Cribl Application Support Engineer

KMM Technologies, Inc.; Charlotte (NC); On-site; USD 83,000 - 165,000; Full time

Job summary

KMM Technologies, Inc. is seeking a Cribl Platform Engineer to provide hands-on production support for Cribl Stream, Cribl Leader and Worker Nodes, and related data pipelines.

You will optimize data routing, monitor platform health, and collaborate with cybersecurity and DevOps teams to meet audit-driven change control requirements. The role emphasizes strong scripting skills, CI/CD automation, and experience with Splunk ES and cloud integrations to ensure reliable telemetry delivery across

Qualifications

• Hands-on experience with Cribl Stream architecture, deployment, or support; Cribl Certified Observability Engineer credentials preferred.
• Strong background with Splunk ES and Splunk Enterprise logging platforms.
• Proficient in Linux/Unix system administration and automation scripting.
• Familiarity with Git workflows, CI/CD pipelines, and cloud environments (AWS).
• Understanding banking audit requirements and strict enterprise change controls.

Responsibilities

• Provide L2/L3 production support, monitoring, and administration for the Cribl Stream platform, including Cribl Leader/Worker Nodes and health checks.
• Configure and troubleshoot data Sources/Routes/Pipelines to ensure telemetry data flows reliably.
• Investigate dropped or misrouted logs; troubleshoot ingestion bottlenecks and connectivity issues.
• Build and maintain automated pipelines for Cribl deployments using Git-based workflows; apply Infrastructure as Code and audit-compliant change control practices.
• Collaborate with Cybersecurity, DevOps, and Platform teams to route data to Splunk or cloud destinations.

Skills

Cribl Stream

Splunk ES

Linux/Unix

Git & CI/CD

AWS / Cloud

Tools

Cribl Edge

Cribl Search

Splunk Enterprise

AWS

Git

Job description

Duration: 12+ months Contract

Job Role:

Client is a major financial services organization, this role focuses heavily on data routing efficiency, compliance, system auditing, and optimizing SIEM/observability costs

Job Responsibilities:

• Platform Administration: Provide L2/L3 production support, monitoring, and administration for the Cribl Stream platform. This includes supervising Cribl Leader Nodes, Worker Nodes, Worker Groups, and overall infrastructure health.
• Data Pipeline Optimization: Configure and troubleshoot data Sources, Destinations, Routes, Pipelines, Packs, and Functions to ensure telemetry data flows seamlessly.
• Incident & Bottleneck Management: Investigate dropped, delayed, or misrouted logs. Troubleshoot ingestion bottlenecks and connectivity failures to maintain high reliability and system compliance.
• CI/CD & Automation Governance: Build and maintain automated pipelines for Cribl configuration deployments using Git-based workflows. Implement Infrastructure as Code (IaC) and strict change management patterns that align with banking audit requirements.
• Cross-Platform Integration: Partner closely with Cybersecurity, DevOps, and Platform teams to route data effectively into enterprise destinations like Splunk or cloud environments.

Required Technical Skills & Qualifications:

• Cribl Expertise: Hands-on experience architecting, deploying, or supporting Cribl Stream (Cribl Certified Observability Engineer / CCOE credentials are highly preferred), Cribl Edge and Cribl Search.
• SIEM & Observability Tools: Splunk Enterprise / Splunk ES (Strong background in target logging platforms)
• Operating Systems & Scripting: Deep knowledge of Linux/Unix OS logs, system administration, and automation scripting.
• DevOps & Infrastructure: Familiarity with Git workflows, CI/CD deployment pipelines, and cloud provider environments (like AWS).
• Financial Sector Compliance: Understanding of strict enterprise change controls, data security, and audit trail retention.