CrowdStrike Architect - Remote

Job Title: CrowdStrike Architect - Remote

Duration (Contract): 9-10 Months

Client Location: Des Moines, IA 50309

Location Preference: Remote

Job Description:
As a CrowdStrike Architect, you will serve as the lead technical authority for the enterprise Endpoint Detection and Response (EDR/XDR) platform, responsible for architecture, administration, threat detection, platform optimization, and advanced security engineering. You will drive endpoint security strategy, support complex incident response efforts, and lead integrations with broader cybersecurity ecosystems.

Key Responsibilities:

• Architect, implement, and manage enterprise-scale CrowdStrike Falcon environments, including multi-tenant administration and policy management.
• Oversee endpoint sensor deployments, detection tuning, custom IOA/IOC creation, and platform health management.
• Serve as the highest level technical escalation point for advanced endpoint security incidents and threat investigations.
• Perform threat hunting, containment, remediation, and live response activities using CrowdStrike RTR and related tools.
• Design and support integrations between CrowdStrike, SIEM, SOAR, threat intelligence, and security monitoring platforms.
• Develop automation workflows using CrowdStrike Fusion SOAR and API-based integrations.
• Create security dashboards, reporting solutions, and vulnerability visibility metrics for stakeholders.
• Develop security standards, operating procedures, deployment guides, and platform hardening documentation.
• Provide mentoring and technical guidance to security operations and incident response teams.
• Collaborate with security vendors, engineering teams, and leadership to improve enterprise security capabilities and operational effectiveness.

Required Skills, Experiences, Education, and Competencies:

• 4+ years of hands-on experience implementing and administering CrowdStrike Falcon in large enterprise environments.
• Strong expertise with CrowdStrike RTR, custom IOAs/IOCs, endpoint threat hunting, and incident response activities.
• Experience managing multi-tenant CrowdStrike environments, RBAC models, policy groups, and endpoint security architectures.
• Strong knowledge of Windows, Linux, and macOS operating systems and security concepts.
• Proficiency in PowerShell, Python, Bash, or similar scripting languages for automation and integrations.
• Experience integrating CrowdStrike with SIEM, SOAR, threat intelligence, and security monitoring platforms.
• Strong understanding of network security, IAM, vulnerability management, MITRE ATT&CK, and cybersecurity best practices.
• Active CrowdStrike certification (CCFA, CCFR, CCFH) and/or advanced cybersecurity certifications such as CISSP, GCIH, GCFA, GSEC, or CISA.
• Excellent analytical, troubleshooting, communication, and stakeholder management skills.
• Experience supporting large-scale enterprise, government, regulated industry, or highly secure environments is highly preferred.

The hourly range for roles of this nature are $70.00 to $110.00/hr. Rates are heavily dependent on skills, experience, location, and industry.

cyberThink is an Equal Opportunity Employer.