As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.
About the Role
Join CrowdStrike's Falcon For IT product team as a Content Engineer, where you'll create and maintain a global library of IT automation scripts, or content, deployed to millions of endpoints. If you're a systems administrator who has automated away repetitive tasks, written scripts that run across thousands of servers, and understands the difference between "works on my laptop" and "works on 10,000 production endpoints" - this role is for you.
You will author native OS scripts (PowerShell, Bash, Zsh), Python automation, OSQuery queries, and visualization dashboards that solve real-world IT operations problems: health monitoring, inventory collection, compliance checking, and system remediation. Your code will run on millions of Windows, Linux, and macOS endpoints globally.
Most sysadmin roles have you managing infrastructure. This role has you creating the automation tools that thousands of other IT teams will use to manage their infrastructure. Your scripts will run on more endpoints than most sysadmins will touch in their entire career. You'll solve problems once, and that solution will be deployed globally.
About the Product
Falcon For IT revolutionizes how IT & Security teams manage their infrastructure by providing AI-powered insights into endpoints, applications, and system behavior. Our cloud-based platform processes real-time telemetry from our lightweight sensor deployed across customer environments, delivering instant answers to complex infrastructure questions and accelerating incident response times.
What You'll Do:
Author production-grade automation scripts for Windows (PowerShell), Linux (Bash), and macOS (Zsh) that execute safely at massive scale
Build IT operations content including system health checks, inventory collection, performance monitoring, compliance validation, remediation tasks, and other content that solves problems for our customers.
Create visualization dashboards using CrowdStrike's Next-Gen SIEM to display data and metrics from your scripts.
Optimize for performance and safety - your scripts must run efficiently on resource-constrained endpoints without impacting user productivity
Design cross-platform solutions where possible, or platform-specific implementations where necessary
Validate content quality through code review, testing, and security analysis before publication
Collaborate with IT operations teams to understand real-world problems and translate them into automation solutions
Maintain the content publication pipeline working with engineering teams to enhance content delivery and validation systems
Source and validate third-party content ensuring it meets CrowdStrike quality and security standards
Technical Stack:
Primary Languages: PowerShell, Bash, Zsh, Python
Query Languages: OSQuery, LogScale/Humio
Platforms: Windows, Linux (Ubuntu/RHEL/CentOS/Debian), macOS
Tools: Git, VSCode, PowerShell ISE, vim/nano, SSH, RDP
Data Visualization: LogScale/Humio dashboards
CI/CD: GitHub Actions, automated testing pipelines
Cloud: AWS (S3, Lambda, EC2) - exposure helpful but not required
What You'll Need:
Core Systems Administration Experience 8+ years in systems administration with heavy automation/scripting focus in at least one of:
Windows Administration:
Advanced-level PowerShell scripting (5.1+ compatibility required)
Deep understanding of Windows internals: registry, services, event logs, WMI/CIM, scheduled tasks
Experience with Active Directory, Group Policy, Windows Update mechanisms Performance optimization: .NET calls vs cmdlets, efficient loops, avoiding pipeline overhead
Written scripts managing thousands+ Windows servers/endpoints
Linux Administration:
Advanced-level Bash scripting with focus on portability (RHEL/CentOS, Ubuntu, Debian, Amazon Linux, SUSE)
Deep understanding of Linux fundamentals: systemd, package managers (yum/dnf/apt), process management, file permissions
Experience with configuration management, log analysis, system monitoring
Safe scripting practices: proper error handling, quoting, lock file management Written scripts managing thousands+ Linux servers/endpoints
macOS Administration:
Advanced-level Zsh/Bash scripting for macOS environments
Understanding of macOS-specific tools: launchd, defaults, diskutil, system_profiler Experience with MDM concepts, macOS security and privacy features, application management
Knowledge of macOS versions and compatibility considerations
Written scripts managing large macOS fleets
Real world experiences:
Automated yourself out of repetitive work and helped others do the same
Wrote that one script everyone in your org uses because it just works reliably Understands the fear of pushing automation to production at 3pm on Friday
Has war stories about scripts that seemed fine in testing but had unexpected behavior at scale
Thinks in terms of edge cases: "What if the disk is full? What if the service doesn't exist? What if there are special characters in the filename?"
Reads release notes for OS updates to see what might break your scripts
Cares about performance: "This runs in 2 seconds instead of 30 because I used a hash table instead of filtering an array in a loop"
Values code review: You want someone to catch your mistakes before they hit production
Additional Required Skills
Python scripting for cross-platform automation
IT operations mindset: You think about monitoring, alerting, health checks, inventory, compliance, and remediation
Scale awareness: You understand that code running on 10,000 endpoints needs different error handling, performance optimization, and testing than one-off scripts Security consciousness: No hardcoded credentials, input validation, safe file operations, principle of least privilege
Problem-solving: You can translate "our Windows updates are failing" into a diagnostic script that identifies root causes
Willingness to learn: If you're a Windows expert, you're excited to learn Linux/Mac (or vice versa) - the fundamentals transfer
Bonus Points:
Experience with OSQuery for cross-platform system querying
Multi-platform experience (Windows + Linux, or any combination)
Knowledge of LogScale/Humio/Splunk or similar log aggregation platforms Understanding of cybersecurity concepts (EDR, threat hunting, incident response)
Experience with endpoint management platforms
CI/CD pipeline experience (GitHub Actions, Jenkins, GitLab)
Database experience (MySQL, PostgreSQL, or NoSQL)
Soft Skills
Attention to detail: A missing quote or improper error handling can impact thousands of endpoints
Clear communication: Your documentation helps IT teams understand what your scripts do and how to interpret results
Collaboration: You'll work with product managers, engineers, and customers to understand requirements
Pragmatism: You balance "perfect" with "ships on time" and know when good enough is good enough
Continuous learning: Technology changes, OSes evolve, and you stay current Ownership mentality: You take pride in your work and stand behind your code
Benefits of Working at CrowdStrike:
Market leader in compensation and equity awards
Comprehensive physical and mental wellness programs
Competitive vacation and holidays for recharge
Paid parental and adoption leaves
Professional development opportunities for all employees regardless of level or role
Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections
Vibrant office culture with world class amenities
Great Place to Work Certified™ across the globe
CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.
CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions--including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs--on valid job requirements.
If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at [email protected] for further assistance.
