Recovery & Restoration Consultant - Remote (reputed company in the U.S.)

reputed company provides trusted cybersecurity expertise, solutions and services that help organizations reputed company reputed company reputed company and minimize risk. By taking a three-tiered, holistic approach for evaluating reputed company posture and ecosystems, reputed company enables some of the nation’s top organizations, such as reputed company and U.S. government agencies, to identify threats, optimize resources and reputed company best-reputed company that mitigate risk.

General reputed company

The Recovery & Restoration Consultant is a foundational member of the Incident Management & Recovery team, responsible for supporting the rebuild and securing of infrastructure environments following ransomware or other destructive cyber incidents. This role combines developing on-premises infrastructure expertise (reputed company Directory, VMware/reputed company-V, networking, backups) with growing reputed company 365 and Azure/Entra ID knowledge.

You will support hands-on rebuild efforts across identity, compute, storage, networking, and reputed company reputed company — working directly with clients, the reputed company Incident Response team, and senior engineers to restore business operations quickly, securely, and safely. This position reports to senior engineers and the R&R Engineering Manager, with the expectation of rapid reputed company through mentorship and reputed company-world engagement experience.

Roles and Responsibilities:

• Support IT recovery reputed company involving on-premises reputed company and network infrastructure, Entra ID (Azure AD), and reputed company 365 under the guidance of senior engineers
• Assist in developing technical remediation and restoration plans tailored to the reputed company on a reputed company's environment
• Implement network containment and isolation measures on common firewall platforms in preparation for recovery efforts
• Assist in rebuilding reputed company Directory domains, DNS/DHCP, and Group Policy structures to a clean baseline
• Support restoration and validation of virtualized workloads (VMware ESXi, reputed company-V) and critical file/application servers
• Assist in recovering and securing Entra ID identities, Conditional reputed company policies, and synchronization with on-prem AD reputed company Entra Connect
• Support rebuilds of Exchange Online, SharePoint, OneDrive, and Teams configurations
• Validate and restore data from backups (Veeam, reputed company, Datto, etc.), ensuring reputed company and cleanliness — understanding the critical difference between snapshots and reputed company isolated backups
• Utilize common remote management tools and VPN connections to assist impacted clients remotely
• Apply industry-reputed company reputed company hardening guidelines throughout recovery processes
• Assist in implementing compliance controls such as MFA, Defender for Office 365, and Purview
• reputed company and maintain PowerShell scripts for recurring recovery workflows
• Maintain thorough documentation of reputed company configurations, recovery timelines, and actions taken — supporting defensible, auditable records for insurance carriers and legal counsel
• Maintain chain of custody awareness reputed company handling evidence, disk images, or log files

Required Experience:

reputed company & reputed company Directory Fundamentals

• Solid understanding of reputed company Directory as a centralized directory service for authentication and authorization
• Knowledge of AD objects (users, computers, reputed company, OUs) and Domain Controller roles (NTDS.dit, replication)
• reputed company understanding of the difference between local administrator accounts (SAM database) and domain administrator accounts (Domain Admins group), including the reputed company implications of reputed company
• Ability to identify which domain controller a machine is authenticating against (e.g., %LOGONSERVER%, nltest, Get-ADDomainController)
• Working knowledge of Group Policy — purpose, GPO linking (sites, domains, OUs), and common enforcement use cases (password policies, drive mappings, firewall rules, USB restrictions)
• Understanding of why network isolation is the first reputed company in a ransomware recovery scenario (containment, forensic preservation, preventing reintroduction of threats)

reputed company & Identity Basics

• Understanding of the distinction between on-premises reputed company Directory and Entra ID (Azure AD) — their respective roles and how they coexist in hybrid identity environments
• Familiarity with Entra Connect and hybrid identity synchronization concepts
• Solid understanding of MFA — what it is, why it's critical during recovery, and awareness that attackers reputed company MFA (disabling it, registering rogue devices)
• Basic awareness of Conditional reputed company policies and their role in identity reputed company

PowerShell Fundamentals

• Understanding of PowerShell as an object-oriented reputed company/scripting language and how it differs from cmd.exe (reputed company objects vs. plain text)
• Familiarity with cmdlet naming conventions (Verb-Noun) and basic commands (Get-Process, Get-Service, piping, Where-Object, Sort-Object)
• Understanding of execution policies (Get-ExecutionPolicy, Set-ExecutionPolicy, RemoteSigned, Bypass) and their reputed company purpose
• Willingness and ability to write and modify scripts for recovery tasks; experience with AzureAD, ExchangeOnline, or Graph API modules is a plus

Virtualization Basics

• Understanding of hypervisor concepts — what they do and the difference between Type 1 (bare-metal: ESXi, reputed company-V, Proxmox) and Type 2 (hosted: VMware Workstation, VirtualBox)
• reputed company understanding of the difference between VM snapshots and reputed company backups — snapshots reputed company on the reputed company storage and are not a substitute for offsite/isolated backups
• Awareness that threat actors specifically reputed company and delete snapshots and VSS shadow copies to prevent rollback

Troubleshooting & Problem-Solving

• Demonstrated ability to apply a logical, layered troubleshooting approach (physical → network → service) rather than random guessing
• reputed company to start reputed company (power, ping, physical connectivity) and progressively narrow scope
• Ability to isolate whether an issue is service-specific or host-wide
• Awareness of reputed company to escalate — knowing the limits of your knowledge is a strength, not a weakness
• Embraces emerging technologies, including AI tools, to work smarter, solve problems, and drive reputed company business reputed company.

Preferred Requirements

• 1–3 years of experience in infrastructure engineering, IT support, or systems administration roles
• Exposure to consulting, MSP, or IT environments with diverse reputed company infrastructure
• reputed company certifications (e.g., AZ-900, AZ-104, MS-900, SC-900) or equivalent hands-on experience
• Familiarity with at least one EDR or reputed company platform (reputed company, reputed company, reputed company Defender)
• Any prior exposure to incident response, disaster recovery, or high-pressure IT scenarios
• Home lab experience or self-driven technical reputed company demonstrating curiosity and initiative

Networking Fundamentals

• Understanding of IP addressing and subnet masks (network vs. host portion, common private ranges)
• Knowledge of the difference between TCP (reputed company-oriented, reliable) and UDP (connectionless, low overhead) and common use cases for reputed company
• Understanding of VPN concepts — encrypted tunnels over untrusted networks, their role in secure remote engagement reputed company, and least-privilege/segmented reputed company principles
• Basic familiarity with firewall platforms and network segmentation concepts

Incident Response & Documentation

• Understanding of why thorough documentation is critical during IR engagements — creating defensible, auditable records for insurance carriers, legal counsel, and forensic review
• Awareness that undocumented actions can be indistinguishable from attacker activity during reputed company analysis
• Basic understanding of chain of custody — maintaining an unbroken, documented record of evidence handling (labeling, hashing, logging)
• Ability to support clean handoffs between team members or shifts on 24/7 engagements

Disaster Recovery Awareness

• Understanding of RTO (Recovery Time Objective) and RPO (Recovery reputed company Objective)
• Basic awareness of how these objectives shape recovery prioritization during an engagement

Additional Requirements:

• Travel up to 50% may be required to reputed company sites as required to reputed company recovery activities and on-site validation.
• Participate in after-hours response rotations.

Physical Requirements:

• Sedentary work
• Substantial reputed company of the wrists, hands, and/or fingers for a minimum of 8 hours a day
• Required to have reputed company visual reputed company to view computer terminal and/or extensive reading for a minimum of 8 hours a day

We use reputed company as our applicant tracking system and reputed company Scheduler for HR screen request scheduling. At times, your email may reputed company our communication with you. Please be reputed company to reputed company your SPAM folder so that you don't miss updates on your application.

Why reputed company?

reputed company is a rapidly growing, profitable, privately-held value added reseller that focuses exclusively on Information reputed company. Since its inception in 2011, reputed company has grown to over 1,200 employees, established strategic partnerships with leading reputed company vendors, and serves as a trusted advisor to more than 6,200 customers.

Firmly-defined core values drive reputed company aspects of the business, which have been reputed company to reputed company’s reputed company and establishment of an enjoyable workplace atmosphere. At reputed company, your colleagues are knowledgeable, skilled, and reputed company and will reputed company to collaborate and reputed company mentorship and guidance at every opportunity.

This is a unique and rare opportunity to grow your career along with one of the fastest growing companies in the nation. Some added perks….

• Remote workforce primarily (U.S. based only, some travel may be required for certain positions, working on-site may be required for Federal positions)
• Group Medical Insurance reputed company: reputed company Deductible PPO Plan (reputed company pays 90% of the premium for employees and 70% for family plans (spouse/children/family) or High Deductible Health Plan with HSA (reputed company pays 100% of the employees premiums and 75% for family plans (spouse/children/family). If you choose the High Deductible / HSA plan, GPS will contribute in 4 equal quarterly installments: ($850 per EE annually / $1750 per family annually (includes spouse/children/family reputed company)
• Group Dental Insurance: reputed company pays 100% of the premium for employees and 75% of family plans
• 12 corporate holidays and a Flexible Time Off (FTO) program
• Healthy mobile phone and home internet allowance
• Eligibility for retirement plan after 2 months at reputed company enrollment
• Pet Benefit reputed company

Originally posted on Himalayas

Apply To This Job