> Markdown version of [/jobs/ext/2124282-telecommute-croudstrike-architect](https://www.wearedevelopers.com/jobs/ext/2124282-telecommute-croudstrike-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# TELECOMMUTE CroudStrike Architect

- **Company:** Stellar Professionals
- **Location:** United States (Remote available)
- **Experience:** Experienced
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Active Directory, Application Programming Interfaces (APIs), Apple Mac Systems, Computing Platforms, ARM Architecture, Bash Shell, Linux, Python (Programming Language), Network Security, Windows PowerShell, Role-Based Access Control, Security Information and Event Management, Systems Integration, Scripting, Cybercrime, 3-tier Architectures, Splunk
- **Published:** August 19, 2026
- **Apply:** https://www.dice.com/job-detail/28b92a6e-6ecd-4e3b-9e60-0f55d48c000b

## About the Role

* CrowdStrike Platform Mastery: 4+ years engineering and managing Falcon at scale (10,000+ endpoints).
 * Incident Response & Forensics: Real-Time Response (RTR), threat hunting, and custom rule creation (IOAs/IOCs).
 * Scripting: PowerShell, Python, or Bash for remediation and API integration.
 * Ecosystems & Frameworks: Active Directory / Entra ID, Network Security, and MITRE ATT&CK mapping.

Required Certifications:

 * Must hold at least ONE active CrowdStrike Certification: CCFA, CCFR, or CCFH.
 * Must hold an active Industry Certification: CISSP, GCFA, GCIH, GSEC, or CISA.

Preferred Experience:

 * State/Local Government (SLTT) or enterprise multi-tenant environments.
 * Compliance frameworks: NIST SP 800-53, CJIS, HIPAA, or IRS Pub 1075.

## Description

Serve as the primary technical authority and highest escalation tier (Tier 3) for an enterprise CrowdStrike Falcon (EDR/XDR) ecosystem. This role focuses on platform architecture, advanced threat hunting, incident containment, and complex security tool integrations., * Platform Architecture: Architect and manage multi-tenant CrowdStrike environments (CID hierarchy, RBAC, policy groups, host health) across Windows, Linux, and macOS.

 * Tier 3 Incident Escalation: Lead containment, forensics, and live response via Real-Time Response (RTR); create custom IOAs/IOCs.
 * Integrations & Automation: Connect Falcon telemetry with SIEM/SOAR platforms (Splunk, Sentinel, Cortex) and automate playbooks via CrowdStrike Fusion SOAR.
 * Dashboards & APIs: Build custom dashboards using CrowdStrike APIs to report vulnerability data and critical operational metrics.


## Related Videos

- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)

## Related Articles

- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [Best US AI Conferences for CTOs in 2026: Build vs. Buy, Vendor Evaluation, and Peer Intelligence](https://www.wearedevelopers.com/magazine/736-best-us-ai-conferences-for-ctos-in-2026-build-vs-buy-vendor-evaluation-and-peer-intelligence)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026)