We’re looking for a Staff Cyber Resilience Engineer to lead our defense against the attacks that matter most: ransomware, destructive wipes, and data loss at scale. This is a hands-on technical leadership role.  You will own the design and engineering of our Isolated Recovery Environment, set the standard for Infrastructure as Code across the organization, and ensure that if our AWS environment is ever compromised, we can restore operations with certainty and speed.

You will work with a high-caliber engineering team, have direct influence on our security architecture, and lead recovery exercises that test the organization end-to-end.

What You’ll Do

Own Our Recovery Architecture

•       Design and build our Isolated Recovery Environment — a hardened AWS account with immutable vaults that break the attacker’s kill chain before it reaches our data.
•       Threat model our environment with a deep understanding of cloud-native attack patterns: IAM privilege escalation, backup deletion, ransomware persistence, and lateral movement across accounts.
•       Validate and continuously improve backup configurations to ensure recoverability, not just existence.

Standardize and Automate Infrastructure

•       Lead our transition to 100% Infrastructure as Code. Every asset (VPCs, IAM roles, security groups) must be defined in Terraform so we can redeploy the entire stack into a clean account via automated pipeline.
•       Build automated recovery workflows that can tear down a compromised environment and bootstrap a fresh, hardened one from verified code and clean data.
•       Write and maintain executable recovery playbooks that detail the exact API calls and CLI commands needed to restore the application — tested, versioned, and runnable, not static documents.

Validate, Test, and Lead Exercises

•       Develop automated scripts (Python or Go) to smoke test recovered data and validate integrity post-restoration.
•       Lead regular hands-on recovery drills that simulate total loss of a critical environment and full recovery into a secondary clean account. Own the after-action process and drive improvements.

Drive Engineering Standards

•       Act as the resilience authority for the engineering organization — shaping high-availability architecture decisions, influencing design reviews, and raising the floor on how we think about recoverability.
•       Partner with the Site Reliability Engineering team on multi-region deployments and high-availability design, ensuring cyber resilience is embedded in architecture from the start.
•       Champion IaC and immutable infrastructure practices across teams, not just within your own workstream.

What You Bring

Required

•       8+ years of experience in complex cloud environments (any of AWS/GCP/Azure), including at least 3 years in AWS.  EKS/Kubernetes experience is a strong plus.
•       Strong Terraform skills. You should be able to modularize complex environments so they are environment-agnostic.
•       Hands-on familiarity with the Secure Vault pattern: protecting data in a separate, highly restricted AWS account with tight network controls.
•       Advanced shell scripting and proficiency in either Python or Go to automate restoration tasks that native AWS tooling doesn’t cover.
•       Experience with CI/CD tooling (Scalr, GitHub Actions, or equivalent) to enable broad adoption of recovery pipelines across the organization.
•       Proven ability to engineer and automate end-to-end restoration workflows.

Preferred

•       Hands-on experience leading technical recovery efforts from an actual cyber attack or destructive incident.
•       Experience with chaos engineering tooling to stress-test recovery assumptions.
•       Familiarity with NIST SP 800-34 (Contingency Planning) or similar frameworks.
•       AWS Security Specialty certification or equivalent demonstrated expertise.

The estimated base salary range for new hires into this role is $205,000- $233,000 annually + annual bonus depending on factors such as job-related skills, relevant experience, and location. We also offer a competitive benefits package, including 401(k) match, medical, dental and vision insurance; life and disability insurance; generous paid time off including vacation, sick leave, floating and fixed holidays, maternity and bonding leave; EAP, other wellbeing resources; and much more.

#LI-Hybrid

We’re looking for a Staff Cyber Resilience Engineer to lead our defense against the attacks that matter most: ransomware, destructive wipes, and data loss at scale. This is a hands-on technical leadership role.  You will own the design and engineering of our Isolated Recovery Environment, set the standard for Infrastructure as Code across the organization, and ensure that if our AWS environment is ever compromised, we can restore operations with certainty and speed.

You will work with a high-caliber engineering team, have direct influence on our security architecture, and lead recovery exercises that test the organization end-to-end.

What You’ll Do

Own Our Recovery Architecture

•       Design and build our Isolated Recovery Environment — a hardened AWS account with immutable vaults that break the attacker’s kill chain before it reaches our data.
•       Threat model our environment with a deep understanding of cloud-native attack patterns: IAM privilege escalation, backup deletion, ransomware persistence, and lateral movement across accounts.
•       Validate and continuously improve backup configurations to ensure recoverability, not just existence.

Standardize and Automate Infrastructure

•       Lead our transition to 100% Infrastructure as Code. Every asset (VPCs, IAM roles, security groups) must be defined in Terraform so we can redeploy the entire stack into a clean account via automated pipeline.
•       Build automated recovery workflows that can tear down a compromised environment and bootstrap a fresh, hardened one from verified code and clean data.
•       Write and maintain executable recovery playbooks that detail the exact API calls and CLI commands needed to restore the application — tested, versioned, and runnable, not static documents.

Validate, Test, and Lead Exercises

•       Develop automated scripts (Python or Go) to smoke test recovered data and validate integrity post-restoration.
•       Lead regular hands-on recovery drills that simulate total loss of a critical environment and full recovery into a secondary clean account. Own the after-action process and drive improvements.

Drive Engineering Standards

•       Act as the resilience authority for the engineering organization — shaping high-availability architecture decisions, influencing design reviews, and raising the floor on how we think about recoverability.
•       Partner with the Site Reliability Engineering team on multi-region deployments and high-availability design, ensuring cyber resilience is embedded in architecture from the start.
•       Champion IaC and immutable infrastructure practices across teams, not just within your own workstream.

What You Bring

Required

•       8+ years of experience in complex cloud environments (any of AWS/GCP/Azure), including at least 3 years in AWS.  EKS/Kubernetes experience is a strong plus.
•       Strong Terraform skills. You should be able to modularize complex environments so they are environment-agnostic.
•       Hands-on familiarity with the Secure Vault pattern: protecting data in a separate, highly restricted AWS account with tight network controls.
•       Advanced shell scripting and proficiency in either Python or Go to automate restoration tasks that native AWS tooling doesn’t cover.
•       Experience with CI/CD tooling (Scalr, GitHub Actions, or equivalent) to enable broad adoption of recovery pipelines across the organization.
•       Proven ability to engineer and automate end-to-end restoration workflows.

Preferred

•       Hands-on experience leading technical recovery efforts from an actual cyber attack or destructive incident.
•       Experience with chaos engineering tooling to stress-test recovery assumptions.
•       Familiarity with NIST SP 800-34 (Contingency Planning) or similar frameworks.
•       AWS Security Specialty certification or equivalent demonstrated expertise.

The estimated base salary range for new hires into this role is $205,000- $233,000 annually + annual bonus depending on factors such as job-related skills, relevant experience, and location. We also offer a competitive benefits package, including 401(k) match, medical, dental and vision insurance; life and disability insurance; generous paid time off including vacation, sick leave, floating and fixed holidays, maternity and bonding leave; EAP, other wellbeing resources; and much more.

#LI-Hybrid

We’re looking for a Staff Cyber Resilience Engineer to lead our defense against the attacks that matter most: ransomware, destructive wipes, and data loss at scale. This is a hands-on technical leadership role.  You will own the design and engineering of our Isolated Recovery Environment, set the standard for Infrastructure as Code across the organization, and ensure that if our AWS environment is ever compromised, we can restore operations with certainty and speed.

You will work with a high-caliber engineering team, have direct influence on our security architecture, and lead recovery exercises that test the organization end-to-end.

What You’ll Do

Own Our Recovery Architecture

•       Design and build our Isolated Recovery Environment — a hardened AWS account with immutable vaults that break the attacker’s kill chain before it reaches our data.
•       Threat model our environment with a deep understanding of cloud-native attack patterns: IAM privilege escalation, backup deletion, ransomware persistence, and lateral movement across accounts.
•       Validate and continuously improve backup configurations to ensure recoverability, not just existence.

Standardize and Automate Infrastructure

•       Lead our transition to 100% Infrastructure as Code. Every asset (VPCs, IAM roles, security groups) must be defined in Terraform so we can redeploy the entire stack into a clean account via automated pipeline.
•       Build automated recovery workflows that can tear down a compromised environment and bootstrap a fresh, hardened one from verified code and clean data.
•       Write and maintain executable recovery playbooks that detail the exact API calls and CLI commands needed to restore the application — tested, versioned, and runnable, not static documents.

Validate, Test, and Lead Exercises

•       Develop automated scripts (Python or Go) to smoke test recovered data and validate integrity post-restoration.
•       Lead regular hands-on recovery drills that simulate total loss of a critical environment and full recovery into a secondary clean account. Own the after-action process and drive improvements.

Drive Engineering Standards

•       Act as the resilience authority for the engineering organization — shaping high-availability architecture decisions, influencing design reviews, and raising the floor on how we think about recoverability.
•       Partner with the Site Reliability Engineering team on multi-region deployments and high-availability design, ensuring cyber resilience is embedded in architecture from the start.
•       Champion IaC and immutable infrastructure practices across teams, not just within your own workstream.

What You Bring

Required

•       8+ years of experience in complex cloud environments (any of AWS/GCP/Azure), including at least 3 years in AWS.  EKS/Kubernetes experience is a strong plus.
•       Strong Terraform skills. You should be able to modularize complex environments so they are environment-agnostic.
•       Hands-on familiarity with the Secure Vault pattern: protecting data in a separate, highly restricted AWS account with tight network controls.
•       Advanced shell scripting and proficiency in either Python or Go to automate restoration tasks that native AWS tooling doesn’t cover.
•       Experience with CI/CD tooling (Scalr, GitHub Actions, or equivalent) to enable broad adoption of recovery pipelines across the organization.
•       Proven ability to engineer and automate end-to-end restoration workflows.

Preferred

•       Hands-on experience leading technical recovery efforts from an actual cyber attack or destructive incident.
•       Experience with chaos engineering tooling to stress-test recovery assumptions.
•       Familiarity with NIST SP 800-34 (Contingency Planning) or similar frameworks.
•       AWS Security Specialty certification or equivalent demonstrated expertise.

The estimated base salary range for new hires into this role is $205,000- $233,000 annually + annual bonus depending on factors such as job-related skills, relevant experience, and location. We also offer a competitive benefits package, including 401(k) match, medical, dental and vision insurance; life and disability insurance; generous paid time off including vacation, sick leave, floating and fixed holidays, maternity and bonding leave; EAP, other wellbeing resources; and much more.

#LI-Hybrid

We’re looking for a Staff Cyber Resilience Engineer to lead our defense against the attacks that matter most: ransomware, destructive wipes, and data loss at scale. This is a hands-on technical leadership role.  You will own the design and engineering of our Isolated Recovery Environment, set the standard for Infrastructure as Code across the organization, and ensure that if our AWS environment is ever compromised, we can restore operations with certainty and speed.

You will work with a high-caliber engineering team, have direct influence on our security architecture, and lead recovery exercises that test the organization end-to-end.

What You’ll Do

Own Our Recovery Architecture

•       Design and build our Isolated Recovery Environment — a hardened AWS account with immutable vaults that break the attacker’s kill chain before it reaches our data.
•       Threat model our environment with a deep understanding of cloud-native attack patterns: IAM privilege escalation, backup deletion, ransomware persistence, and lateral movement across accounts.
•       Validate and continuously improve backup configurations to ensure recoverability, not just existence.

Standardize and Automate Infrastructure

•       Lead our transition to 100% Infrastructure as Code. Every asset (VPCs, IAM roles, security groups) must be defined in Terraform so we can redeploy the entire stack into a clean account via automated pipeline.
•       Build automated recovery workflows that can tear down a compromised environment and bootstrap a fresh, hardened one from verified code and clean data.
•       Write and maintain executable recovery playbooks that detail the exact API calls and CLI commands needed to restore the application — tested, versioned, and runnable, not static documents.

Validate, Test, and Lead Exercises

•       Develop automated scripts (Python or Go) to smoke test recovered data and validate integrity post-restoration.
•       Lead regular hands-on recovery drills that simulate total loss of a critical environment and full recovery into a secondary clean account. Own the after-action process and drive improvements.

Drive Engineering Standards

•       Act as the resilience authority for the engineering organization — shaping high-availability architecture decisions, influencing design reviews, and raising the floor on how we think about recoverability.
•       Partner with the Site Reliability Engineering team on multi-region deployments and high-availability design, ensuring cyber resilience is embedded in architecture from the start.
•       Champion IaC and immutable infrastructure practices across teams, not just within your own workstream.

What You Bring

Required

•       8+ years of experience in complex cloud environments (any of AWS/GCP/Azure), including at least 3 years in AWS.  EKS/Kubernetes experience is a strong plus.
•       Strong Terraform skills. You should be able to modularize complex environments so they are environment-agnostic.
•       Hands-on familiarity with the Secure Vault pattern: protecting data in a separate, highly restricted AWS account with tight network controls.
•       Advanced shell scripting and proficiency in either Python or Go to automate restoration tasks that native AWS tooling doesn’t cover.
•       Experience with CI/CD tooling (Scalr, GitHub Actions, or equivalent) to enable broad adoption of recovery pipelines across the organization.
•       Proven ability to engineer and automate end-to-end restoration workflows.

Preferred

•       Hands-on experience leading technical recovery efforts from an actual cyber attack or destructive incident.
•       Experience with chaos engineering tooling to stress-test recovery assumptions.
•       Familiarity with NIST SP 800-34 (Contingency Planning) or similar frameworks.
•       AWS Security Specialty certification or equivalent demonstrated expertise.

The estimated base salary range for new hires into this role is $205,000- $233,000 annually + annual bonus depending on factors such as job-related skills, relevant experience, and location. We also offer a competitive benefits package, including 401(k) match, medical, dental and vision insurance; life and disability insurance; generous paid time off including vacation, sick leave, floating and fixed holidays, maternity and bonding leave; EAP, other wellbeing resources; and much more.

#LI-Hybrid

IT Service Desk Intern

Xometry is seeking a motivated IT Service Desk Intern to support our IT Service Desk team. You will provide first-level technical support to end-users via Slack, Freshdesk, and in-person, gaining hands-on experience in a fast-paced corporate environment.

Responsibilities

• Provide first-level technical support, including account lockouts, password resets, and access requests.
• Troubleshoot hardware (laptops, desktops, peripherals) and software installation/configuration issues.
• Assist with basic network connectivity and VPN support.
• Support the IT equipment lifecycle, including setup, deployment, and configuration.
• Assist with the new hire onboarding and employee offboarding processes.
• Contribute to creating and maintaining technical documentation and knowledge base articles.
• Collaborate with the IT Service Desk and IT Engineering teams on projects.
• Escalate complex issues and maintain a high level of customer service and professionalism.

What We’re Looking For:

• Foundational understanding of Windows and macOS.
• Familiarity with collaboration tools (Zoom, Slack) and productivity applications (Microsoft Office Suite, Google Workspace).
• Basic understanding of networking concepts (TCP/IP, DNS, DHCP).
• Strong customer service and communication skills, organizational skills, and a proactive, solution-oriented mindset.
• Ability to lift and move computer equipment as needed.
• Academic Excellence: Currently enrolled in an accredited college or university, graduating in December 2026 or May 2027, with a minimum 3.5 GPA.
• Strong Work Ethic: Ability to work full-time (40 hours/week) during the internship period (June 8 - August 14, 2026).
• Excellent Communication Skills: Strong verbal and written communication skills.
• Entrepreneurial Spirit: A passion for problem-solving and a desire to drive results.
• Legal Authorization: Ability to provide proof of legal right to work in the United States.
• Location Requirement: Ability to commute to our North Bethesda, MD, Lexington, KY or Waltham, MA office to work onsite for at least 3 days a week.
• Provide Unofficial Transcript 

Valuable Experience (Plus)

• Relevant IT coursework or certifications (e.g., CompTIA A+).
• Exposure to device management (Intune) and identity/access management (Okta).
• Familiarity with scripting languages (PowerShell, Bash) or cloud-based services (AWS, Azure, Google Cloud).

The estimated base pay rate for new hires into this role is $20.00 per hour depending on factors such as job-related skills, relevant experience, and location. This is a temporary position.

#LI-Hybrid