Splunk Engineer Cribl Jersey , NJ

Overview

Splunk Engineer with Cribl job at Purple Drive. Jersey City, NJ.

The Splunk Engineer with Cribl will be responsible for architecting, managing, and optimizing data ingestion pipelines into Splunk using Cribl Stream and Cribl Edge. This role ensures efficient log routing, transformation, filtering, and enrichment to maintain high performance, cost optimization, and observability across enterprise environments. The ideal candidate will have deep experience with Splunk Enterprise, Cribl data pipelines, and strong scripting and automation skills to manage large-scale data flows securely and efficiently.

• Design, implement, and maintain data ingestion pipelines from multiple data sources into Splunk via Cribl Stream.
• Manage and optimize log routing, filtering, and transformations for performance and storage efficiency.
• Configure and tune Splunk indexers, forwarders, and search heads for large-scale environments.
• Develop and maintain Cribl pipelines, sources, destinations, and pack configurations.
• Implement data governance policies and ensure compliance with security and retention requirements.
• Work with cross-functional teams (security, Dev Ops, and infrastructure) to troubleshoot data flow issues.
• Automate onboarding of new log sources and transformations using Cribl APIs and Splunk scripts.
• Monitor and report on data ingestion metrics, pipeline performance, and Splunk health dashboards.
• Participate in incident response and RCA for data ingestion or Splunk-related issues.
• Maintain detailed technical documentation, SOPs, and runbooks for Splunk/Cribl operations.

• Deep experience with Splunk Enterprise and Cribl data pipelines, including Cribl Stream and Cribl Edge.
• Strong scripting and automation skills to manage large-scale data flows securely and efficiently.
• Experience configuring and tuning Splunk indexers, forwarders, and search heads for large-scale environments.
• Ability to design, implement, and optimize data ingestion pipelines from multiple data sources into Splunk via Cribl Stream.
• Knowledge of data governance policies and compliance with security and retention requirements.
• Experience collaborating with security, Dev Ops, and infrastructure teams to troubleshoot data flow issues.
• Experience with Cribl pipelines, sources, destinations, pack configurations, Cribl APIs, and Splunk scripts for automation.
• Ability to monitor and report on data ingestion metrics, pipeline performance, and Splunk health dashboards.
• Experience in incident response and root cause analysis for data ingestion or Splunk-related issues.
• Strong technical documentation, SOPs, and runbooks for Splunk/Cribl operations.