Senior Tier 3 CrowdStrike Architect || Des Moines, IA || Remote || Contract
We are looking for a Senior Tier 3 CrowdStrike Architect to serve as the technical expert for an enterprise CrowdStrike Falcon EDR/XDR environment.
Key Responsibilities:
-
Design, administer, and troubleshoot CrowdStrike Falcon across 10,000+ endpoints.
-
Handle complex Tier 3 security incidents, malware, zero-day threats, and endpoint investigations.
-
Perform advanced threat hunting and use CrowdStrike RTR for investigation and remediation.
-
Create and tune IOCs/IOAs and security policies.
-
Integrate CrowdStrike with SIEM/SOAR, threat intelligence, and security tools.
-
Develop automation using CrowdStrike APIs, Fusion, PowerShell, Python, or Bash.
-
Support Windows, Linux, and macOS environments.
-
Mentor SOC teams and work with CrowdStrike technical teams on complex issues.
Required:
-
4+ years of hands-on CrowdStrike Falcon experience.
-
Enterprise-scale EDR/XDR experience, preferably 10,000+ endpoints.
-
Strong RTR, threat hunting, IOA/IOC, and Tier 3 incident response experience.
-
Strong Windows, Linux, and macOS knowledge.
-
PowerShell, Python, or Bash scripting experience.
-
Experience with SIEM/SOAR and security integrations.
-
At least one active certification such as CCFA, CCFR, CCFH, CISSP, GCFA, GCIH, GSEC, or CISA.
Preferred: Government/large enterprise experience and familiarity with NIST, CJIS, HIPAA, or IRS security requirements.
