Cribl Engineer: SIEM Data Pipelines & Automation

Booz Allen Hamilton; Washington; On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking a mid-level Cribl Engineer to design, build, and optimize enterprise data pipelines feeding downstream SIEM ecosystems. You will work on Cribl Stream and Cribl Edge, implement routing, masking, and transformation logic, and mature data integration across CIM/ECS schemas.

Responsibilities include system health, automation with Python/Bash and IaC (Ansible/Terraform), and documentation. A TS/SCI clearance and strong logging/observability focus are required.

Qualifications

• 3+ years of experience in Information Technology, focusing on logging, observability, or SIEM engineering.
• 2+ years of experience operating and managing data pipelines with Cribl Stream or Cribl Edge in a production environment.
• 2+ years of experience administering or engineering enterprise SIEM environments.
• Knowledge of log forwarding, indexing, data collection, search architecture, source types, and ingestion-time parsing.
• Active TS/SCI clearance; willingness to take a polygraph exam.

Responsibilities

• Pipeline Development: Build, maintain, and optimize high-throughput data pipelines using Cribl Stream and Cribl Edge to ensure efficient data routing, masking, and transformation.
• Data Integration and Schema Mapping: Normalize incoming log sources to CIM/ECS before routing to downstream SIEM platforms and analytics tools.
• Engineering Support: Implement routing logic, data masking, enrichment, and replay workflows with JavaScript and Regex in Cribl pipelines.
• System Optimization: Monitor system health, manage worker topology, and troubleshoot bottlenecks in data flow.
• Automation: Use Python or Bash and IaC tools like Ansible or Terraform to automate deployment and configuration.
• Documentation: Maintain accurate technical docs, runbooks, and SOPs for observability infra.

Skills

Cribl Stream

Cribl Edge

SIEM engineering

Logging

Observability

Regex

JavaScript in Cribl

Python

Bash

Ansible

Terraform

Education

HS diploma or GED

Associate’s degree

Bachelor’s degree

Master’s degree

Tools

Cribl Stream

Cribl Edge

Ansible

Terraform

Regex

JavaScript

Python

Job description

Booz Allen Hamilton is seeking a mid-level Cribl Engineer to design, build, and optimize enterprise data pipelines feeding downstream SIEM ecosystems. You will work on Cribl Stream and Cribl Edge, implement routing, masking, and transformation logic, and mature data integration across CIM/ECS schemas.

Responsibilities include system health, automation with Python/Bash and IaC (Ansible/Terraform), and documentation. A TS/SCI clearance and strong logging/observability focus are required.