Senior Enterprise IT Security Architect

AHEAD

. Lead the architecture, design, and hands-on deployment of Isolated Recovery Environments for on-premises, cloud, and hybrid environments .

Posted 10/22/2026full-timeRemote • United StatesSenior💰 $180,000 - $200,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in designing and deploying Isolated Recovery Environments, with a strong focus on network segmentation, Active Directory recovery, and cloud infrastructure. Proven leadership in guiding technical teams and engaging clients to translate cyber resilience requirements into effective solutions.

Highest-signal resume keywords

Isolated Recovery Environment DesignNetwork SegmentationActive Directory Forest RecoveryCloud Infrastructure (AWS, Azure, GCP)Rubrik and Cohesity Architectural Knowledge

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cyber Recovery ExperienceFirewall and VLAN StrategiesVirtualization Platforms (VMware, Hyper-V)Storage and Core Networking ServicesIsolation Techniques

Soft Skills

Client Communication SkillsTeam LeadershipMentoring

Industry Keywords

Enterprise IT Security ArchitectureCyber ResilienceImmutable StorageBackup Ingestion DesignsJust-In-Time Access

Tech Stack

Tools & technologies

AWSAzureCloudDNSGoogle Cloud PlatformVMware

About the role

Key responsibilities & impact

Lead the architecture, design, and hands-on deployment of Isolated Recovery Environments for on-premises, cloud, and hybrid environments
Design and implement isolation controls including network segmentation, air-gapping, one-way replication paths, and firewall/VLAN strategies
Architect independent compute, storage, networking, DNS, DHCP, monitoring, and virtualization services within isolated environments
Design and guide Active Directory forest recovery processes inside isolated environments
Define secure administration models using PAWs, restricted access methods, just-in-time access, and PAM integration considerations
Ensure immutable storage and backup ingestion designs, incorporating Rubrik and Cohesity architectural knowledge
Develop recovery runbooks, validation procedures, and testing approaches
Lead and mentor delivery teams of typically 3–15 consultants/engineers
Engage client stakeholders to translate cyber resilience requirements into practical IRE designs
Document architectures, standards, and recommendations for client environments
Own end-to-end IRE architecture and deployment leadership from design through implementation and validation
Direct project teams of 3 to 15 people on client engagements

Requirements

What you’ll need

Minimum 10 years of relevant enterprise IT security architecture, infrastructure, or cyber recovery experience
Proven hands-on experience designing and deploying isolated, air-gapped, or highly segmented recovery environments
Strong practical knowledge of network segmentation, firewalling, VLANs, routing controls, and isolation techniques in on-premises and cloud platforms
Deep understanding of Active Directory, including forest recovery procedures performed in isolation, DNS/time dependencies, and identity separation principles
Experience with virtualization platforms such as VMware or Hyper-V
Experience with cloud infrastructure on AWS, Azure, or GCP
Experience with storage and core networking services
Architectural knowledge of modern backup and cyber recovery platforms such as Rubrik and Cohesity; hands-on operational experience is not required
Demonstrated ability to lead technical teams of varying sizes on complex infrastructure and security projects
Strong consulting and client communication skills
U.S. Citizenship required

Benefits

Comp & perks

Medical, Dental, and Vision Insurance
401(k)
Paid company holidays
Paid time off
Paid parental and caregiver leave
Cross-department training and development
Sponsored certifications and credentials for continued learning
Multi-million-dollar technology lab
AI application/resume review and interview recording/transcription opt-out options without penalty