Mid-Level Cribl Engineer

Mid-Level Cribl Engineer

Location:

Reston, VA Required Clearance:
Active TS/SCI with Polygraph

Employment Type:

Full-Time Regular Shift: Day Travel:
No Relocation Assistance:
Yes

Company Overview

We are Ennoble First. The people supporting and securing some of the most complex government, defense, and intelligence projects across the country. We ensure today is safe and tomorrow is smarter. Our work has meaning and impact on the world around us, but also on us, and that's important. Ennoble First is your place. You make it your own by embracing autonomy, seizing opportunity, and being trusted to deliver your best every day.

We think. We act. We deliver. There is no challenge we can't turn into an opportunity.

Position Overview

Ennoble First is seeking a Mid-Level Cribl Engineer to support an Intelligence Community customer in Reston, Virginia. This hands-on engineering role focuses on the design, administration, optimization, and support of Cribl Stream and Cribl Edge within enterprise logging and SIEM environments. The Cribl Engineer will work with technical and cybersecurity teams to manage data pipelines, integrate logging sources and destinations, optimize data routing and transformation, troubleshoot complex ingestion issues, and automate platform operations across secure enterprise environments.

Primary Responsibilities

• Administer and engineer Cribl Stream and Cribl Edge in enterprise production environments.
• Configure and manage Cribl sources, destinations, routes, collectors, and pipelines.
• Design and maintain data pipelines supporting enterprise logging, monitoring, and SIEM environments.
• Route, filter, transform, parse, enrich, and optimize log and security data as it moves between source systems and downstream platforms.
• Support integration of Cribl with enterprise SIEM, security, observability, and logging platforms.
• Troubleshoot data ingestion, routing, parsing, transformation, and performance issues.
• Develop and maintain Regex and JavaScript used for data processing and transformation.
• Support Cribl deployments and operations within Linux environments.
• Develop scripts and automation using Python and Bash.
• Use automation and Infrastructure as Code tools such as Ansible and Terraform to support repeatable platform deployment and configuration.
• Monitor and optimize platform performance, reliability, scalability, and data flow.
• Collaborate with cybersecurity, infrastructure, cloud, and engineering teams to address logging and data-management requirements.
• Develop and maintain technical documentation, configuration information, and operational procedures.

Required Qualifications

• 3–5 years of experience in information technology.
• 2–5 years of hands-on experience operating and managing Cribl Stream and/or Cribl Edge in production environments.
• 2+ years of experience administering or engineering enterprise SIEM or logging environments.
• Experience designing and managing data pipelines, including routing, filtering, parsing, transformation, and enrichment.
• Experience integrating Cribl with enterprise SIEM, logging, security, or observability platforms.
• Experience using Regex and JavaScript for data processing and transformation.
• Experience administering and troubleshooting Linux environments.
• Experience with scripting and automation using Python and/or Bash.
• Experience with automation or Infrastructure as Code technologies such as Ansible and Terraform.
• Active Cribl certification.
• Ability to obtain a qualifying CSSP-IS certification within 30 days of offer acceptance, such as CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND.
• Ability to obtain a qualifying IAT Level III certification within 45 days of obtaining the CSSP-IS certification, or within 45 days of offer acceptance if already CSSP-IS qualified. Qualifying certifications include SecurityX (formerly CASP+), CCNP Security, CISA, CISSP or Associate of ISC2, GCED, GCIH, or CCSP.

Preferred Qualifications

• Experience supporting Intelligence Community or other classified environments.
• Experience with enterprise security monitoring and observability architectures.
• Experience automating Cribl deployments and configuration management.
• Strong troubleshooting and analytical…