Cribl Engineer: Data Pipelines & SIEM Specialist

ENS Solutions, LLC; Reston (VA); On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Free Platinum Medical/Dental/Vision

401k from Day 1

PTO + 11 paid holidays

Disability insurance

Group term life insurance

Tuition, certifications & professional

Job summary

ENS Solutions, LLC is seeking a mid-level Cribl Engineer to design and optimize enterprise data pipelines feeding downstream SIEM ecosystems. You will implement routing, masking, and transformation logic using Cribl Stream and Cribl Edge, and you will automate deployments with Python, Bash, Ansible, and Terraform.

The role focuses on logging, observability, and SIEM engineering in a DoD/IC-related environment, requiring strong data ingestion and schema-mapping expertise.

Qualifications

• 3–5 years of IT/logging/observability/SIEM engineering experience.
• 2–5 years of hands-on experience with Cribl Stream/Cribl Edge in production.
• 2+ years of experience with enterprise SIEM environments and log forwarding.
• Education: HS+ years or degrees as listed in the ad; strong IT project experience.
• Ability to obtain CSSP-IS and CSSP-related certifications within stated timelines.

Responsibilities

• Build, maintain, and optimize high-throughput data pipelines using Cribl Stream and Cribl Edge.
• Normalize log sources to CIM/ECS schemas before routing to SIEMs and analytics tools.
• Implement routing, masking, enrichment, and replay workflows with Cribl scripts.
• Monitor system health, manage worker topology, and troubleshoot data flow bottlenecks.
• Automate deployment and configuration with Python, Bash, Ansible, and Terraform.
• Create and maintain technical runbooks and documentation for observability infra.

Skills

Cribl Stream

Cribl Edge

Data pipeline design

Regex

JavaScript in Cribl

Python/Bash scripting

SIEM/logging

Team collaboration

Education

Bachelor's degree in IT/CS

Tools

Cribl Stream

Cribl Edge

Terraform

Ansible

JSON/Syslog

Job description

ENS Solutions, LLC is seeking a mid-level Cribl Engineer to design and optimize enterprise data pipelines feeding downstream SIEM ecosystems. You will implement routing, masking, and transformation logic using Cribl Stream and Cribl Edge, and you will automate deployments with Python, Bash, Ansible, and Terraform.

The role focuses on logging, observability, and SIEM engineering in a DoD/IC-related environment, requiring strong data ingestion and schema-mapping expertise.