Cribl Engineer: SIEM Data Pipeline Specialist

Booz Allen Hamilton; Norfolk (VA); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking a mid-level Cribl Engineer to join the Visibility Analytics and Automation Team (VAAT) in the United States. You will design and maintain Cribl pipelines, normalize logs to CIM/ECS, and implement routing, masking, and enrichment for downstream SIEMs.

The role focuses on data ingestion challenges and observability infrastructure. You will work with Cribl Stream and Cribl Edge, plus Python/Bash for automation, and IaC tools like Ansible or Terraform for deployment.

Qualifications

• 3+ years of information technology experience focusing on logging, observability, or SIEM engineering.
• 2+ years of experience operating and managing data pipelines with Cribl Stream or Cribl Edge in production.
• 2+ years of experience administering or engineering enterprise SIEM environments.
• Knowledge of log forwarding, indexing, data collection, search architecture, source types, and ingestion-time parsing.
• Active TS/SCI clearance; willingness to take a polygraph exam.
• Must meet DoD 8570 IAT Level III Certification within 60 days of start date.
• Must meet DoD 8570 CSSP-IS Certification within 30 days of start date.
• Cribl Certification such as Cribl Certified Observability Engineer - CCOE Certification

Responsibilities

• Build, maintain, and optimize high-throughput data pipelines using Cribl Stream and Cribl Edge.
• Normalize incoming log sources to CIM and ECS schemas before routing to downstream SIEM
• Implement complex routing logic, data masking, enrichment, and replay workflows using JavaScript and Regex
• Monitor system health, manage worker topology, and troubleshoot bottlenecks in the data flow
• Automate deployment and configuration management with Python/Bash and IaC tools like Ansible or Terraform
• Maintain clear technical documentation, runbooks and SOPs for the observability infrastructure

Skills

Cribl Stream

Cribl Edge

Logging & SIEM

Regex patterns

Python/Bash scripting

Ansible/Terraform

Education

HS diploma / GED or higher IT degree options

Tools

Cribl Stream

Cribl Edge

Python

Bash

JavaScript in Cribl

Job description

Booz Allen Hamilton is seeking a mid-level Cribl Engineer to join the Visibility Analytics and Automation Team (VAAT) in the United States. You will design and maintain Cribl pipelines, normalize logs to CIM/ECS, and implement routing, masking, and enrichment for downstream SIEMs.

The role focuses on data ingestion challenges and observability infrastructure. You will work with Cribl Stream and Cribl Edge, plus Python/Bash for automation, and IaC tools like Ansible or Terraform for deployment.