Enterprise Architect

Job Summary 
Our client a leading financial services provider is seeking a Enterprise Architect to join their team! This position is located Hybrid in Chicago, Illinois.

Core Responsibilities 

• Design, build, and maintain the Isolated Recovery Environment (IRE) and clean room infrastructure used for cyber recovery exercises and declared events
• Execute end-to-end recovery testing cycles, validating RTOs and RPOs for Tier-1 and Tier-2 critical applications
• Develop and maintain recovery runbooks, playbooks, and automation scripts for clean room restoration of core banking systems, trading platforms, and data stores
• Lead technical forensic validation procedures within the IRE to confirm system integrity prior to production re-entry
• Serve as a subject matter expert during regulatory examinations, audits, and inquiry responses related to cyber recovery posture 
• Translate regulatory guidance (FFIEC Cybersecurity Assessment Tool, NIST CSF, SR 20-24, DORA where applicable) into actionable recovery engineering requirements
• Prepare evidence packages, technical narratives, and examination artifacts that demonstrate recovery capability maturity
• Maintain continuous documentation of control effectiveness, test results, and remediation tracking aligned to regulatory expectations
• Architect and operate air-gapped or logically isolated backup and replication pipelines using immutable storage technologies
• Engineer network segmentation and identity isolation controls within the IRE to prevent lateral movement and re-infection risk during recovery
• Integrate recovery automation into CI/CD and IaC pipelines using Terraform, Ansible, and scripting (Python/Bash) to ensure reproducible, auditable recovery environments
• Collaborate with application owners, DBAs, and platform teams to validate application-layer recovery sequencing and dependencies
• Own the cyber recovery exercise calendar; design tabletop, simulation, and full-failover scenarios including ransomware, destructive malware, and supply chain compromise
• Lead post-exercise after action reviews (AARs)
• Track findings to closure and drive measurable improvement in recovery capability
• Benchmark recovery metrics (RTO, RPO, MTTR) against industry peers and regulatory expectations; report program health to CISO and executive leadership
• Mentor junior engineers on recovery engineering practices, clean room protocols, and regulatory documentation standard

Required Skills/Experience (Must-Haves)

• 10+ years of infrastructure, platform, or resilience engineering experience
• 4+ years in a financial institution (bank, broker-dealer, asset manager, or equivalent regulated entity)
• Demonstrated hands-on experience implementing and testing cyber recovery in an Isolated Recovery Environment (IRE) or clean room — not just DR/BC planning
• Direct experience engaging with financial regulators (OCC, FDIC, Federal Reserve, NYDFS, SEC, or FINRA) in the context of technology examinations or regulatory responses
• Proficiency with enterprise backup and replication platforms: Cohesity, Rubrik, Zerto, Veeam, Commvault, or NetBackup
• Working knowledge of IaC tooling (Terraform, Ansible) and scripting (Python, Bash, PowerShell) for recovery automation
• Strong understanding of network segmentation, identity isolation, and zero-trust concepts as applied to clean room environments
• Familiarity with ransomware TTPs, destructive malware incident response, and forensic triage in a recovery context
• Experience with FFIEC guidance, NIST CSF, and/or DORA requirements as they pertain to operational resilience and recovery

Preferred Skills/Experience (Nice-to-Haves) 

• Experience in a GSIB, SIFI, or Category I–III bank with heightened regulatory scrutiny
• Certifications: CISSP, CISA, AWS/Azure Disaster Recovery specialty, or vendor-specific backup platform certifications
• Exposure to DORA (Digital Operational Resilience Act) implementation for EU-facing operations
• Familiarity with SWIFT, FedWire, or CHIPS recovery considerations for payment system continuity
• Experience with cyber recovery in hybrid cloud environments (AWS, Azure, or GCP) including cloud-based IRE architectures
• Background in incident response or cyber threat intelligence with a recovery engineering lens

Key Competencies & Behaviors 

• Strong technical acumen
• Organizational skills
• Communication skills

Work Environment 

• Location: Chicago, Illinois
• Hybrid

Compensation & Benefits 

• Pay Range: The approximate pay range for this position is between $70.00 and $100.81. Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums. 
• Medical, Dental, & Vision Insurance Plans 
• Employee Stock Ownership Plan 
• 401K offered 

About KellyMitchell 
At KellyMitchell, our culture is world class. We’re movers and shakers! We don’t mind a bit of friendly competition, and we reward hard work with unlimited potential for growth. This is an exciting opportunity to join a company known for innovative solutions and unsurpassed customer service. We're passionate about helping companies solve their biggest IT staffing & project solutions challenges. As an employee-owned, women-led organization serving Fortune 500 companies nationwide, we deliver expert service at a moment's notice. 
  
Marketing Disclosure 
By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from KellyMitchell and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at  https://www.careers.kellymitchell.com/privacy-policy