CrowdStrike Engineer

Crowd Strike Engineer

Employment Type:

Full-Time, Mid-Level

Department:
Information Technology

CGS is seeking a skilled Crowd Strike Engineer to provide subject matter expertise in the areas of Crowd Strike security engineering & architecture, policy design, Tier 3 troubleshooting support, and enterprise‑wide deployment and application operations & maintenance.

CGS brings motivated, highly skilled, and creative people together to solve the government’s most dynamic problems with cutting‑edge technology. To carry out our mission, we are seeking candidates who are excited to contribute to government innovation, appreciate collaboration, and can anticipate the needs of others. Here at CGS, we offer an environment in which our employees feel supported, and we encourage professional growth through various learning opportunities.

• Architecting, configuring, operating, and maintaining EOUSA’s EDR/NGAV platforms in areas such as protection suite, which covers approximately 3,000 Windows/Linux Servers and Cloud Workloads, and approximately 18,000 Internal Workstations, including up to 3,000 Virtual Desktop (VDI) workstations.
• Maintenance and configuration tasks for the EDR/NGAV platform may include but shall not be limited to:
  • Assisting with troubleshooting automated deployment installation issues;
  • Administering and maintaining the cloud platform, including user roles, policies, dynamic groupings, and other configuration items;
  • Creating, updating, enabling and disabling policies as required, including: EDR sensor update policies, content update policies, next generation antivirus (NGAV) prevention policies, Identity Protection policies, USB device policies, endpoint response policies, firewall policies, Falcon icon policies, and host retention policies;
  • Configuring and deploying any additional EDR/NGAV feature modules purchased by EOUSA;
  • Creating dashboards and reports, as directed;
  • Troubleshooting data integrity issues in the platform.
• Architecting/designing host group structures that enable the most efficient application of the above policies.
• The Contractor shall adhere to federal government and industry best practices when making configuration and architecture recommendations.
• Firewall protection enabled & enforced on all endpoints/workstations and servers, to secure them against unauthorized ingress and egress traffic.
• Endpoint antivirus and anti‑malware protection enabled & enforced for desktops, laptops, tablets, and VDIs, including Windows and macOS operating systems.
• Server antivirus and anti‑malware protection enabled & enforced for physical, virtual, and cloud‑hosted servers, including Windows and Linux operating systems.
• Detect and block attacks, intrusions, and exploits in the USA environment, including, but not limited to: viruses, trojans, key loggers, adware/spyware, password crackers, and potentially unwanted programs (PUPs).
• Support the EOUSA Security Operations Center (SOC) in safely investigating & evaluating suspected malware that is identified by the Crowd Strike application. Assist in Incident Response handling and EDR actions as required by providing Crowd Strike telemetry data and analysis.
• Provide advice to the EOUSA SOC on emerging threats identified by the Crowd Strike platform.
• Support ongoing integration between EDR/NGAV platforms and EOUSA SOC’s SIEM platform.
• Coordinate software updates with EEUT staff and other impacted stakeholders as required. Ensure tight integration with existing enterprise operating system baselines.
• Conduct testing and analysis as required, in support of ongoing integration requirements with enterprise IT operations.
• Provide Tier 3 support to OCIO IT staffs and to local IT staffs at U.S. Attorneys District Office locations.
• Maintain a library of current application configurations, in support of IT operations and SPA&A (Security, Privacy Assessment & Authorization) requirements.
• Provide EDR program support to the CSS-ESS/USA Protect Program Manager, Project Manager, Chief Information Security Officer, and Chief Information Officer as required.
• Provide reports and data feeds in support of USA Protect endpoint security dashboard views,…