Solution Architect - Private Cloud - Cyber Recovery

As a Cyber Recovery Solution Architect, you define the end-to-end architecture of Cegeka's cyber recovery solutions within Cloud & Digital Platforms. You translate domain strategy, customer needs, product requirements and regulations into coherent reference architectures, integration patterns and clear functional boundaries. In doing so, you create solutions that can be repeatedly sold, implemented and managed. You combine in-depth cyber recovery expertise with broad architectural knowledge and strong advisory skills. Your primary focus is on reusable portfolio architecture and safeguarding architectural integrity. For strategic or complex opportunities, you support customers and presales teams by providing guidance on architectural choices, risk assessments and pragmatic trade-offs. Cegeka is a leading ICT company providing high-quality solutions to its customers. We continuously strive to find the ideal match between customer objectives, technology and people. Competencies and character are essential to us, alongside experience and ambition. Would you like to help shape cyber recovery solutions for organizations delivering critical and regulated services? Then we have what you are looking for! #LI-AP1

• Manage and refine the cyber recovery reference architecture, incorporating relevant software and hardware vendors.
• Translate business continuity requirements, BIA results and RTO/RPO objectives into robust recovery architectures supported by well-founded design decisions.
• Develop architecture patterns for backup and recovery solutions, cyber vaults and isolated recovery environments, with a focus on immutable data protection and clean and trusted recovery.
• Map dependencies between applications and translate them into identity, network, data, and infrastructure requirements. This helps customers determine their Minimum Viable Company, recovery sequences and corresponding recovery strategies.
• Develop architectures for identity recovery and identity isolation.
• Design network and access architectures for cyber recovery environments based on segmentation, Zero Trust and controlled access.
• Work with Security, SOC and Incident Response teams to develop clean and trusted recovery patterns, including malware scanning and integrity validation.
• Determine how cyber recovery and data protection platforms are used and integrated within the reference architecture.
• Integrate automation, orchestration, testing and recovery runbooks into the solution architecture and promote Infrastructure as Code.
• Integrate the use of AI, with humans remaining the decision-making authority, to enable easily repeatable end-to-end recovery tests.
• Define standards for recovery testing, validation of RTO and RPO objectives and audit-ready evidence.
• Position cyber recovery within Business Continuity Management, Disaster Recovery, Crisis Management, Incident Response and Operational Resilience.
• Translate DORA, NIS2 and relevant regulations into concrete architecture principles, controls and testing requirements.
• Design recovery patterns for private cloud, sovereign cloud and hybrid cloud environments, taking data residency, data sovereignty and exit strategies into account.
• Ensure solutions are secure, compliant, scalable, operationally manageable and economically viable within Cegeka standards.
• Advise Product Management and the Head of Solution on technical feasibility, lifecycle risks, technical debt and investment priorities.
• Support the development of productized managed services and help translate technical choices into business value, pricing drivers and commercial propositions.
• Work closely with Engineering, Design Authority, Delivery, Security and Compliance to ensure buildability, operability and supportability.
• Support strategic customer opportunities, facilitate architecture workshops and translate complex recovery challenges into clear recommendations for technical and executive stakeholders.
• Actively contribute to the Competence Center and connect Portfolio, Product Management, Presales, Engineering, Delivery, Security, Compliance and customer architecture around shared solution outcomes.

• We measure success by outcomes rather than activity. Specifically:
• A clear, up-to-date and well-managed cyber recovery reference architecture based on strategic product choices, with appropriate consideration for integrations, dependencies and functional boundaries.
• Reference architectures that comprehensively support cyber vaults, isolated recovery environments, identity isolation, network segmentation and clean and trusted recovery.
• Increased reuse of standard architecture patterns across opportunities, countries and customer environments, reducing unnecessary customization and fragmentation.
• Consistent application of architecture standards across different technology platforms, cloud models, countries and customer environments.
• Architecture decisions that demonstrably address security, compliance, resilience, operability, scalability, data sovereignty and cost-to-deliver.
• Presales and Delivery teams that can consistently apply the standard solution using practical reference designs, patterns, guardrails and decision guidance.
• Reproducible recovery runbooks and automation patterns that make recovery processes controllable, testable and auditable.
• Recovery tests that demonstrably meet agreed RTO and RPO objectives and are supported by reproducible evidence for customers, auditors and regulators.
• Improved cost efficiency of complex cyber recovery solutions through targeted use of AI without compromising the solution's risk profile.
• Timely, high-quality architecture decisions with visible follow-up of deviations, risks, technical debt and lifecycle dependencies.
• Solutions that demonstrably address relevant regulations such as DORA and NIS2, as well as operational resilience, data residency and data sovereignty.
• A cyber recovery solution portfolio that is technically robust, operationally manageable and commercially scalable.
• Measurable solution improvements based on market insights, strategic opportunities, delivery feedback, incidents, tabletop exercises and recovery tests.
• Requirements:
• Extensive senior-level experience in solution architecture, enterprise infrastructure, security, resilience, disaster recovery or backup and recovery, with demonstrable specialization in cyber recovery.
• Demonstrable experience designing end-to-end cyber recovery solutions for large and complex application landscapes, preferably within regulated or critical sectors such as financial services, insurance, government, utilities, energy, healthcare or manufacturing.
• In-depth expertise in cyber vaults, isolated recovery environments, physical and logical air gaps, immutable storage, WORM technologies, retention locks and clean-room recovery.
• Demonstrable experience with dependency mapping and recovery sequencing across complex application, data and infrastructure landscapes.
• Ability to translate dependencies between identity, DNS, networks, data, infrastructure and application layers into an executable recovery sequence and a Minimum Viable Company recovery model.
• Experience with clean and trusted recovery, including malware scanning, backup validation, integrity analytics, last-known-good selection and the use of gold images.
• Understanding of the interaction between recovery teams, SOC teams, Security and Incident Response, with the ability to define clear architectural boundaries between recovery, validation, forensics and incident handling.
• Experience with identity recovery and identity isolation.
• Ability to design identity services that remain usable during a complete domain compromise.
• Strong knowledge of network segmentation, Zero Trust principles, firewall architectures, one-way replication, jump hosts and secure access models for cyber vaults and isolated recovery environments.
• In-depth hands-on or architecture experience with at least two leading cyber recovery or data protection platforms, such as Commvault, Cohesity, Veeam, Dell PowerProtect, Rubrik, HPE Zerto and native public cloud solutions.
• Ability to evaluate data protection platforms from a vendor-neutral perspective, including immutability, isolation, orchestration, recovery validation, platform integration, scalability, operability and vendor lock-in.
• Broad knowledge of enterprise infrastructure, storage, virtualization, networking, databases, identity, security, containers and public, private and hybrid cloud environments to lead multidisciplinary architecture decisions.
• Experience with recovery orchestration, automation and Infrastructure as Code to assess the feasibility of reproducible and controllable recovery processes.
• Experience designing, facilitating and evaluating tabletop exercises, partial recovery tests and complete end-to-end recovery tests.
• Ability to assess test results based on measured RTO and RPO outcomes and understand the evidence required by customers, auditors and regulators.
• Strong knowledge of Business Continuity Management, including BIA, Minimum Viable Company, RTO/RPO, crisis management and recovery planning.
• Strong knowledge of relevant regulations and the ability to translate applicable requirements into concrete architecture principles, controls, testing programs and evidence.
• Understanding of the impact of data residency, data sovereignty, sovereign cloud principles and hybrid cloud recovery on cyber recovery architectures.
• Understanding of recovery to private and sovereign cloud environments, vault-copy placement and exit strategies for hyperscalers and other cloud platforms.
• Ability to design modular solutions and clearly document them through reference architectures, variants, building blocks, integration patterns, functional boundaries and decision guidelines.
• Ability to make evidence-based trade-offs, document decisions and risks, safeguard architectural compliance and recognize when escalation to specialized expertise or formal governance is required.
• Ability to connect Product Management, Presales, Engineering, Delivery, Security, Compliance and customer teams without taking over their respective responsibilities.
• Strong consulting and advisory skills, with experience in technical discovery, workshops, solution shaping, strategic opportunities, RFIs and RFPs.
• Ability to translate architecture decisions into productized managed services, commercial propositions, pricing drivers and investment decisions.
• Ability to communicate convincingly with CIOs, CISOs, resilience leaders, executive management, governing bodies, commercial stakeholders and technical experts, making complex cyber recovery challenges understandable without losing important nuance.
• Broad, vendor-neutral market knowledge and the ability to objectively compare technologies and vendors.
• Experience with OT/ICS, mainframe or legacy recovery, recovery factories, Cyber Recovery-as-a-Service or collaboration with auditors and regulators is considered an additional asset.
• Fluent in English. Knowledge of French is an advantage.
• A Master's degree or equivalent through relevant professional experience.