Cribl Engineer — Data Pipelines & SIEM Automation

Booz Allen Hamilton; Reston (VA); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton seeks a mid-level Cribl Engineer to join the Visibility Analytics and Automation Team (VAAT) in Reston. You will design and maintain enterprise data pipelines, focusing on Cribl Stream and Cribl Edge to feed downstream SIEM ecosystems.

You will normalize logs to CIM/ECS, troubleshoot data flow, and automate deployments with Python, Bash, Ansible, and Terraform. TS/SCI clearance is required; salary and benefits are provided according to policy.

Qualifications

• 3+ years of IT experience focusing on logging, observability, or SIEM engineering
• Experience operating data pipelines with Cribl Stream or Cribl Edge in production
• Experience administering or engineering enterprise SIEM environments
• Knowledge of log forwarding, indexing, data collection, search architecture, and ingestion-time parsing
• Active TS/SCI clearance; willingness to take a polygraph exam

Responsibilities

• Build, maintain, and optimize high-throughput data pipelines using Cribl Stream and Cribl Edge
• Normalize incoming log sources to CIM/ECS schemas before routing to SIEM platforms
• Monitor system health, manage worker topology, troubleshoot data-flow bottlenecks
• Automate deployment with Python/Bash and IaC tools like Ansible or Terraform
• Maintain technical documentation, runbooks, and SOPs for observability infrastructure

Skills

Cribl Stream

Cribl Edge

SIEM engineering

Logging

Data pipelines

Python

Bash

Regex

Ansible

Terraform

Education

Bachelor’s degree or higher in IT/related field

Tools

Cribl scripting

Job description

Booz Allen Hamilton seeks a mid-level Cribl Engineer to join the Visibility Analytics and Automation Team (VAAT) in Reston. You will design and maintain enterprise data pipelines, focusing on Cribl Stream and Cribl Edge to feed downstream SIEM ecosystems.

You will normalize logs to CIM/ECS, troubleshoot data flow, and automate deployments with Python, Bash, Ansible, and Terraform. TS/SCI clearance is required; salary and benefits are provided according to policy.