are not provided.
• hirify.global emphasizes diversity and the contribution of varied ideas and perspectives.