Remote CrowdStrike Architect | Enterprise EDR/XDR Lead

Creative Solutions Services, LLC; Des Moines (IA); On-site; USD 120,000 - 190,000; Full time

Job summary

Creative Solutions Services, LLC seeks a Senior CrowdStrike Architect to lead the Falcon platform across state agencies. You will handle multi-tenant architecture, incident escalation, and proactive threat hunting while integrating SIEM/SOAR workflows for automated containment.

You will mentor SOC staff, collaborate with CrowdStrike engineering, and translate complex threat data into actionable guidance for IT leadership. Remote/Des Moines hybrid work options are available.

Qualifications

• 4+ years of CrowdStrike Falcon engineering at enterprise scale (10,000+ endpoints).
• Experience with Real-Time Response (RTR) and IOAs/IOCs.
• Proficient in Windows, Linux, and macOS internals; scripting (PowerShell, Python, Bash).
• Knowledge of SIEM/SOAR integrations and ITDR/CSPM alignment.

Responsibilities

• Architect and maintain the state-wide CrowdStrike Falcon platform across multi-tenant environments.
• Lead Tier 3 incident escalation and live forensics using RTR.
• Design telemetry integration between CrowdStrike and SIEM/SOAR platforms.
• Develop SOPs, deployment guides, and platform hardening specs for state agencies.
• Mentor Tier 1/2 staff and coordinate with CrowdStrike TAMs.

Skills

CrowdStrike Falcon

RTR (Real-Time Response)

Endpoint Threat Hunting

PowerShell

Python

Windows/Linux/macOS

Tools

Splunk

Microsoft Sentinel

CrowdStrike API

Job description

Creative Solutions Services, LLC seeks a Senior CrowdStrike Architect to lead the Falcon platform across state agencies. You will handle multi-tenant architecture, incident escalation, and proactive threat hunting while integrating SIEM/SOAR workflows for automated containment.

You will mentor SOC staff, collaborate with CrowdStrike engineering, and translate complex threat data into actionable guidance for IT leadership. Remote/Des Moines hybrid work options are available.