Staff Cyber Resilience Engineer

The role

You will design and build a hardened, isolated recovery environment in AWS to protect against ransomware and data loss. You will lead the move to full Infrastructure as Code with Terraform and run recovery drills across the organization.

What you will do

• Design and build the Isolated Recovery Environment, a hardened AWS account with immutable vaults
• Threat model the cloud environment against IAM escalation, backup deletion, ransomware and lateral movement
• Validate and improve backup configurations so data can actually be recovered
• Lead the move to 100% Infrastructure as Code in Terraform
• Build automated workflows to tear down a compromised environment and rebuild a clean one
• Write and maintain tested, versioned recovery playbooks
• Develop Python or Go scripts to test recovered data integrity
• Lead recovery drills and own the after-action process
• Act as the resilience authority for engineering design reviews
• Partner with the Site Reliability Engineering team on multi-region, high-availability design

Required qualifications

• 8+ years in complex cloud environments (AWS, GCP or Azure), including at least 3 years in AWS
• Strong Terraform skills, including modularizing environment-agnostic code
• Hands-on familiarity with the Secure Vault pattern in a separate restricted AWS account
• Advanced shell scripting and proficiency in Python or Go
• Experience with CI/CD tools such as Scalr, GitHub Actions or equivalent
• Proven ability to engineer and automate end-to-end restoration workflows

Nice to have

• EKS or Kubernetes experience
• Hands-on experience leading recovery from a real cyber attack or destructive incident
• Experience with chaos engineering tools
• Familiarity with NIST SP 800-34 or similar frameworks
• AWS Security Specialty certification or equivalent demonstrated expertise

Benefits

• 401(k) match
• Medical, dental and vision insurance
• Life and disability insurance
• Generous paid time off, including vacation, sick leave, floating and fixed holidays
• Maternity and bonding leave
• EAP and other wellbeing resources
• Much more, not specified

Before you apply

• Xometry participates in E-Verify; after an offer is accepted, Form I-9 information is provided to the federal government to confirm U.S. work authorization

About the company

Xometry (NASDAQ: XMTR) runs a digital marketplace that connects manufacturers with buyers, including Fortune 1000 companies, to bring product ideas to life. It is an equal opportunity employer.