Staff Cyber Resilience Engineer

The role

You will design and build an isolated recovery environment in AWS that protects data from ransomware and destructive attacks. You will lead Infrastructure as Code standards, recovery automation, and hands-on recovery drills across the engineering organization.

What you will do

• Design and build the Isolated Recovery Environment, a hardened AWS account with immutable vaults
• Threat model the cloud environment against attacks such as IAM privilege escalation and backup deletion
• Validate and improve backup configurations so data is recoverable
• Move all infrastructure to Terraform so the full stack can be redeployed by automated pipeline
• Build automated workflows to tear down a compromised environment and bootstrap a clean one
• Write and maintain tested, versioned recovery playbooks
• Develop Python or Go scripts to smoke test and validate restored data
• Lead recovery drills that simulate total loss of a critical environment and own the after-action process
• Act as resilience authority for engineering, influencing design reviews and high-availability architecture
• Partner with Site Reliability Engineering on multi-region deployments

Required qualifications

• 8+ years of experience in complex cloud environments (AWS, GCP or Azure)
• At least 3 years of experience in AWS
• Strong Terraform skills, including modularizing environment-agnostic code
• Hands-on familiarity with the Secure Vault pattern in a separate restricted AWS account
• Advanced shell scripting and proficiency in Python or Go
• Experience with CI/CD tooling such as Scalr, GitHub Actions or equivalent
• Proven ability to engineer and automate end-to-end restoration workflows

Nice to have

• EKS/Kubernetes experience
• Hands-on experience leading technical recovery from a real cyber attack or destructive incident
• Experience with chaos engineering tooling
• Familiarity with NIST SP 800-34 or similar frameworks
• AWS Security Specialty certification or equivalent demonstrated expertise

Benefits

• 401(k) match
• Medical, dental and vision insurance
• Life and disability insurance
• Generous paid time off including vacation, sick leave, floating and fixed holidays
• Maternity and bonding leave
• EAP and other wellbeing resources

Before you apply

• Xometry participates in E-Verify; after a job offer is accepted, Form I-9 information is provided to the federal government for US based roles

About the company

Xometry (NASDAQ: XMTR) operates a digital marketplace that connects people with manufacturers. Its platform gives manufacturers resources to grow and makes global manufacturing capacity available to buyers at Fortune 1000 companies.