Cribl Engineer Expert

Scalis LLC; Reston (VA); On-site; USD 180,000 - 240,000; Full time

Job summary

Cinteot Inc. is seeking a senior Cribl Engineer to act as the principal technical authority for observability pipelines built on Cribl Stream and Cribl Edge. You will shape pipeline strategy, design complex routing and transformation logic, and drive platform reliability.

You will mentor senior engineers, lead architectural decisions, and interface with security, cloud, and analytics teams to ensure robust logging and telemetry across enterprise environments.

Qualifications

• Senior level experience in logging, observability, or SIEM engineering.
• Architecting enterprise-scale log/telemetry pipelines for large data volumes.
• Hands-on production experience with Cribl Stream and Cribl Edge.
• Proven ability to scale pipelines to multi TB per day.
• Expert in Splunk forwarding/ingestion and indexing practices.
• Strong knowledge of transport protocols (HTTP/TCP/TLS/MTLS), Kafka, and object storage (S3).
• Experience designing secure data flows with RBAC, secrets management, encryption, and governance controls.
• Mentor engineers and lead technical decision making.
• Cribl Certified Engineer or equivalent Cribl product expertise.
• DoD 8570.01-M certifications or willingness to obtain within 30 days of hire.
• TS/SCI with Polygraph clearance is required.

Responsibilities

• Lead architecture and design for Cribl Stream/Edge across multiple enclaves and data domains.
• Build high-throughput pipelines with advanced routing, filtering, enrichment, and replay workflows.
• Optimize system performance, worker topology, queue management, and transport mechanisms.
• Engineer secure data flows with masking, RBAC, PKI/TLS, and governance controls.
• Integrate pipelines with SIEM/analytics ecosystems (Splunk, Elastic, cloud services).
• Develop HA/DR patterns, reliability metrics, and failure mode procedures.
• Maintain reusable Cribl packs, patterns, and runbooks.
• Serve as senior escalation point for Cribl issues and liaise with vendor engineers.
• Mentor engineers and conduct design reviews to enforce standards.
• Collaborate with security, cloud, analytics, and infra teams on logging strategy.

Skills

Cribl Stream

Cribl Edge

Logging

Observability

SIEM

Enterprise pipelines

Mentoring

Security certifications

IAT II

IAT III

CSSP Infrastructure

TS/SCI with Polygraph

CCNP Security

CCOE

Tools

Splunk

Kafka

S3

TLS/MTLS

HTTP

Job description

Cinteot Inc. is a small IT services company that specializes in cybersecurity, Big Data/databases, software development, systems testing, STIG Compliance training, closed-circuit television/security cameras and access controls, and construction/facilities.

We are a Woman-owned, SBA Certified 8(a), and HUBZone company.

About the job

Job Summary:

We are seeking a highly experienced Cribl Engineer to serve as the principal technical authority for observability pipelines built on Cribl Stream and Cribl Edge. This role is designed for a senior technologist with deep expertise in log/telemetry routing, large-scale data engineering, and enterprise-grade observability architectures. You will shape pipeline strategy, design complex routing and transformation logic, drive platform reliability, mentor senior engineers, and serve as the top technical escalation point for Cribl-related challenges.

Key Responsibilities:

• Lead architecture and design for Cribl Stream/Edge across multiple enclaves and data domains.
• Build high throughput pipelines (multiTB/day) with advanced routing, filtering, enrichment, and replay workflows.
• Optimize system performance, worker topology, CPU/memory distribution, queues, and transport mechanisms.
• Engineer secure data flows with masking, tokenization, RBAC, PKI/TLS, and other governance controls.
• Integrate pipelines with SIEM/analytics ecosystems (Splunk, Elastic, SaaS telemetry platforms, cloud services).
• Develop HA/DR patterns, reliability frameworks, fleet health metrics, and failure mode response processes.
• Maintain reusable Cribl packs, shared patterns, runbooks, and operational standards.
• Serve as the senior escalation point for Cribl issues; interface with vendor engineering as required.
• Mentor engineers, conduct design reviews, drive engineering excellence, and enforce architectural standards.
• Support cross functional teams (security, cloud, analytics, infrastructure) on logging and telemetry strategy.

Required Qualifications:

• 10+ years of experience in logging, observability, or SIEM engineering.
• 5+ years architecting enterprise scale log/telemetry pipelines.
• 3+ years hands-on with Cribl Stream and Cribl Edge in production environments.
• Demonstrated success operating and scaling pipelines at 5–10+ TB/day.
• Expert-level experience with Splunk forwarding/ingestion, source type management, and indexing practices.
• Strong understanding of transport protocols (HTTP, TCP, TLS/MTLS), Kafka, S3/object storage.
• Experience designing secure data flows, including encryption, RBAC, secrets management, and compliance controls.
• Demonstrated ability to mentor senior engineers and lead technical decision making.
• Certified Cribl Certified Engineer (CCOE) or equivalent Cribl product expertise.
• Must possess the following DoD 8570.01-M certifications or be willing to obtain within 30 days of hire:
• Information Assurance Technician (IAT) Level II certification (currently Security+ CE, CCNA-Security, GSEC, SSCP, CySA+, GICSP, or CND).
• IAT Level III certification requirements (currently CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, or GCIH).
• Cyber Security Service Provider (CSSP) - Infrastructure Support (IS) certification requirements (currently CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND).
• Must possess a TS/SCI with Polygraph

Preferred Qualifications:

• Expertise creating and maintaining Cribl Packs and reusable pipelines.
• Experience with cloud telemetry (AWS, Azure, hybrid) and cross-domain data movement patterns.