Cribl Engineer
Core
Principal technical authority for observability pipelines built on Cribl Stream and Cribl Edge, shaping pipeline strategy and driving platform reliability for federal government organizations.
Role type
Senior IC Cribl Engineer (Observability/Log Engineering)
Builds
High throughput log/telemetry pipelines (multiTB/day) with advanced routing, filtering, enrichment, and replay workflows.
Domain
Cybersecurity / Federal Government / Observability
Deliverable
production ML models | product features | dashboards & analysis | infrastructure
Required skills
Cribl Stream/Edge architecture, large-scale data engineering, secure data flows (masking/tokenization/RBAC), SIEM integration (Splunk/Elastic), Linux, Python/Bash scripting, Git, automation (Ansible/Terraform), transport protocols (HTTP/TCP/TLS/MTLS), Kafka, S3/object storage, mentorship
Preferred skills
Cribl Packs creation, cloud telemetry (AWS/Azure), NIST/CIS frameworks, distributed systems observability, vendor engagement
Technologies
Cribl Stream, Cribl Edge, Splunk, Elastic, Kafka, S3, Ansible, Terraform, Python, Bash, Linux
Responsibilities
Lead architecture and design for Cribl Stream/Edge across multiple enclaves; Build high throughput pipelines with advanced routing and enrichment; Optimize system performance, worker topology, and transport mechanisms; Engineer secure data flows with governance controls; Integrate pipelines with SIEM/analytics ecosystems; Develop HA/DR patterns and fleet health metrics; Maintain reusable Cribl packs and operational standards; Serve as senior escalation point for Cribl issues; Mentor engineers and drive engineering excellence
Seniority
Senior, hands-on IC with mentorship responsibilities