Senior Restoration Engineer

Who You Are

You're the technical lifeline when everything goes dark. When ransomware brings a company to its knees at 2 AM, you know exactly which systems to prioritize, which backups are viable, and how to orchestrate recovery efforts to get critical business operations back online. Complex IT systems don’t intimidate you, they're puzzles you've spent 10+ years learning to solve under pressure.

You don't just know Active Directory; you've rebuilt it from scratch in production more times than you'd like to admit. You can architect hybrid cloud environments in your sleep, and you've navigated VMware, Azure, AWS, and on-premises infrastructure so many times that you know where the bottlenecks will be before they appear. You speak fluent backup and disaster recovery, no matter the backup solution.

You're equally comfortable in the trenches with sysadmins troubleshooting server or container infrastructures as you are explaining timelines to a CIO who needs to know when their business will be operational again.

You've built your career around keeping businesses running or bringing them back from the brink. You know that infrastructure restoration isn't a nine-to-five job; it's about being available when organizations need you most, working through the night if that's what it takes, and having the endurance to see a recovery through initial triage to full operational restoration. You thrive in chaos, you care obsessively about dependencies and sequencing, and you wouldn't trade this work for anything.

Why You Matter

You'll be joining MOXFIVE as Senior Restoration Engineer, serving as a critical technical first responder within our Incident Response practice. When ransomware, destructive malware, or catastrophic system failures cripple an organization's infrastructure, you'll be the expert leading the technical restoration effort from the ground up.

In this role, you'll assess the scope of infrastructure damage, determine what can be recovered versus what must be rebuilt, orchestrate complex restoration sequences across hybrid and cloud environments, and make real-time technical decisions that directly determine how quickly a business can resume operations. You'll work alongside forensics teams, security analysts, legal counsel, insurance carriers and client leadership to ensure recovery efforts don't reintroduce threats while moving as quickly as possible.

When a company's entire infrastructure is down, they don't just need someone who knows technology, they need someone who's done this before, who understands the critical path to recovery, and who can work under extreme pressure without cutting corners. Your technical expertise and restoration experience directly determine whether a company recovers in days versus weeks, and whether they emerge with a more resilient infrastructure or simply limp back to a vulnerable state.

What You'll Bring

• 10+ years of hands-on infrastructure experience building, managing, and restoring complex enterprise environments across private, hybrid, and cloud architectures (Azure, AWS, GCP, on-premises).
• Deep expertise in disaster recovery and business continuity, including backup technologies (Veeam, Commvault, Rubrik, etc.) and storage level snapshots, restoration methodologies, and recovery orchestration across interdependent systems.
• Proven incident response experience leading infrastructure restoration efforts during ransomware attacks, destructive malware events, or major system failures with demonstrated ability to work under extreme time pressure.
• Advanced knowledge of core infrastructure technologies including Active Directory, DNS, virtualization platforms (VMware, Hyper-V), storage systems, networking, and identity management systems.
• Leadership and coordination experience directing and guiding contractors, MSPs, internal IT teams, and third-party engineers through complex restoration plans, ensuring everyone understands their role, dependencies, and execution timelines while maintaining quality and security standards.
• Deep understanding of application architecture and dependencies, including how multi-tier applications work together (web servers, application servers, API servers, database servers, load balancers) and the ability to identify critical dependencies during restoration planning.
• Strong problem-solving and triage capabilities, able to rapidly assess damaged environments, identify critical dependencies, determine restoration priorities, and develop executable recovery plans in real-time.
• Excellent communication skills, capable of translating complex technical recovery details into clear status updates for executives, stakeholders, and cross-functional teams during high-stress situations.
• Collaborative mindset, comfortable working alongside forensics teams, security analysts, technical staff, and leadership while maintaining focus on rapid, secure restoration.

Disclaimer

All official MOXFIVE communications will only come from an @moxfive.