Staff Cyber Resilience Engineer

About the Role

Xometry is looking for a Staff Cyber Resilience Engineer to lead our defense against ransomware, destructive wipes, and data loss at scale. This is a hands-on technical leadership role where you will own the design and engineering of our Isolated Recovery Environment, set the standard for Infrastructure as Code across the organization, and ensure rapid, reliable recovery of our AWS environment.

Responsibilities

Own Our Recovery Architecture

• Design and build an Isolated Recovery Environment (hardened AWS account with immutable vaults).
• Threat model our environment against cloud-native attack patterns (IAM privilege escalation, backup deletion, ransomware persistence, lateral movement).
• Validate and continuously improve backup configurations for guaranteed recoverability.

Standardize and Automate Infrastructure

• Lead the transition to 100% Infrastructure as Code using Terraform across VPCs, IAM roles, security groups, and automated pipelines.
• Build automated recovery workflows to tear down compromised environments and bootstrap fresh ones.
• Write, maintain, and version executable recovery playbooks containing exact API calls and CLI commands.

Validate, Test, and Lead Exercises

• Develop automated test scripts in Python or Go to smoke-test recovered data integrity post-restoration.
• Lead regular recovery drills simulating total loss of critical environments and recovery into clean accounts.
• Own the after-action process and drive technical improvements.

Drive Engineering Standards

• Act as the resilience authority for engineering, shaping high-availability architecture decisions.
• Partner with Site Reliability Engineering (SRE) on multi-region deployments and HA design.
• Champion IaC and immutable infrastructure practices across the company.

Qualifications

Minimum Qualifications

• 8+ years of experience in complex cloud environments (AWS, GCP, or Azure), including at least 3 years in AWS.
• Strong Terraform skills with experience modularizing environment-agnostic stacks.
• Hands-on familiarity with the Secure Vault pattern in AWS.
• Advanced shell scripting skills and proficiency in either Python or Go for automation.
• Experience with CI/CD tooling (such as Scalr, GitHub Actions, or equivalent).
• Proven track record automating end-to-end restoration workflows.

Preferred Qualifications

• Experience with EKS/Kubernetes.
• Hands-on experience leading technical recovery efforts from an actual cyber attack or destructive incident.
• Experience with chaos engineering tooling.
• Familiarity with NIST SP 800-34 or similar contingency planning frameworks.
• AWS Certified Security - Specialty certification or equivalent expertise.