Forensics Lab Infrastructure Engineer (Hybrid)

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn’t changed — we’re here to stop breaches, and we’ve redefined modern security with the world’s most advanced AI-native platform. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We’re also a mission-driven company. We cultivate a culture that gives every CrowdStriker both the flexibility and autonomy to own their careers. We’re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.

About the Role:

This is an Infrastructure Engineer position on the CrowdStrike Services TechOps team. Infrastructure engineers work to collaboratively support consultants to enable incident response and forensics analysis. Infrastructure Engineers are key contributors in the consulting team’s ability to analyze evidence in a stable and secure environment.

What You'll Do:

• Be available to receive, image and process physical devices sent to CrowdStrike for investigation while maintaining a chain of custody from receipt to disposition.

• Design, deploy, and maintain physical and virtualized infrastructure supporting forensic investigations.

• Administer VDI environments with strict security controls to preserve digital evidence integrity.

• Architect, deploy, and optimize AWS infrastructure using EC2, S3, SQS, and IAM to support scalable, secure cloud operations. Implement infrastructure-as-code practices, manage access controls, and monitor performance to ensure reliable and consistent performance.

• Establish proactive patch management, performance monitoring, and high-availability protocols while maintaining compliance with chain-of-custody and data protection requirements.

• Provide timely support through a ticketing system for internal consultants requiring technical assistance.

• Provide technical assistance to consultants on the forensic imaging process and troubleshooting assistance in challenges they encounter in the customer environment

• Participate in team discussions for system improvements and assist with planning future upgrades for continuous improvement

• Help to maintain and update various forensic tools in our lab environment to ensure consultants have access to cutting edge capabilities to support our customers.

• Help improve internal processes and support task documentation.

• Participate in a rotating on-call rotation for off-hours critical support

What You'll Need:

• Cloud Infrastructure administration experience using AWS services like S3, EC2, SQS and IAM

• VMware Experience with ESXI, VCenter, and Aria

• Experience with, or knowledge of, enterprise-class server hardware (standalone or blade chassis)

• Experience managing, configuring, and maintaining enterprise storage systems, focusing on data availability, performance, security, and backup/disaster recovery for Network Attached Storage (NAS) and Storage Area Networks (SAN)

• Proficient with Windows and Linux system administration

• Familiarity with Windows Active Directory Group Policy

• Confident with implementing, managing, and troubleshooting network infrastructure to ensure secure, reliable connectivity

• Experience working with infrastructure as code like Terraform

• Experience with automated tools for software deployment, patching, OS deployment (OSD), and security updates

• Professional experience in at least one programming language, preferably Python, with the ability to quickly learn and adapt to others

• High attention to detail with a demonstrated ability to work under time constraints and pressure.

• Ability to be successful in a highly asynchronous environment.

Bonus Points:

• Experience using forensic image collections tools like FTK Imager, PALADIN, and Digital Collector

• Knowledge of Chain of Custody principals of both digital and physical evidence lifecycles

• Past exposure