Senior Technical Architect
eplusNew York (NY)
About the role
We’re hiring a Senior Technical Architect – Cyber Resilience to support a large, highly complex healthcare environment. This senior-level role will focus on strengthening the organization’s ability to anticipate, withstand, and recover from cyber incidents, with particular emphasis on ransomware, destructive attacks, and recovery of mission-critical clinical and business systems. The architect will help design and enhance enterprise cyber resilience capabilities, including an Isolated Recovery Environment (IRE), secure recovery architectures, and automated recovery workflows across on-premises and cloud environments.
Key Responsibilities:
- Design and implement enterprise cyber resilience and ransomware recovery strategies
- Architect, build, and enhance an Isolated Recovery Environment (IRE) / clean-room recovery platform
- Develop recovery architectures spanning on-premises, hybrid, and Azure environments
- Design isolation strategies, secure enclaves, privileged access separation, and controlled recovery workflows
- Validate system and data integrity prior to restoration
- Define recovery sequencing and staged reintroduction of critical systems
- Develop and maintain recovery architecture documentation, dependencies, and restoration runbooks
- Use automation, scripting, orchestration, and infrastructure-as-code concepts to improve recovery speed and consistency
- Serve as a senior technical authority during cyber incident activation and recovery
- Partner with cybersecurity, infrastructure, cloud, application, and business stakeholders
Required Experience:
- 8+ years of experience in enterprise infrastructure, recovery architecture, cyber resilience, or related technical architecture roles
- Strong experience designing cyber resilience strategies for ransomware and destructive cyber events
- Deep understanding of assume-breach scenarios, loss of production trust, and large-scale system encryption
- Experience supporting ransomware recovery, cyber recovery exercises, incident response, or formal recovery simulations
- Hands-on experience designing or operating an IRE, clean-room, or isolated cyber recovery environment
- Strong understanding of network isolation, privileged access separation, secure recovery, and integrity validation
- Experience supporting large, complex healthcare environments strongly preferred
- Understanding of clinical system dependencies and recovery prioritization based on operational and patient-care impact
- Technical Environment
- Experience with several of the following is highly desirable:
- VMware VCF / Horizon VDICisco UCSSQL Server and Oracle
- Enterprise SAN and NAS platforms
- Immutable and ransomware-resistant storage
- Rubrik or similar enterprise data protection platforms
- Network segmentation and secure enclave design
- Microsoft Azure
- Identity and access recovery
- Infrastructure automation and orchestration
- Leadership & Communication
The ideal candidate can operate as a senior technical authority during critical cyber events, work effectively within incident command or emergency operations structures, and communicate complex technical recovery strategies to both engineering teams and executive leadership.
If you have deep experience in Cyber Resilience, Cyber Recovery, Ransomware Recovery, Disaster Recovery, Security Architecture, or Infrastructure Architecture, I’d be interested in connecting.
Before you apply
Applying takes about a minute. These four things decide how fast it moves after that.
Your profile is current
It's what we read first. Occupations, seniority and locations matter more than a long history.
Two examples you can talk through
Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.
A number in mind
What you're on now and what would make you move. We negotiate better when we know both.
Your notice period
Employers plan around it, and it's the question that stalls offers most often.
Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.
More like this