Cribl Engineer (TS/SCI w/ Poly) - Secure Data Pipelines

ENS Solutions, LLC; Washington; On-site; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, dental & vision coverage

401k from day 1

Paid time off + 11 holidays

Disability insurance

Life insurance

Tuition & certification support

Relocation assistance

Job summary

ENS Solutions, LLC is seeking a data observability engineer specializing in Cribl Stream and Cribl Edge to build and optimize pipelines for DoD/IC workloads. You’ll normalize logs to CIM/ECS, implement masking and enrichment, and automate deployments with Python, Bash, Ansible, and Terraform.

Ideal candidates have multiple years of SIEM engineering experience, strong Linux skills, and the ability to obtain DoD CSSP-IS/IAT certifications.

Qualifications

• Experience administering or engineering enterprise SIEM environments.
• DoD 8570 certifications eligibility or capability to obtain within set days.
• Strong knowledge of log forwarding, parsing, and ingestion systems.
• Experience with Cribl Stream/Cribl Edge in production environments.

Responsibilities

• Build, maintain, and optimize high-throughput data pipelines using Cribl Stream and Cribl Edge.
• Normalize incoming log sources to CIM/ECS schemas before routing to SIEM platforms.
• Implement complex routing logic, data masking, and enrichment in Cribl pipelines.
• Monitor system health, manage worker topology, and troubleshoot bottlenecks.
• Automate deployment and configuration with Python, Bash, Ansible, and Terraform.
• Maintain technical docs, runbooks, and SOPs for observability infrastructure.

Skills

Cribl Stream

Cribl Edge

Regex

JavaScript

Python

Bash

JSON

Syslog

CIM/ECS knowledge

Linux/Unix

HTTP/TCP/TLS

Education

HS diploma or GED

Associate’s degree

Bachelor’s degree

Master’s degree

Tools

Ansible

Terraform

Cribl Console

Job description

ENS Solutions, LLC is seeking a data observability engineer specializing in Cribl Stream and Cribl Edge to build and optimize pipelines for DoD/IC workloads. You’ll normalize logs to CIM/ECS, implement masking and enrichment, and automate deployments with Python, Bash, Ansible, and Terraform.

Ideal candidates have multiple years of SIEM engineering experience, strong Linux skills, and the ability to obtain DoD CSSP-IS/IAT certifications.