Cribl Engineer Expert

Cinteot Inc.; Reston (VA); On-site; USD 160,000 - 210,000; Full time

Benefits offered by this job

Complete Insurance Coverage

401(k) with Company Contribution

Tuition Reimbursement

Generous Paid Time Off

Job summary

Cinteot Inc. is seeking a highly experienced Cribl Engineer to act as the principal technical authority for observability pipelines built on Cribl Stream and Cribl Edge.

This senior role shapes routing, transformation logic, and reliability across large-scale data flows, mentoring engineers and serving as the main escalation point for Cribl challenges. You will drive architecture, optimize performance, and integrate pipelines with SIEM ecosystems while ensuring secure, compliant data handling

Qualifications

• 10+ years in logging/observability/SIEM engineering.
• 5+ years architecting enterprise-scale log pipelines.
• 3+ years hands-on Cribl Stream/Edge in production.
• Proven ability to scale pipelines to 5–10+ TB/day.
• Expert in Splunk forwarding/ingestion and indexing.
• Strong knowledge of HTTP/TCP/TLS, Kafka, S3.
• Experience designing secure data flows (encryption, RBAC, secrets).
• Able to mentor engineers and lead technical decisions.
• CCOE or equivalent Cribl expertise.
• DoD 8570.01‑M certs or willingness to obtain within 30 days (IAT II/III, CSSP-IS).
• Must have TS/SCI with Polygraph.

Responsibilities

• Lead architecture/design for Cribl Stream/Edge across enclaves.
• Build high throughput pipelines (multiTB/day) with routing, filtering, enrichment, replay.
• Optimize performance, worker topology, queues, transport.
• Engineer secure data flows with masking, RBAC, PKI/TLS.
• Integrate pipelines with SIEM/analytics (Splunk, Elastic, cloud services).
• Develop HA/DR, reliability metrics, and incident response processes.
• Maintain Cribl packs, shared patterns, runbooks, and standards.
• Serve as senior escalation point; interface with vendor engineering.
• Mentor engineers and enforce architectural standards.
• Support cross-functional teams on logging/telemetry strategy.

Skills

Cribl Stream

Cribl Edge

Log/telemetry pipelines

Splunk forwarding

Kafka

TLS/MTLS

S3 storage

RBAC

Mentoring engineers

Architecture design

Tools

Splunk

Kafka

S3

TLS

Job description

Cinteot Inc. is a small IT services company that specializes in cybersecurity, Big Data/databases, software development, systems testing, STIG Compliance training, closed-circuit television/security cameras and access controls, and construction/facilities.

We are a Woman‑owned, SBA Certified 8(a), and HUBZone company.

Job Summary

We are seeking a highly experienced Cribl Engineer to serve as the principal technical authority for observability pipelines built on Cribl Stream and Cribl Edge. This role is designed for a senior technologist with deep expertise in log/telemetry routing, large‑scale data engineering, and enterprise‑grade observability architectures. You will shape pipeline strategy, design complex routing and transformation logic, drive platform reliability, mentor senior engineers, and serve as the top technical escalation point for Cribl‑related challenges.

Key Responsibilities

• Lead architecture and design for Cribl Stream/Edge across multiple enclaves and data domains.
• Build high throughput pipelines (multiTB/day) with advanced routing, filtering, enrichment, and replay workflows.
• Optimize system performance, worker topology, CPU/memory distribution, queues, and transport mechanisms.
• Engineer secure data flows with masking, tokenization, RBAC, PKI/TLS, and other governance controls.
• Integrate pipelines with SIEM/analytics ecosystems (Splunk, Elastic, SaaS telemetry platforms, cloud services).
• Develop HA/DR patterns, reliability frameworks, fleet health metrics, and failure mode response processes.
• Maintain reusable Cribl packs, shared patterns, runbooks, and operational standards.
• Serve as the senior escalation point for Cribl issues; interface with vendor engineering as required.
• Mentor engineers, conduct design reviews, drive engineering excellence, and enforce architectural standards.
• Support cross‑functional teams (security, cloud, analytics, infrastructure) on logging and telemetry strategy.

Required Qualifications

• 10+ years of experience in logging, observability, or SIEM engineering.
• 5+ years architecting enterprise‑scale log/telemetry pipelines.
• 3+ years hands‑on with Cribl Stream and Cribl Edge in production environments.
• Demonstrated success operating and scaling pipelines at 5–10+ TB/day.
• Expert‑level experience with Splunk forwarding/ingestion, source type management, and indexing practices.
• Strong understanding of transport protocols (HTTP, TCP, TLS/MTLS), Kafka, S3/object storage.
• Experience designing secure data flows, including encryption, RBAC, secrets management, and compliance controls.
• Demonstrated ability to mentor senior engineers and lead technical decision‑making.
• Certified Cribl Certified Engineer (CCOE) or equivalent Cribl product expertise.
• Must possess the following DoD 8570.01‑M certifications or be willing to obtain within 30 days of hire:
  • Information Assurance Technician (IAT) Level II certification (currently Security+ CE, CCNA‑Security, GSEC, SSCP, CySA+, GICSP, or CND).
  • IAT Level III certification requirements (currently CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, or GCIH).
  • Cyber Security Service Provider (CSSP) – Infrastructure Support (IS) certification requirements (currently CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND).
• Must possess a TS/SCI with Polygraph.

Preferred Qualifications

• Expertise creating and maintaining Cribl Packs and reusable pipelines.
• Experience with cloud telemetry (AWS, Azure, hybrid) and cross‑domain data movement patterns.
• Familiarity with NIST / CIS control frameworks and secure engineering practices.
• Experience building observability frameworks for large distributed systems.
• Competitive salary and performance‑based bonuses.
• Comprehensive health, dental, and vision insurance.
• Opportunities for professional development and continuous learning.

Company Culture

At Cinteot, we foster a collaborative and inclusive work environment where every team member is valued. We prioritize innovation and continuous improvement, encouraging our employees to share ideas and drive change. Join us to be part of a culture that promotes growth, diversity, and excellence.

• Complete Insurance Coverage
• 401(k) with Company Contribution
• Tuition Reimbursement
• Generous Paid Time Off (including your birthday!)

Cinteot is an Equal Opportunity Employer

All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or basis of disability.