Cribl Platform Support Engineer - Remote

NTT America, Inc.; Frisco (TX); Remote; USD 79,000 - 137,000; Full time

Benefits offered by this job

Health insurance

Job summary

NTT DATA is seeking a Cribl Application Support Engineer to provide L2/L3 production support for Cribl Stream in a Frisco, TX area. The role focuses on monitoring, troubleshooting, and maintaining Cribl components, with strong emphasis on data flow, log ingestion, and SIEM integrations.

The ideal candidate will have 5+ years in Cribl/telemetry platforms, Shell/Python scripting, and experience with Splunk or Elastic Stack.

Qualifications

• Cribl Stream administration and production support experience.
• Experience configuring Cribl components: Sources, Destinations, Routes, Pipelines and Packs.
• Understanding Cribl Leader and Worker architecture and management.
• Experience with Splunk and/or Elastic Stack.
• Knowledge of Kafka, Syslog, REST APIs and HTTP integrations.
• Cloud logging and monitoring on AWS/Azure advantageous.
• Knowledge of log management, SIEM, observability and security monitoring concepts.

Responsibilities

• Provide L2/L3 production support for Cribl Stream platform and related components.
• Monitor Cribl Leader/Worker nodes, health, and data flow across pipelines.
• Troubleshoot log delivery, routing, and connectivity issues.
• Perform RCA for recurring or critical incidents.
• Coordinate with infra, network, security, and vendor teams for resolutions.
• Write Shell/Python scripts for monitoring and automation.
• Handle on-call/production support and major incident troubleshooting.

Skills

L2/L3 support

Cribl Stream

Cribl Leader/Worker

Log ingestion

Linux/Unix

Shell scripting

Python

Regex/JSON

JavaScript

Networking

SIEM/Observability

ITSM

Tools

Cribl

Splunk

Elastic

Kafka

Syslog

Microsoft Sentinel

AWS

Azure

Other SIEM platforms

Job description

NTT DATA is seeking a Cribl Application Support Engineer to provide L2/L3 production support for Cribl Stream in a Frisco, TX area. The role focuses on monitoring, troubleshooting, and maintaining Cribl components, with strong emphasis on data flow, log ingestion, and SIEM integrations.

The ideal candidate will have 5+ years in Cribl/telemetry platforms, Shell/Python scripting, and experience with Splunk or Elastic Stack.