Cribl Application Support Engineer - REMOTE

Select how often (in days) to receive an alert:
Create Alert

Date: Sep 25, 2026

Location: Frisco, TX, US

Company: NTT DATA Services

NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization.

We are currently seeking a Cribl Application Support Engineer - REMOTE to join our team in Frisco, Texas (US-TX), United States (US).

• Provide L2/L3 production support/administration for the Cribl platform, primarily Cribl Stream
  .
• Monitor Cribl Leader Nodes, Worker Nodes, Worker Groups, Sources, Destinations, Routes, Pipelines, and overall platform health
  .
• Troubleshoot Cribl application/service failures, data-flow issues, and connectivity problems.
• Investigate issues where logs/events are not received, delayed, dropped, incorrectly routed, or not reaching the target destination
  .
• Configure and troubleshoot Sources, Destinations, Routes, Pipelines, Packs, and Functions
  .
• Perform Cribl service start/stop, configuration changes, deployments, maintenance, and health checks.
• Investigate alerts and production incidents using Cribl logs, monitoring dashboards, and OS logs
  .
• Perform Root Cause Analysis (RCA) for recurring or critical incidents.
• Support Cribl installation, configuration, patching, upgrades, and maintenance activities.
• Troubleshoot issues across Linux/Unix servers, network connectivity, file system, CPU, memory, disk space, and system resources
  .
• Troubleshoot TCP/IP, DNS, ports, firewall, certificates, SSL/TLS, and source-to-destination connectivity issues.
• Monitor and troubleshoot data throughput, queues, back pressure, and performance-related issues.
• Support integrations between Cribl and enterprise platforms such as Splunk, Elastic, Kafka, Syslog, Microsoft Sentinel, AWS, Azure, and other SIEM/observability platforms
  .
• Write and maintain Shell/Python scripts for monitoring, health checks, log analysis, reporting, and operational automation.
• Handle incident/change/problem/service-request tickets using ITSM processes.
• Maintain SOPs, runbooks, operational documentation, and knowledge articles.
• Participate in on-call/production support and major incident troubleshooting as required.
• Coordinate with infrastructure, network, security, SIEM/observability, and application teams for issue resolution.
• Coordinate with Cribl/vendor support for complex product-level issues.

5+ years Administration, configuration, monitoring and troubleshooting

5+ years Leader Nodes, Worker Nodes, Worker Groups, Sources, Destinations, Routes, Pipelines and Packs

5+ years Log ingestion, routing, filtering, parsing, transformation, enrichment and troubleshooting

5+ years command-line and system troubleshooting

5+ years Bash/Korn Shell scripting and operational automation

5+ years Basic-to-intermediate scripting for support automation

5+ years Log parsing, filtering, data extraction and troubleshooting

5+ years knowledge for Cribl functions, expressions and data transformations

5+ years TCP/IP, DNS, ports, firewall, SSL/TLS and connectivity troubleshooting

5+ years knowledge of Splunk, Elastic, Sentinel or similar platforms

5+ years Incident, Change, Problem and Service Request management

• Hands-on experience with Cribl Stream administration and production support
  .
• Experience configuring and troubleshooting Sources, Destinations, Routes, Pipelines and Packs
  .
• Understanding of Cribl Leader and Worker architecture and Worker Group management.
• Experience with Splunk and/or Elastic Stack
  .
• Knowledge of Kafka, Syslog, REST APIs and HTTP-based integrations
  .
• Experience with AWS/Azure logging and…