5 hours ago
Base Salary
$205k - $233k/yr
Responsibilities
- Design and build an isolated, hardened AWS recovery environment with immutable vaults and restricted network controls.
- Threat model cloud-native attack patterns including IAM privilege escalation, backup deletion, ransomware persistence, and cross-account lateral movement.
- Standardize infrastructure as code with Terraform for VPCs, IAM roles, security groups, and full environment redeployment.
- Build automated workflows to dismantle compromised environments and bootstrap clean, hardened replacements from verified code and data.
- Write executable, tested, versioned recovery playbooks containing the API calls and CLI commands needed for restoration.
- Develop Python or Go automation to smoke test recovered data and validate post-restoration integrity.
- Lead recovery drills, after-action reviews, and continuous improvements for total-loss and secondary-account recovery scenarios.
- Influence high-availability and cyber-resilience architecture decisions and partner with Site Reliability Engineering on multi-region deployments.
Requirements
- 8+ years of experience in complex cloud environments, including at least 3 years with AWS.
- Strong Terraform skills, including modularizing complex environments for environment-agnostic deployment.
- Hands-on familiarity with the Secure Vault pattern and highly restricted AWS recovery accounts.
- Advanced shell scripting and proficiency in either Python or Go.
- Experience with CI/CD tooling such as Scalr, GitHub Actions, or equivalent.
- Proven ability to engineer and automate end-to-end restoration workflows.
- EKS or Kubernetes experience is a strong plus.
- Preferred qualifications include leading technical recovery efforts after a cyberattack or destructive incident, chaos engineering experience, familiarity with NIST SP 800-34 or similar frameworks, and AWS Security Specialty certification or equivalent expertise.
Benefits
- Competitive benefits package including a 401(k) match, medical, dental, and vision insurance.
- Life and disability insurance, generous paid time off, vacation, sick leave, floating and fixed holidays, maternity and bonding leave, EAP, and other wellbeing resources.
- Hybrid work arrangement, as indicated by the #LI-Hybrid designation.
About Xometry
Xometry builds an AI-enabled marketplace that connects engineers and procurement teams with a vetted global network of manufacturers for on-demand CNC machining, 3D printing, sheet metal, and injection molding. The company earns fees by brokering instant-quote RFQs and managing production, logistics, and quality across its supplier base. Founded in 2013, Xometry is a publicly traded company (NASDAQ: XMTR) based in the Washington, DC–Baltimore area and serves buyers from startups to Fortune 1000 firms.