GuidePoint Security

2 days ago

Recovery & Restoration Consultant - Remote (Anywhere in the U.S.)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Support the Incident Management & Recovery team by rebuilding and securing client environments after ransomware or destructive cyber incidents. You’ll assist with on-prem and cloud recovery across identity, infrastructure, networking, backups, and Microsoft 365/Azure (Entra ID), working with senior engineers and the incident response team. Responsibilities include containment, Active Directory and Entra identity restoration, Exchange/SharePoint/Teams recovery, validation, hardening, documentation, and chain-of-custody awareness.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Support IT recovery projects involving on-prem infrastructure, Entra ID (Azure AD), and Microsoft 365 under senior engineers’ guidance.
•Assist in developing restoration and remediation plans tailored to client environment impact.
•Implement network containment and isolation measures and rebuild core identity components (Active Directory, DNS/DHCP, Group Policy) to a clean baseline.
•Recover and validate virtualized workloads and critical servers, including rebuilding Exchange Online, SharePoint, OneDrive, and Teams configurations.
•Validate backups (Veeam, Rubrik, Datto, etc.), apply Microsoft hardening and compliance controls (MFA, Defender for Office 365, Purview), and maintain thorough documentation with chain-of-custody awareness.

Travel: High travel

Pay and Benefits

Perks:Health InsuranceDentalPaid LeaveRetirementRemote WorkMobile PhoneHome Internet

Key Requirements

•Solid understanding of Active Directory fundamentals, including AD objects and Domain Controller roles, plus Group Policy basics and ransomware recovery containment priorities.
•Familiarity with Entra ID (Azure AD), Entra Connect, MFA, and Conditional Access concepts for hybrid identity environments.
•PowerShell fundamentals and ability/willingness to write or modify recovery scripts for remediation and restoration workflows.
•Understanding of virtualization and backups, including the difference between VM snapshots and proper isolated/offsite backups, and restoring virtualized workloads.
•Demonstrated troubleshooting and problem-solving skills, with thorough documentation and chain-of-custody awareness during incident response.

Experience:Incident responseDisaster recoveryRansomware recoveryInfrastructure engineeringSystems administration

Skills:TroubleshootingProblem-solvingDocumentationChain of custody awarenessMentorship

Certifications:AZ-900AZ-104MS-900SC-900

Tech Stack:Active DirectoryVMwareVMware ESXiHyper-VNetworkingDNSDHCPGroup PolicyEntra IDAzure ADEntra ConnectMicrosoft 365Exchange OnlineSharePointOneDriveTeamsConditional AccessMFAPurviewDefender for Office 365

Company Brief

GuidePoint Security

Provides cybersecurity consulting, managed security services, incident response, cloud and network security, and compliance solutions to enterprises and government organizations, helping clients identify, mitigate, and respond to cyber threats across complex environments.

Industry: Cybersecurity

Company Size: Large (251 to 1,000 employees)

Growth: Established Company

Headquarters: Herndon, United States

Founded: 2010

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

GuidePoint Security

2 days ago

Recovery & Restoration Consultant - Remote (Anywhere in the U.S.)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 3 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Support IT recovery projects involving on-prem infrastructure, Entra ID (Azure AD), and Microsoft 365 under senior engineers’ guidance.
•Assist in developing restoration and remediation plans tailored to client environment impact.
•Implement network containment and isolation measures and rebuild core identity components (Active Directory, DNS/DHCP, Group Policy) to a clean baseline.
•Recover and validate virtualized workloads and critical servers, including rebuilding Exchange Online, SharePoint, OneDrive, and Teams configurations.
•Validate backups (Veeam, Rubrik, Datto, etc.), apply Microsoft hardening and compliance controls (MFA, Defender for Office 365, Purview), and maintain thorough documentation with chain-of-custody awareness.

Travel: High travel

Pay and Benefits

Perks:Health InsuranceDentalPaid LeaveRetirementRemote WorkMobile PhoneHome Internet

Key Requirements

•Solid understanding of Active Directory fundamentals, including AD objects and Domain Controller roles, plus Group Policy basics and ransomware recovery containment priorities.
•Familiarity with Entra ID (Azure AD), Entra Connect, MFA, and Conditional Access concepts for hybrid identity environments.
•PowerShell fundamentals and ability/willingness to write or modify recovery scripts for remediation and restoration workflows.
•Understanding of virtualization and backups, including the difference between VM snapshots and proper isolated/offsite backups, and restoring virtualized workloads.
•Demonstrated troubleshooting and problem-solving skills, with thorough documentation and chain-of-custody awareness during incident response.

Experience:Incident responseDisaster recoveryRansomware recoveryInfrastructure engineeringSystems administration

Skills:TroubleshootingProblem-solvingDocumentationChain of custody awarenessMentorship

Certifications:AZ-900AZ-104MS-900SC-900

Company Brief

GuidePoint Security

Industry: Cybersecurity

Company Size: Large (251 to 1,000 employees)

Growth: Established Company

Headquarters: Herndon, United States

Founded: 2010

Website LinkedIn