Cribl Engineer: SIEM Data Pipeline Specialist

ENS Solutions, LLC; United States; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical coverage

401k from day 1

PTO + holidays

Disability insurance

Life insurance

Tuition & certification assistance

Relocation assistance

Job summary

ENS Solutions, LLC is seeking a mid-level Cribl Engineer to design, build, and optimize enterprise data pipelines. You will focus on routing, masking, and transformation using Cribl Stream and Cribl Edge to support downstream SIEM and analytics platforms.

You’ll normalize logs to CIM/ECS schemas, implement complex routing, and automate deployment with Python, Bash, Ansible, and Terraform. Strong debugging, Linux skills, and DoD CSSP-IS readiness help you succeed in this role.

Qualifications

• 3-5 years of experience in information technology focusing on logging/observability or SIEM engineering.
• 2-5 years operating data pipelines with Cribl Stream/Edge in production.
• 2+ years administering enterprise SIEM environments with log forwarding, indexing, ingestion parsing.
• Education options include HS+7y IT, AA+5y, BA+3y, or MS+1y depending on career path.

Responsibilities

• Design and maintain high-throughput data pipelines using Cribl Stream and Cribl Edge.
• Normalize log sources to CIM/ECS schemas before routing to downstream SIEM platforms.
• Implement routing logic, data masking, enrichment, and replay workflows in Cribl pipelines.
• Monitor system health, optimize worker topology, and troubleshoot data-flow bottlenecks.
• Automate deployment and config management with Python, Bash, Ansible, and Terraform.
• Maintain technical runbooks and SOPs for observability infrastructure.

Skills

Cribl Stream

Cribl Edge

JavaScript

Python

Regex

Linux/Unix

Education

HS diploma or GED + 7+ years IT

Associate's degree + 5+ years

Bachelor's degree + 3+ years

Master's degree + 1+ year

Tools

Cribl Platform

Ansible

Terraform

Job description

ENS Solutions, LLC is seeking a mid-level Cribl Engineer to design, build, and optimize enterprise data pipelines. You will focus on routing, masking, and transformation using Cribl Stream and Cribl Edge to support downstream SIEM and analytics platforms.

You’ll normalize logs to CIM/ECS schemas, implement complex routing, and automate deployment with Python, Bash, Ansible, and Terraform. Strong debugging, Linux skills, and DoD CSSP-IS readiness help you succeed in this role.