Senior Logging and Monitoring Engineer

Summary

Senior Logging and Monitoring Engineer Responsible for operating and improving enterprise observability and security telemetry platforms at a Round Rock, TX client. Works deeply with Cribl, Elastic, and Corelight to build reliable data pipelines, troubleshoot complex data flow issues, and improve platform performance and resilience. Balances execution with technical leadership, acting as a trusted contributor and mentor within the engineering team.

• Design, support, and optimize log and telemetry pipelines using Cribl, including routing logic, transformations, enrichment, and performance tuning
• Engineer and operate Elastic environments, performing advanced troubleshooting, ingest pipeline tuning, index lifecycle management, and platform health monitoring
• Support and enhance Corelight NDR deployments, including sensor operations, data validation, and integration with downstream analytics platforms
• Lead troubleshooting efforts for complex logging and pipeline issues across ingestion, transport, parsing, and storage layers
• Perform and guide platform lifecycle activities including upgrades, scaling, capacity planning, and configuration management
• Own log onboarding efforts for new applications and infrastructure, working directly with partner teams to define requirements and validate data quality
• Contribute to standards, onboarding patterns, and operational best practices that improve platform reliability and consistency
• Provide operational support during incidents and maintenance windows, serving as a technical escalation point for less experienced engineers
• Mentor mid-level engineers and review configurations and changes to ensure quality and adherence to platform standards

• 5-7 years of hands‑on experience operating enterprise logging, monitoring, or security telemetry platforms
• Strong hands‑on experience with Cribl, including pipeline design, tuning, troubleshooting, and operational support
• Strong experience administering and engineering Elastic platforms, including ingestion architecture, performance optimization, and reliability troubleshooting
• Experience supporting network telemetry or NDR technologies, such as Corelight or equivalent tools
• Advanced Linux and Windows system administration skills
• Proficiency in Bash, Python, or similar scripting languages for automation, tooling, and operational efficiency
• Experience operating logging and monitoring platforms in large‑scale, cloud, hybrid, or highly distributed environments
• Strong understanding of observability and security telemetry concepts, including data health, throughput, latency, and retention

The pay range is the lowest to highest compensation we reasonably in good faith believe we would pay at posting for this role. We may ultimately pay more or less than this range. Employee pay is based on factors like relevant education, qualifications, certifications, experience, skills, seniority, location, performance, union contract and business needs. This range may be modified in the future.

We offer comprehensive benefits including medical/dental/vision insurance, HSA, FSA, 401(k), and life, disability & ADD insurance to eligible employees. Salaried personnel receive paid time off. Hourly employees are not eligible for paid time off unless required by law. Hourly employees on a Service Contract Act project are eligible for paid sick leave.

Kforce is an Equal Opportunity/Affirmative Action Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, protected veteran status, or disability status.