6 months ago
Base Salary
$205k - $233k/yr
Responsibilities
- Design and build a hardened AWS Isolated Recovery Environment with immutable vaults.
- Threat model cloud-native attacks including IAM privilege escalation, backup deletion, ransomware persistence, and cross-account lateral movement.
- Validate and continuously improve backup configurations for actual recoverability.
- Standardize infrastructure as code using Terraform for VPCs, IAM roles, security groups, and complete environment redeployment.
- Build automated workflows to dismantle compromised environments and bootstrap fresh hardened environments from verified code and clean data.
- Write, maintain, version, and test executable recovery playbooks containing restoration API calls and CLI commands.
- Develop Python or Go scripts to smoke test recovered data and validate post-restoration integrity.
- Lead recovery drills simulating total loss and restoration into a secondary clean account, including after-action improvements.
- Influence high-availability architecture and design reviews as the engineering organization’s resilience authority.
- Partner with Site Reliability Engineering on multi-region deployments and embed cyber resilience into architecture.
- Champion infrastructure as code and immutable infrastructure practices across engineering teams.
Requirements
- 8+ years of experience in complex cloud environments, including at least 3 years in AWS.
- Strong Terraform skills for modularizing complex, environment-agnostic infrastructure.
- Hands-on familiarity with the Secure Vault pattern in a restricted AWS account.
- Advanced shell scripting and proficiency in Python or Go.
- Experience with CI/CD tooling such as Scalr, GitHub Actions, or equivalent.
- Proven ability to engineer and automate end-to-end restoration workflows.
- EKS/Kubernetes experience is a strong plus.
- Preferred experience leading recovery efforts after a cyberattack or destructive incident.
- Preferred experience with chaos engineering tooling.
- Familiarity with NIST SP 800-34 or similar contingency-planning frameworks.
- AWS Security Specialty certification or equivalent demonstrated expertise is preferred.
Benefits
- 401(k) match
- Medical, dental, and vision insurance
- Life and disability insurance
- Paid time off including vacation, sick leave, floating holidays, and fixed holidays
- Maternity and bonding leave
- Employee assistance program and other wellbeing resources
- Hybrid work arrangement
Tech Stack
Categories
About Xometry
Xometry builds an AI-enabled marketplace that connects engineers and procurement teams with a vetted global network of manufacturers for on-demand CNC machining, 3D printing, sheet metal, and injection molding. The company earns fees by brokering instant-quote RFQs and managing production, logistics, and quality across its supplier base. Founded in 2013, Xometry is a publicly traded company (NASDAQ: XMTR) based in the Washington, DC–Baltimore area and serves buyers from startups to Fortune 1000 firms.