SENIOR CYBERSECURITY RECOVERY ARCHITECT

Job Description Job Title: Senior Cybersecurity Recovery Architect Requisition ID: 34440 Location: Calgary, AB, CAN, T2J 7E8
| Saskatoon, SK, CAN, S7K 5R6
Workplace Type: On-Site Experience Level: Mid-Senior Level Job Type: Full Time

Nutrien is a leading provider of crop inputs and services, and our business results make a positive impact on the world. Our purpose, Feeding the Future, is the reason we come to work each day. We're guided by our culture of care and our core values: We put safety first. We act with integrity. We are stronger together. We deliver with excellence.

Through the collective expertise of our nearly 26,000 employees, we operate a world-class network of production, distribution, and ag retail facilities. We efficiently serve growers' needs and strive to provide a more profitable, sustainable, and secure future for all stakeholders. Help us raise the expectation of what an agriculture company can be and grow your career with Nutrien.

The Senior Cyber Recovery Architect serves as a hands-on technical leader responsible fordesigning, deploying, and continuously validating the organization's cyber resilience framework.Operating at the intersection of infrastructure engineering, cybersecurity, and organizational requirements, this role ensures the rapid restoration of critical systems and data following a security incident.

The ideal candidate possesses deep operational expertise within complex disaster recoveryframeworks. They must demonstrate a proven track record of executing technical recoveryexercises within our recovery environment and clean-room configurations. This position requires anexecution-oriented practitioner who has actively managed simulation drills, authored technicalrunbooks, and empirically validated recovery assumptions

• Isolated & Clean Room Recovery Engineer secure Isolated Recovery Environments (IRE) and clean room infrastructure
• Maintain infrastructure for cyber recovery exercises and live declared events.
• Execute end-to-end recovery testing cycles for critical systems
• Validate Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs)
• Develop comprehensive recovery runbooks, playbooks, and automated restoration scripts
• Ensure workloads are sanitized to guarantee safe production re-entry
• Recovery Architecture & Engineering Validate air-gapped or logically isolated backup and replication pipelines
• Enforce data immutability standards across all secondary storage layers
• Mitigate lateral movement and re-infection risks during restoration phases
• Script reproducible infrastructure-as-code (IaC) environments using Python and Bash
• Partner with application owners, DBAs, and platform teams on recovery sequencing
• Exercise Program & Continuous Improvement Manage the enterprise cyber recovery exercise calendar and scheduling
• Design and facilitate diverse simulation scenarios including ransomware and supply chain attacks
• Report program maturity and health metrics to the CISO and Senior IT Leadership
• Mentor junior engineers on clean room protocols and regulatory compliance standards

• Professional Experience: A relevant undergraduate degree with 10+ years of progressive engineering experience across infrastructure, platform, or organizational resilience domains; ora relevant technical diploma with 15+ years of progressive engineering experience across the same domains. Relevant cybersecurity or recovery certifications would be considered an asset
• Core Cyber Recovery Expertise: Proven operational experience implementing and validating technical cyber recovery strategies within a Recovery Environment or clean-room infrastructure. This must include active, live-fire scenario testing rather than high-level business continuity (BC) or disaster recovery (DR) planning
• Data Management: Enterprise-level mastery of corporate backup architectures, replication platforms, and data synchronization tools
• Automation & Orchestration: Direct experience building automated recovery pipelines utilizing Infrastructure as Code (IaC) tools such as Terraform or Ansible, alongside scripting proficiency in Python, Bash, or PowerShell
• Security & Network Architecture: Advanced comprehension of advanced network segmentation, strict identity isolation, and Zero Trust models as applied to compromised network restoration
• Threat Mitigation: Practical understanding of ransomware Tactics, Techniques, Procedures (TTPs), destructive malware incident response methodologies, and standard forensic triage within an active recovery lifecycle

• Purpose-Driven Work - Make an impact as part of a global team feeding the future andsupport farmers locally and around the world
• Excellent Benefits – Comprehensive medical, dental and vision coverage, plus a retirementprogram with generous employer matching for your future
• Grow Your Career – Tuition assistance for future education and ongoing learning and trainingopportunities for career advancement pathways across the organization
• Support When it Matters – Employee Assistance Programs, inclusive leaves, and paid timefor holidays, volunteering, vacation, and wellness
• Thrive in a Strong Culture – Guided by our core values we put safety first, act with integrity,are stronger together, and deliver with excellence in a collaborative, high-performingenvironment