Skip to content
NEXTMOVEFDE careers · United States
Kroll

Senior Manager, CrowdStrike Identity Architect, Cyber Engineered Defense

AI summary of the role

Kroll is hiring a Manager or Senior Manager to build and lead its CrowdStrike Falcon Identity Security consulting practice.

What you’ll do

  • Lead identity security current-state assessments across hybrid environments (AD, Entra ID, Okta, SaaS) and produce executive-ready remediation roadmaps.
  • Design end-to-end architectures for Falcon Identity Protection, Falcon Privileged Access, and FalconID phishing-resistant MFA rollouts.
  • Personally configure and deploy Falcon Identity solutions in client environments, including sensor rollout, policy tuning, and JIT/PAM workflow buildout.
  • Serve as trusted advisor to CISOs and IAM leaders on identity strategy, Zero Trust roadmap, and AI-era identity security.

What you’ll bring

  • 5+ years (Manager) or 7+ years (Senior Manager) hands-on experience in identity security, IAM, PAM, or MFA with operational ownership of AD, Entra ID, Okta, or equivalent.
  • Hands-on experience with CrowdStrike Falcon platform, including Falcon Identity Protection; working knowledge of Falcon Insight and Falcon Next-Gen SIEM/LogScale required.
  • Demonstrated experience assessing, architecting, and implementing identity solutions in hybrid environments.
  • Strong knowledge of identity protocols: SAML, OIDC, OAuth 2.0, SCIM, FIDO2/WebAuthn, Kerberos, LDAP.

Technologies

CrowdStrike Falcon Identity Protection · Falcon Privileged Access · FalconID · Falcon Next-Gen SIEM · LogScale · Falcon Fusion SOAR · Charlotte AI · Active Directory · Entra ID · Okta · CQL · PowerShell

Source and classification

Implementation & delivery · Evidence for this classification:

CrowdStrike unified initial access prevention, modern PAM, ITDR, SaaS identity security, and agentic (AI agent) identity protection into a single sensor and console. Kroll clients need a consulting partner who can assess their current identity posture, architect the right Falcon Identity target state, implement it across hybrid AD / Entra ID / Okta / SaaS environments, advise their leadership on the journey, and build the customizations — detections, automations, workflows, integrations — that make the platform sing for each client. This is a player-coach role. The “Manager” or “Senior Manager” title does not mean hands-off oversight. You will personally lead engagement delivery — running assessments, drawing the architecture, configuring the platform, and writing the custom content — while mentoring junior consultants and partnering with CrowdStrike account teams on scoping and
More from the job description

At Kroll, we provide reactive, advisory, transformation, and managed security services to support clients at every stage of their path toward cyber and data resilience maturity. Our experts bring decades of experience in cyber risk consultancy, helping organizations across the world simplify and reduce the complexity of implementing, transforming, and managing their cyber programs. Through our strategic multi-year partnership with CrowdStrike, we combine world-class investigative expertise with an AI-native platform to redefine the future of managed detection and response, delivering faster outcomes, stronger protection, and greater resilience for organizations worldwide. Our Cyber & Data Resilience capability is hiring a Manager or Senior Manager to build and lead Kroll's CrowdStrike Falcon Identity Security consulting practice. With the launch of Falcon Next-Gen Identity Security, CrowdStrike unified initial access prevention, modern PAM, ITDR, SaaS identity security, and agentic (AI agent) identity protection into a single sensor and console. Kroll clients need a consulting partner who can assess their current identity posture, architect the right Falcon Identity target state, implement it across hybrid AD / Entra ID / Okta / SaaS environments, advise their leadership on the journey, and build the customizations — detections, automations, workflows, integrations — that make [... source excerpt omitted ...] als, unconstrained delegation, ADCS misconfiguration, overprovisioned non-human identities, and risky conditional access gaps. Run Falcon Identity hygiene assessments to baseline client posture, prioritize findings by business risk, and produce executive-ready remediation roadmaps tied to Zero Trust and NIST/CIS reference frameworks. Evaluate existing IAM, PAM, and MFA tooling against Falcon Next-Gen Identity Security capabilities to inform consolidation, replacement, or coexistence strategies. Architect Design end-to-end architectures for Falcon Identity Protection deployments — sensor placement, domain controller coverage, identity risk scoring, conditional access policy, [... source excerpt omitted ...] Falcon Next-Gen SIEM (LogScale) and identity-driven case management workflows. Produce target-state reference architectures, sequencing plans, and migration runbooks tailored to client maturity, scale, and regulatory profile. Implement Personally configure and deploy Falcon Identity Protection, Falcon Privileged Access, and FalconID in client environments — including sensor rollout, policy tuning, conditional access enforcement, MFA enrollment, and JIT/PAM workflow buildout. Operationalize identity-driven case management inside Falcon Next-Gen SIEM, including cross-domain enrichment from endpoint, cloud, and SaaS telemetry. Stand up automation through Falcon Fusion SOAR f

How jobs are selected

Employer postings · Data from · Sources