Iowa Licensed CrowdStrike Architect

Job Summary

Serving as the primary technical authority, the remote Iowa Licensed CrowdStrike Architect will manage the architecture, administration, and incident response for the CrowdStrike Falcon platform across state agencies, acting as the highest level of technical escalation for complex endpoint threats.

Key responsibilities

• Architect and maintain the state-wide CrowdStrike Falcon platform, overseeing multi-tenant administration and sensor deployment strategies
• Act as the final escalation point for complex endpoint threats, executing advanced containment and remediation during critical incidents
• Design and support telemetry integration with SIEM/SOAR platforms, automating routine containment and response actions

Required qualifications

• 4+ years of hands-on experience with CrowdStrike Falcon at enterprise scale (10,000+ endpoints)
• Demonstrated proficiency in using CrowdStrike Real-Time Response (RTR) and performing endpoint threat hunting
• Strong knowledge of Windows, Linux, and macOS internals, along with scripting capabilities in PowerShell, Python, or Bash
• At least one active certification such as CrowdStrike Certified Falcon Administrator (CCFA) or equivalent advanced security credential
• Solid grasp of network security, Identity & Access Management, and vulnerability assessments