Mid-Level Cribl Engineer with Security Clearance

Ennoble First Inc.; Reston (VA); On-site; USD 125,000 - 155,000; Full time

Job summary

Ennoble First is seeking a Mid-Level Cribl Engineer to support an Intelligence Community customer in Reston, VA. The role focuses on design, administration, and optimization of Cribl Stream and Cribl Edge within enterprise logging and SIEM environments.

You will manage data pipelines, code in Python and Bash, and collaborate with cybersecurity and infrastructure teams to ensure robust data flow and platform reliability in secure environments.

Qualifications

• 3-5 years of experience in information technology.
• 2-5 years of hands-on experience operating and managing Cribl Stream and/or Cribl Edge in production environments.
• 2+ years of experience administering or engineering enterprise SIEM or logging environments.
• Experience designing and managing data pipelines, including routing, filtering, parsing, transformation, and enrichment.
• Experience integrating Cribl with enterprise SIEM, logging, security, or observability platforms.
• Experience using Regex and JavaScript for data processing and transformation.
• Experience administering and troubleshooting Linux environments.
• Experience with scripting and automation using Python and/or Bash.
• Experience with automation or Infrastructure as Code technologies such as Ansible and Terraform.
• Active Cribl certification.
• Ability to obtain CSSP-IS certification within 30 days of offer acceptance.
• Ability to obtain IAT Level III certification within 45 days of CSSP-IS certification.

Responsibilities

• Administer and engineer Cribl Stream and Cribl Edge in enterprise production environments.
• Configure and manage Cribl sources, destinations, routes, collectors, and pipelines.
• Design and maintain data pipelines supporting enterprise logging, monitoring, and SIEM environments.
• Route, filter, transform, parse, enrich, and optimize log and security data as it moves between source systems and downstream platforms.
• Support integration of Cribl with enterprise SIEM, security, observability, and logging platforms.
• Troubleshoot data ingestion, routing, parsing, transformation, and performance issues.
• Develop and maintain Regex and JavaScript used for data processing and transformation.
• Support Cribl deployments and operations within Linux environments.
• Develop scripts and automation using Python and Bash.
• Use automation and Infrastructure as Code tools such as Ansible and Terraform to support repeatable platform deployment and configuration.
• Monitor and optimize platform performance, reliability, scalability, and data flow.
• Collaborate with cybersecurity, infrastructure, cloud, and engineering teams to address logging and data-management requirements.
• Develop and maintain technical documentation, configuration information, and operational procedures.

Skills

Cribl Stream

Cribl Edge

Linux administration

Python

Bash

Regex

JavaScript

Terraform

Ansible

Tools

Cribl Stream

Cribl Edge

Linux

Python

Bash

Job description

Mid-Level Cribl Engineer Location: Reston, VA Required Clearance: Active TS/SCI with Polygraph Employment Type: Full-Time Regular Shift: Day Travel: No Relocation Assistance: Yes Company Overview We are Ennoble First. The people supporting and securing some of the most complex government, defense, and intelligence projects across the country. We ensure today is safe and tomorrow is smarter. Our work has meaning and impact on the world around us, but also on us, and that's important. Ennoble First is your place. You make it your own by embracing autonomy, seizing opportunity, and being trusted to deliver your best every day. We think. We act. We deliver. There is no challenge we can't turn into an opportunity.

Position Overview Ennoble First is seeking a Mid-Level Cribl Engineer to support an Intelligence Community customer in Reston, Virginia. This hands-on engineering role focuses on the design, administration, optimization, and support of Cribl Stream and Cribl Edge within enterprise logging and SIEM environments. The Cribl Engineer will work with technical and cybersecurity teams to manage data pipelines, integrate logging sources and destinations, optimize data routing and transformation, troubleshoot complex ingestion issues, and automate platform operations across secure enterprise environments.

Primary Responsibilities

• Administer and engineer Cribl Stream and Cribl Edge in enterprise production environments.
• Configure and manage Cribl sources, destinations, routes, collectors, and pipelines.
• Design and maintain data pipelines supporting enterprise logging, monitoring, and SIEM environments.
• Route, filter, transform, parse, enrich, and optimize log and security data as it moves between source systems and downstream platforms.
• Support integration of Cribl with enterprise SIEM, security, observability, and logging platforms.
• Troubleshoot data ingestion, routing, parsing, transformation, and performance issues.
• Develop and maintain Regex and JavaScript used for data processing and transformation.
• Support Cribl deployments and operations within Linux environments.
• Develop scripts and automation using Python and Bash.
• Use automation and Infrastructure as Code tools such as Ansible and Terraform to support repeatable platform deployment and configuration.
• Monitor and optimize platform performance, reliability, scalability, and data flow.
• Collaborate with cybersecurity, infrastructure, cloud, and engineering teams to address logging and data-management requirements.
• Develop and maintain technical documentation, configuration information, and operational procedures.

Required Qualifications

• 3-5 years of experience in information technology.
• 2-5 years of hands-on experience operating and managing Cribl Stream and/or Cribl Edge in production environments.
• 2+ years of experience administering or engineering enterprise SIEM or logging environments.
• Experience designing and managing data pipelines, including routing, filtering, parsing, transformation, and enrichment.
• Experience integrating Cribl with enterprise SIEM, logging, security, or observability platforms.
• Experience using Regex and JavaScript for data processing and transformation.
• Experience administering and troubleshooting Linux environments.
• Experience with scripting and automation using Python and/or Bash.
• Experience with automation or Infrastructure as Code technologies such as Ansible and Terraform.
• Active Cribl certification.
• Ability to obtain a qualifying CSSP-IS certification within 30 days of offer acceptance, such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.
• Ability to obtain a qualifying IAT Level III certification within 45 days of obtaining the CSSP-IS certification, or within 45 days of offer acceptance if already CSSP-IS qualified. Qualifying certifications include SecurityX (formerly CASP+), CCNP Security, CISA, CISSP or Associate of ISC2, GCED, GCIH, or CCSP.

Preferred Qualifications

• Experience supporting Intelligence Community or other classified environments.
• Experience with enterprise security monitoring and observability architectures.
• Experience automating Cribl deployments and configuration management.
• Strong troubleshooting and analytical skills.
• Strong interpersonal and customer relationship skills.
• Excellent verbal and written communication skills.

Pay Range $125,000-$155,000 The Ennoble First pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Equal Employment Opportunity Ennoble First is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to any characteristic protected by law. E-Verify Participation Ennoble First participates in E-Verify. Learn more at www.dhs.gov/E-Verify . E-Verify is a registered trademark of the U.S. Department of Homeland Security. Ennoble First is committed to providing a diverse and inclusive work environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status. Ennoble First participates in E-Verify. The information below will be listed on our website's careers landing page. EEO is the Law | Pay Transparency www.dhs.gov/E-Verify E-Verify is a registered trademark of the U.S. Department of Homeland Security. This business uses E-Verify in its hiring practices to achieve a lawful workforce.