Senior Crowd Strike Architect

Job not on LinkedIn

🔥 0 minutes ago

🌾 Iowa – Remote

🌾 Iowa – Remote

⏳ Contract/Temporary

🟠 Senior

🏛️ Architect

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

COVENTEK, INC.

WebsiteLinkedInAll Job Openings

1 - 10 employees

💼 Consulting

📦 Logistics

📣 Marketing

Consulting • Logistics • Marketing

COVENTEK, INC. is an application management and software analytics services company offering a comprehensive suite of services including software consulting, outsourcing, and staffing solutions. The company is focused on improving business and technology operations through application performance management, DevOps support services, managed IT services, application development, and data analytics. Coventek leverages their expertise in cutting-edge technologies to provide clients with cost-effective solutions and innovative problem-solving strategies. They emphasize long-lasting client relationships by delivering reliable and efficient IT and business solutions.

📋 Description

• Architect, implement, and maintain the statewide CrowdStrike Falcon architecture across multi-tenant environments. • Oversee sensor deployment, prevention/detection tuning, custom IOA/IOC rules, feature rollouts, platform health, agent updates, host groups, and troubleshooting. • Serve as the final Tier 3 escalation point for complex endpoint threats, zero-day vulnerabilities, and persistent malware. • Execute advanced containment, remediation, and live forensics using Real-Time Response and custom scripts. • Partner with SOC Analysts and Incident Response teams to refine playbooks and reduce MTTD and MTTR. • Design and support telemetry integrations among CrowdStrike Falcon, SIEM/SOAR platforms, network defenses, and threat intelligence feeds. • Leverage CrowdStrike Fusion SOAR workflows to automate containment, notifications, and response actions. • Align endpoint security strategies with ITDR and CSPM modules. • Translate technical threat data into actionable guidance for agency IT administrators and executive leadership. • Develop CrowdStrike API dashboards for daily vulnerability data and enterprise metrics. • Develop SOPs, deployment guides, and platform hardening specifications. • Serve as technical point of contact with CrowdStrike engineering and TAMs. • Mentor and train Tier 1/2 SOC staff.

🎯 Requirements

• 4+ years of hands-on experience engineering, deploying, and maintaining CrowdStrike Falcon at enterprise scale (10,000+ endpoints). • Demonstrated proficiency with CrowdStrike Real-Time Response (RTR), custom IOAs/IOCs, and endpoint threat hunting. • Strong knowledge of Windows, Linux, and macOS internals. • Scripting capabilities in PowerShell, Python, and Bash for automated remediation and API integration. • Knowledge of network security, including firewalls and IDS/IPS. • Knowledge of Identity & Access Management, including AD/Entra ID. • Knowledge of patch management, vulnerability assessments, and MITRE ATT&CK mapping. • Must hold at least one active certification: CCFA, CCFR, CCFH, CISSP, GCFA, GCIH, GSEC, CISA, or equivalent advanced security credential. • Ability to explain technical risk clearly to non-technical stakeholders and state agency leaders. • High analytical capability for complex multi-tenant environments and conflicting priorities. • Strong interpersonal skills and commitment to a diverse, supportive, team-oriented environment. • Local to Des Moines, IA. • Must be available for interviews August 24, 25, and 26. • Preferred: experience in state/local government, higher education, or large-scale multi-tenant enterprise environments. • Preferred: experience integrating CrowdStrike Falcon APIs with automation platforms or SIEMs such as Splunk, Microsoft Sentinel, or Palo Alto Cortex. • Preferred: familiarity with NIST SP 800-53, CJIS, HIPAA, or IRS Pub 1075.