Senior Cybersecurity Recovery Architect
Summary
Nutrien is hiring a Senior Cybersecurity Recovery Architect in Calgary to build and maintain isolated recovery environments (clean rooms), run live cyber recovery exercises (e.g., ransomware scenarios), and validate RTOs/RPOs for critical systems. Core tech: backup/replication infrastructure, Terraform/Ansible IaC, and Python/Bash/PowerShell scripting.
What You'll Do:
- Isolated & Clean Room Recovery Engineer secure Isolated Recovery Environments (IRE) and clean room infrastructure
- Maintain infrastructure for cyber recovery exercises and live declared events.
- Execute end-to-end recovery testing cycles for critical systems
- Validate Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs)
- Develop comprehensive recovery runbooks, playbooks, and automated restoration scripts
- Ensure workloads are sanitized to guarantee safe production re-entry
- Recovery Architecture & Engineering Validate air-gapped or logically isolated backup and replication pipelines
- Enforce data immutability standards across all secondary storage layers
- Mitigate lateral movement and re-infection risks during restoration phases
- Script reproducible infrastructure-as-code (IaC) environments using Python and Bash
- Partner with application owners, DBAs, and platform teams on recovery sequencing
- Exercise Program & Continuous Improvement Manage the enterprise cyber recovery exercise calendar and scheduling
- Design and facilitate diverse simulation scenarios including ransomware and supply chain attacks
- Report program maturity and health metrics to the CISO and Senior IT Leadership
- Mentor junior engineers on clean room protocols and regulatory compliance standards
What You'll Bring:
- Professional Experience: A relevant undergraduate degree with 10+ years of progressive engineering experience across infrastructure, platform, or organizational resilience domains; ora relevant technical diploma with 15+ years of progressive engineering experience across the same domains. Relevant cybersecurity or recovery certifications would be considered an asset
- Core Cyber Recovery Expertise: Proven operational experience implementing and validating technical cyber recovery strategies within a Recovery Environment or clean-room infrastructure. This must include active, live-fire scenario testing rather than high-level business continuity (BC) or disaster recovery (DR) planning
- Data Management: Enterprise-level mastery of corporate backup architectures, replication platforms, and data synchronization tools
- Automation & Orchestration: Direct experience building automated recovery pipelines utilizing Infrastructure as Code (IaC) tools such as Terraform or Ansible, alongside scripting proficiency in Python, Bash, or PowerShell
- Security & Network Architecture: Advanced comprehension of advanced network segmentation, strict identity isolation, and Zero Trust models as applied to compromised network restoration
- Threat Mitigation: Practical understanding of ransomware Tactics, Techniques, Procedures (TTPs), destructive malware incident response methodologies, and standard forensic triage within an active recovery lifecycle
What You'll Get:
- Purpose-Driven Work - Make an impact as part of a global team feeding the future andsupport farmers locally and around the world
- Excellent Benefits – Comprehensive medical, dental and vision coverage, plus a retirementprogram with generous employer matching for your future
- Grow Your Career – Tuition assistance for future education and ongoing learning and trainingopportunities for career advancement pathways across the organization
- Support When it Matters – Employee Assistance Programs, inclusive leaves, and paid timefor holidays, volunteering, vacation, and wellness
- Thrive in a Strong Culture – Guided by our core values we put safety first, act with integrity,are stronger together, and deliver with excellence in a collaborative, high-performingenvironment