CroudStrike Architect

Thispositionactsasthehighestleveloftechnicalescalation(Tier3) forendpointincidents,advancedthreathunting,platformtroubleshooting,andcomplexintegrations(suchasNext-GenSIEM,threatintelligence,andautomatedorchestration).

The Senior Tier3

Crowd Strike Architectservesastheprimarytechnicalauthorityforthe Stateof Iowa ’sEnterprise Endpoint Detectionand Response (EDR/XDR) platform.

Operatingwithinthe Information Security Services (ISS)
Bureau,thisroleisresponsiblefortheoverallarchitecture,administration,multi-tenantfederation,fine-tuning,andescalationengineeringofthe

Crowd Strike Falconecosystemacrossstateagencies .

Thispositionactsasthehighestleveloftechnicalescalation(Tier3) forendpointincidents,advancedthreathunting,platformtroubleshooting,andcomplexintegrations(suchasNext-GenSIEM,threatintelligence,andautomatedorchestration).

Actasthefinaltechnicalescalationpointforcomplexendpointthreats,zero-dayvulnerabilities,andpersistentmalwareidentifiedby

Tier1/2

SOCanalysts.

PartnerwithSOCAnalystsand Incident Responseteamstorefineplaybooks ,minimize

Mean Timeto Detect (MTTD) andMean Timeto Respond (MTTR),anddriveriskreduction.

Introducenewintegrationideastobetterlevergageexistingsecuritytools.

Leverage Crowd Strike Fusion SOARworkflowstoautomateroutinecontainment,notifications,andresponseactions.

Alignendpointsecuritystrategieswith Identity Threat Detectionand Response (ITDR) andCloud Security Posture Management (CSPM) modulesasplatformneedsevolve.

Developdashboardsusingthe Crowd Strike APItocollectdailyvulnerabilitydata,andotherkeymetrics,providingclearandactionablevisibilityintotheenterpriseenvironment.

Developstandardizedoperatingprocedures(SOPs),deploymentguides,andplatformhardeningspecificationsforstateagencyITpartners.

Serveastheprimarytechnicalpointofcontactwith Crowd Strikeengineeringandtechnicalaccountmanagers (TAMs) todrivefeaturerequestsandresolvecriticalbugs.

Platform Mastery:4+yearsofhands-onexperienceengineering,deploying,and maintaining

Crowd Strike Falconatenterprisescale (10,000+endpoints).

Tier3

IRCapabilities:

Demonstratedproficiencyusing Crowd Strike Real -Time Response(RTR),writingcustomIOAs/IOCs,andperformingendpointthreathunting.

OS&Scripting:

Strongknowledgeof Windows,Linux,andmacOSinternals,alongwithscriptingcapabilities(Power Shell,Python,Bash) forautomatedremediationandAPIintegration.

Required Certifications(Mustholdatleastoneactivecertification)

Crowd Strike Certified Falcon Administrator (CCFA)

Crowd Strike Certified Falcon Hunter (CCFH)

Professional&Soft Skills

Integrity&Ethics:

Unwaveringcommitmenttoconfidentiality,integrity,andcompliancestandardsnecessaryforstategovernmentoperations.

Communication&Translation:

Provenabilitytoexplaintechnicalrisktonon-technicalstakeholdersandstateagencyleadersclearly.

Complex Problem Solving :

Highanalyticalcapabilitytonavigatecomplexmulti-tenantenvironments,agency-specificconstraints,andconflictingoperationalpriorities.

Collaboration&Inclusion:

Stronginterpersonalskillswithacommitmenttofosteringadiverse,supportive,andteam-orientedworkingenvironment.

Priorexperienceinstate/local government(SLTT),higher education,orlarge-scalemulti-tenantenterpriseenvironments.

Experience integrating Crowd Strike Falcon APIswithexternalautomationplatformsorSIEMs(e.g.,Splunk,Microsoft Sentinel,Palo Alto Cortex ).

Familiaritywithfederal/statecomplianceframeworks(NISTSP
800-53,CJIS,HIPAA,IRSPub
1075).

Industry

Certifications:

CISSP,GCFA,GCIH,GSEC,CISA,orequivalentadvancedsecuritycredential.

Required4

Years

Required Certifications(mustholdatleastoneactiveCrowdStrikespecificcertification):

Required4

Years

Platform Mastery:4+yearsofhands-onexperienceengineering,deploying,and maintaining

Crowd Strike Falconatenterprisescale (10,000+endpoints).Required4

Years

Tier3

IRCapabilities:

Proficiency using Crowd Strike Real -Time Response(RTR),writingcustomIOAs/IOCs,andperformingendpointthreathuntingRequired4

Years

OS&Scripting:

Strongknowledgeof Windows,Linux,andmacOSinternals,alongwithscriptingcapabilities(Power Shell,Python,Bash) forautomated...Required

automa…