Staff Cyber Resilience Engineer

About the Role

Xometry is looking for a Staff Cyber Resilience Engineer to lead defense against ransomware, destructive wipes, and data loss at scale. In this hands-on technical leadership role, you will own the design and engineering of our Isolated Recovery Environment, set the standard for Infrastructure as Code across the organization, and ensure that if our AWS environment is compromised, operations can be restored with certainty and speed.

Responsibilities

• Own Our Recovery Architecture: Design and build our Isolated Recovery Environment (hardened AWS account with immutable vaults). Threat model the environment against cloud-native attack patterns (IAM privilege escalation, backup deletion, ransomware persistence, lateral movement). Validate and improve backup configurations.
• Standardize and Automate Infrastructure: Lead the transition to 100% Infrastructure as Code in Terraform to redeploy the full stack into a clean account via automated pipelines. Build automated recovery workflows and maintain executable, tested recovery playbooks.
• Validate, Test, and Lead Exercises: Develop automated scripts (Python or Go) to smoke test recovered data and validate integrity. Lead regular hands-on recovery drills simulating total environment loss and secondary account recovery.
• Drive Engineering Standards: Serve as the resilience authority for high-availability architecture decisions. Partner with Site Reliability Engineering on multi-region deployments and promote IaC and immutable infrastructure practices.

Qualifications

Required

• 8+ years of experience in complex cloud environments (AWS, GCP, or Azure), including at least 3 years in AWS.
• Strong Terraform skills, including modularizing complex, environment-agnostic infrastructure.
• Hands-on familiarity with the Secure Vault pattern in AWS.
• Advanced shell scripting and proficiency in either Python or Go.
• Experience with CI/CD tooling (such as GitHub Actions, Scalr, or equivalent).
• Proven ability to engineer and automate end-to-end restoration workflows.

Preferred

• Hands-on experience leading technical recovery efforts from an actual cyber attack or destructive incident.
• Experience with chaos engineering tooling.
• EKS / Kubernetes experience.
• Familiarity with NIST SP 800-34 or similar frameworks.
• AWS Security Specialty certification or equivalent demonstrated expertise.