Security Architect

About the Role

This role serves as the primary technical authority for our client’s enterprise endpoint detection and response platform. You will lead the design, deployment, and ongoing optimization of a multi‑tenant CrowdStrike Falcon environment across numerous state agencies. Working within the Information Security Services Bureau, you will collaborate closely with SOC analysts, incident response teams, and infrastructure engineers to ensure robust threat protection. The position demands deep expertise in advanced threat hunting, platform troubleshooting, and complex security integrations, directly influencing the state’s overall cyber‑resilience.

Key Responsibilities

• Architect, implement, and maintain a statewide multi‑tenant CrowdStrike Falcon platform, including CID hierarchy, RBAC, and policy groups.
• Design and execute sensor deployment strategies and fine‑tune detection policies across Windows, macOS, Linux, and virtualized workloads.
• Serve as the Tier 3 escalation point for sophisticated endpoint threats, zero‑day exploits, and persistent malware, performing advanced containment and live forensics.
• Develop and refine incident response playbooks in partnership with SOC analysts to reduce MTTD and MTTR.
• Integrate CrowdStrike telemetry with central SIEM and SOAR solutions, creating automated Fusion workflows for containment and notification.
• Lead the creation of custom IOCs/IOAs, automated scripts, and Fusion playbooks to streamline routine security operations.
• Monitor platform health, manage agent updates, host groups, and troubleshoot issues across diverse agency environments.
• Provide technical mentorship and knowledge transfer to Tier 1/2 analysts and other security staff.
• Stay current with emerging threats, CrowdStrike product enhancements, and industry best practices to continuously improve the security posture.

Required Skills & Experience

• 8+ years of experience in cybersecurity, with at least 4 years focused on endpoint detection and response platforms.
• Deep expertise with CrowdStrike Falcon, including architecture design, multi‑tenant administration, and real‑time response (RTR).
• Proven track record in advanced threat hunting, incident response, and forensic analysis on Windows, macOS, and Linux systems.
• Strong experience integrating EDR data into SIEM/SOAR tools (e.g., Splunk, QRadar, Cortex XSOAR, CrowdStrike Fusion).
• Proficiency in scripting languages such as PowerShell, Bash, and Python for automation and custom response actions.
• Solid understanding of network security concepts, threat intelligence feeds, and automated orchestration workflows.
• Bachelor’s degree in Computer Science, Information Security, or a related field (or equivalent experience).
• Relevant certifications preferred: CISSP, CISM, CrowdStrike Falcon Administrator/Architect, or equivalent.

Tools & Technologies

• CrowdStrike Falcon platform (Falcon Prevent, InsightIDR, Fusion, RTR).
• SIEM solutions (Splunk, IBM QRadar, ArcSight) for log aggregation and analysis.
• SOAR platforms (CrowdStrike Fusion, Cortex XSOAR) for automated response workflows.
• Scripting languages: PowerShell, Bash, Python.
• Operating systems: Windows, macOS, Linux, and virtualized environments (VMware, Hyper‑V).
• Endpoint management tools and virtualization platforms for sensor deployment.

Work Schedule & Duration

• Contract period: 09/14/2026 – 06/30/2027.
• Primary work location: Des Moines, IA (on‑site with potential limited remote flexibility).
• Full‑time effort with standard business hours; occasional after‑hours support for critical incidents.

Interview Process

The interview process typically includes an initial screening followed by a technical interview conducted via web cam or in‑person at the client site. Candidates may also be asked to demonstrate expertise through scenario‑based questions or a brief technical exercise.

Position Details

• Employment Type: Contract
• Duration: Approximately 12 months (with potential for extension)
• Work Authorization: Must be authorized to work in the United States