Enterprise Architect

Job Summary

Our client a leading financial services provider is seeking a Enterprise Architect to join their team! This position is located Hybrid in Chicago, Illinois.

Core Responsibilities

• Design, build, and maintain the Isolated Recovery Environment (IRE) and clean room infrastructure used for cyber recovery exercises and declared events
• Execute end-to-end recovery testing cycles, validating RTOs and RPOs for Tier-1 and Tier-2 critical applications
• Develop and maintain recovery runbooks, playbooks, and automation scripts for clean room restoration of core banking systems, trading platforms, and data stores
• Lead technical forensic validation procedures within the IRE to confirm system integrity prior to production re-entry
• Serve as a subject matter expert during regulatory examinations, audits, and inquiry responses related to cyber recovery posture
• Translate regulatory guidance (FFIEC Cybersecurity Assessment Tool, NIST CSF, SR 20-24, DORA where applicable) into actionable recovery engineering requirements
• Prepare evidence packages, technical narratives, and examination artifacts that demonstrate recovery capability maturity
• Maintain continuous documentation of control effectiveness, test results, and remediation tracking aligned to regulatory expectations
• Architect and operate air-gapped or logically isolated backup and replication pipelines using immutable storage technologies
• Engineer network segmentation and identity isolation controls within the IRE to prevent lateral movement and re-infection risk during recovery
• Integrate recovery automation into CI/CD and IaC pipelines using Terraform, Ansible, and scripting (Python/Bash) to ensure reproducible, auditable recovery environments
• Collaborate with application owners, DBAs, and platform teams to validate application-layer recovery sequencing and dependencies
• Own the cyber recovery exercise calendar; design tabletop, simulation, and full-failover scenarios including ransomware, destructive malware, and supply chain compromise
• Lead post-exercise after action reviews (AARs)
• Track findings to closure and drive measurable improvement in recovery capability
• Benchmark recovery metrics (RTO, RPO, MTTR) against industry peers and regulatory expectations; report program health to CISO and executive leadership
• Mentor junior engineers on recovery engineering practices, clean room protocols, and regulatory documentation standard

Required Skills/Experience (Must-Haves)

• 10+ years of infrastructure, platform, or resilience engineering experience
• 4+ years in a financial institution (bank, broker-dealer, asset manager, or equivalent regulated entity)
• Demonstrated hands‑on experience implementing and testing cyber recovery in an Isolated Recovery Environment (IRE) or clean room — not just DR/BC planning
• Direct experience engaging with financial regulators (OCC, FDIC, Federal Reserve, NYDFS, SEC, or FINRA) in the context of technology examinations or regulatory responses
• Proficiency with enterprise backup and replication platforms: Cohesity, Rubrik, Zerto, Veeam, Commvault, or NetBackup
• Working knowledge of IaC tooling (Terraform, Ansible) and scripting (Python, Bash, PowerShell) for recovery automation
• Strong understanding of network segmentation, identity isolation, and zero‑trust concepts as applied to clean room environments
• Familiarity with ransomware TTPs, destructive malware incident response, and forensic triage in a recovery context
• Experience with FFIEC guidance, NIST CSF, and/or DORA requirements as they pertain to operational resilience and recovery

Preferred Skills/Experience (Nice‑to‑Haves)

• Experience in a GSIB, SIFI, or Category I–III bank with heightened regulatory scrutiny
• Certifications: CISSP, CISA, AWS/Azure Disaster Recovery specialty, or vendor‑specific backup platform certifications
• Exposure to DORA (Digital Operational Resilience Act) implementation for EU‑facing operations
• Familiarity with SWIFT, FedWire, or CHIPS recovery considerations for payment system continuity
• Experience with cyber recovery in hybrid cloud environments (AWS, Azure, or GCP) including cloud‑based IRE architectures
• Background in incident response or cyber threat intelligence with a recovery engineering lens

Key Competencies & Behaviors

• Strong technical acumen
• Organizational skills
• Communication skills

Work Environment

• Location: Chicago, Illinois
• Hybrid

Compensation & Benefits

• Pay Range: The approximate pay range for this position is between $70.00 and $100.81 . Please note that the pay range provided is a good faith estimate. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums.
• Medical, Dental, & Vision Insurance Plans
• Employee Stock Ownership Plan
• 401K offered

About KellyMitchell

At KellyMitchell, our culture is world class. We’re movers and shakers! We don’t mind a bit of friendly competition, and we reward hard work with unlimited potential for growth. This is an exciting opportunity to join a company known for innovative solutions and unsurpassed customer service. We're passionate about helping companies solve their biggest IT staffing & project solutions challenges. As an employee‑owned, women‑led organization serving Fortune 500 companies nationwide, we deliver expert service at a moment's notice.