Cribl Engineer Expert - JB

Job Description

The most security‑conscious organizations trust Telos Corporation to protect their vital IT assets. The reputation of our company rests on the quality of our solutions and the integrity of our people. Explore what you can bring to our solutions in the areas of cyber, cloud and enterprise security.

Salary range: $ - $. Telos offers an excellent compensation package with benefits that include generous paid time off, medical, dental, vision, tuition reimbursement, and 401k.

This position will be based at Reston, VA.

We are seeking a highly experienced Cribl Engineer to serve as the principal technical authority for observability pipelines built on Cribl Stream and Cribl Edge. This role is designed for a senior technologist with deep expertise in log/telemetry routing, large‑scale data engineering, and enterprise‑grade observability architectures.

• Lead architecture and design for Cribl Stream/Edge across multiple enclaves and data domains.
• Build high‑throughput pipelines (multiTB/day) with advanced routing, filtering, enrichment, and replay workflows.
• Optimize system performance, worker topology, CPU/memory distribution, queues, and transport mechanisms.
• Engineer secure data flows with masking, tokenization, RBAC, PKI/TLS, and other governance controls.
• Integrate pipelines with SIEM/analytics ecosystems (Splunk, Elastic, SaaS telemetry platforms, cloud services).
• Develop HA/DR patterns, reliability frameworks, fleet health metrics, and failure‑mode response processes.
• Maintain reusable Cribl packs, shared patterns, runbooks, and operational standards.
• Serve as the senior escalation point for Cribl issues; interface with vendor engineering as required.
• Mentor engineers, conduct design reviews, drive engineering excellence, and enforce architectural standards.
• Support cross‑functional teams (security, cloud, analytics, infrastructure) on logging and telemetry strategy.

• Current TS/SCI w/CI Poly security clearance.
• 10+ years of experience in logging, observability, or SIEM engineering.
• 5+ years architecting enterprise‑scale log/telemetry pipelines.
• 3+ years hands‑on with Cribl Stream and Cribl Edge in production environments.
• Demonstrated success operating and scaling pipelines at 5–10+ TB/day.
• Expert‑level experience with Splunk forwarding/ingestion, source type management, and indexing practices.
• Strong Linux fundamentals; scripting expertise (Python/Bash);
  Git; automation (Ansible/Terraform).
• Strong understanding of transport protocols (HTTP, TCP, TLS/MTLS), Kafka, S3/object storage.
• Experience designing secure data flows, including encryption, RBAC, secrets management, and compliance controls.
• Demonstrated ability to mentor senior engineers and lead technical decision making.
• Certified Cribl Certified Engineer (CCOE) or equivalent Cribl product expertise.
• Must possess the following DoD 8570.01‑M certifications or be willing to obtain within 30 days of hire:
  • IAT Level II certification (currently Security+ CE, CCNA‑Security, GSEC, SSCP, CySA+, GICSP, or CND).
  • IAT Level III certification (currently CASP+ CE, CCNP Security, CISA, CISSP (or Associate), GCED, or GCIH).
  • CSSP – Infrastructure Support (IS) certification (currently CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND).

• Expertise creating and maintaining Cribl Packs and reusable pipelines.
• Experience with cloud telemetry (AWS, Azure, hybrid) and cross‑domain data movement patterns.
• Familiarity with NIST/CIS control frameworks and secure engineering practices.
• Experience building observability frameworks for large distributed systems.
• Vendor engagement experience (Cribl PS, product teams, troubleshooting escalations).

The successful candidate must meet eligibility requirements to access sensitive information, which requires US citizenship.

Telos maintains a drug‑free workplace and will conduct drug testing on all applicants who have accepted an offer of employment.

Telos Corporation participates in the E‑Verify program. Therefore, any employment with Telos will also be contingent upon confirmation from the Social Security Administration ("SSA") and/or the Department of Homeland Security…