Senior CrowdStrike Falcon Architect – Enterprise EDR Lead

Mbi Llc; Des Moines, Northern (IA, KY); Hybrid; USD 120,000 - 160,000; Full time

Job summary

The Senior Tier 3 CrowdStrike Architect will serve as the primary technical authority for the State of Iowa’s Enterprise EDR/XDR platform. Operating within the ISS Bureau, you will oversee architecture, multi-tenant federation, tuning, and escalation engineering of the CrowdStrike Falcon ecosystem across state agencies.

You will act as the highest level of escalation for endpoint incidents, threat hunting, platform troubleshooting, and complex integrations, while mentoring Tier 1/2 SOC staff and

Qualifications

• Platform Mastery with hands-on CrowdStrike Falcon at enterprise scale.
• Experience with Real-Time Response for endpoint threat hunting and containment.
• Scripting skills for automated remediation and API integration.
• Understanding of MITRE ATT&CK and patch management practices.
• Active certifications such as CISSP, GCFA, GCIH, GSEC, CISA or equivalent.

Responsibilities

• Serve as primary technical authority for the CrowdStrike Falcon platform across state agencies.
• Architect, implement, and maintain multi-tenant CrowdStrike Falcon architecture and governance.
• Lead complex endpoint investigations, containment, and live forensics with RTR.
• Integrate CrowdStrike with SIEM/SOAR and threat intel feeds; mentor SOC staff.
• Develop dashboards and SOPs; collaborate with IT leadership and engineers.

Skills

Platform Mastery

Tier 3 IR Capabilities

OS & Scripting

Security Ecosystems

Integrity & Ethics

Communication & Translation

Complex Problem Solving

Collaboration & Inclusion

Education

Industry Certifications: CISSP, GCFA, GCIH, GSEC, CISA, or equivalent advanced security credential

CrowdStrike Specific Certification (Highly Preferred)

Tools

CrowdStrike Falcon

RTR (Real-Time Response)

Job description

The Senior Tier 3 CrowdStrike Architect will serve as the primary technical authority for the State of Iowa’s Enterprise EDR/XDR platform. Operating within the ISS Bureau, you will oversee architecture, multi-tenant federation, tuning, and escalation engineering of the CrowdStrike Falcon ecosystem across state agencies.

You will act as the highest level of escalation for endpoint incidents, threat hunting, platform troubleshooting, and complex integrations, while mentoring Tier 1/2 SOC staff and