• Lead IT recovery projects involving on-premises endpoint and network infrastructure, Entra ID, and Microsoft 365. • Develop and manage technical remediation and restoration plans tailored to the impact of a client’s environment. • Knowledge of common firewall platforms and ability to implement network containment in preparation for recovery efforts. • Rebuild Active Directory domains, DNS/DHCP, and GPO structures to a clean baseline. • Restore and validate virtualized workloads (VMware, Hyper-V) and critical file/application servers. • Recover and secure Entra ID identities, Conditional Access, and synchronization with on-prem AD. • Rebuild Exchange Online, SharePoint, OneDrive, and Teams configurations. • Validate and restore data from backups (Veeam, Rubrik, Datto, etc.) ensuring integrity and cleanliness. • Knowledge of common remote management tools used to assist impacted clients remotely. • Knowledge of industry standard Microsoft hardening guidelines. • Ability to implement common compliance controls, such as MFA, Defender for Office 365, Purview, etc. • Develop and maintain automation scripts (PowerShell/Python) for recurring recovery workflows. • Document rebuilt configurations and assist client recommendations for hardening and post-incident validation. • Participate in after-hours response rotations. • Travel to client sites as required to perform critical recovery activities and on-site validation. Up to 50% travel.