Title: CrowdStrike Administrator (Journeyman)
Location: Remote
About iWorks: iWorks Corporation, founded in 2005, is a leading provider of information technology and professional services to the federal government. We are a recognized leader in personnel security and vetting solutions, Agile, DevOps, DevSecOps, data analytics, and cloud solutions. Our continuous process improvement approach, combined with our business and technology expertise results in innovative solutions.
We offer exceptional comprehensive benefits (Medical, Dental, Vision, Life and Disability); 401(k); Health and Wellness Benefits; and Paid Sick Time, Vacation Time, and Holiday Time. You're eligible for bonuses throughout the year as part of our incentive program for innovation and business development. All employees are also considered for an annual raise, commensurate with performance and company commitment.
About this position: We are seeking a CrowdStrike Administrator to join a small, mission-focused team supporting a Federal clientn. This role will play a key part in designing, deploying, and maturing a CrowdStrike implementation across Oracle Cloud Infrastructure (OCI), AWS, and global endpoint environments.
You will contribute to standing up an initial pilot and scaling it into a full enterprise deployment. This is a hands-on role ideal for a technical practitioner who thrives in structured environments and can balance engineering, operations, and security priorities.
Salary Range: $125K–$150K – commensurate with the candidate's skills, experience, location, and qualifications.
On a day-to-day basis, you will:
- Support the design, deployment, and optimization of the CrowdStrike platform across cloud and endpoint environments
- Perform administration of CrowdStrike policies, host groups, prevention settings, exclusions, and user roles
- Deploy and manage full CrowdStrike module capabilities (Falcon suite)
- Monitor sensor health, asset coverage, and platform performance across global environments
- Tune detection and prevention policies to balance security effectiveness with operational impact
- Support rollout of pilot deployments across OCI, AWS, and enterprise endpoints
- Integrate CrowdStrike with enterprise tools (SIEM, SOAR, ITSM, vulnerability management, asset inventory)
- Automate deployment, monitoring, and reporting workflows using scripting/tools (PowerShell, Python, etc.)
- Investigate alerts, perform triage, and coordinate escalations with security and engineering teams
- Develop dashboards, metrics, and reports for platform performance and risk reduction
- Create and maintain technical documentation (SOPs, runbooks, implementation plans)
- Participate in Agile ceremonies and track work using Jira
- Ensure compliance with DoD cybersecurity standards and Zero Trust requirements
- Mentor junior team members and support knowledge transfer
Required Education/Qualifications:
- Active Secret clearance
- 6+ years of experience in cybersecurity, endpoint security, or security engineering
- 4+ years of hands-on CrowdStrike administration and deployment experience
- Experience with endpoint security policy management, alert triage, and platform monitoring
- Familiarity with enterprise endpoint environments and global workforce support
- Working knowledge of Oracle Cloud Infrastructure (OCI) and/or AWS
- Experience with security operations processes, ticketing systems, and escalation workflows
- Familiarity with DoD or federal cybersecurity frameworks and environments
- Strong analytical, troubleshooting, and problem-solving skills
- Effective communication skills with cross-functional technical teams
- Ability to operate in a structured, mission-driven environment
Preferred Qualifications:
- Experience with Trellix (formerly McAfee) endpoint security tools
- Experience supporting migrations or coexistence between endpoint security platforms
- Experience leading pilot programs or enterprise-scale security deployments
- Relevant certifications (Security+, CySA+, CASP+, CISSP, AWS Security Specialty, CrowdStrike certifications, OCI certifications, etc.)
- Scripting/automation experience (PowerShell, Python, Bash)
- Experience integrating with SIEM platforms and building operational reporting
- Familiarity with RMF, Zero Trust, and DoD cybersecurity operations environment
Please Note: We maintain an on-camera policy for all virtual company meetings to foster engagement and collaboration. Reasonable exceptions may be granted with prior approval from Human Resources and/or the applicable manager or client.
FLSA & EMPLOYMENT STATUS: FLSA EXEMPT AND FULL-TIME POSITION
iWorks Corporation is an Equal Employment Opportunity/Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, Veteran status, sexual orientation, or other protected characteristic.
iWorks is committed to maintaining a safe and productive work environment for all employees and ensuring the security and well-being of our clients. As part of our standard hiring process, we may conduct background checks and drug screenings on potential candidates to assess their suitability for employment.