Cribl Engineer with TS/SCI

Maania Consultancy Services • Reston, VA

22h • Onsite

About The Position

We are seeking a highly skilled Cribl Engineer with TS/SCI clearance to join our team. This role involves architecting, implementing, and managing enterprise-scale log and telemetry pipelines. The ideal candidate will have extensive experience with Cribl Stream and Edge, Splunk, and strong Linux and automation skills. You will be responsible for designing secure data flows, mentoring engineers, and ensuring the operational excellence of our observability solutions.

Requirements

• 10+ years of experience in logging, observability, or SIEM engineering.
• 5+ years architecting enterprise-scale log/telemetry pipelines.
• 3+ years hands-on with Cribl Stream and Cribl Edge in production environments.
• Demonstrated success operating and scaling pipelines at 5–10+ TB/day.
• Expert-level experience with Splunk forwarding/ingestion, source type management, and indexing practices.
• Strong Linux fundamentals.
• Scripting expertise (Python/Bash).
• Experience with Git.
• Experience with automation tools (Ansible/Terraform).
• Strong understanding of transport protocols (HTTP, TCP, TLS/MTLS), Kafka, S3/object storage.
• Experience designing secure data flows, including encryption, RBAC, secrets management, and compliance controls.
• Demonstrated ability to mentor senior engineers and lead technical decision making.
• Cribl Certified Engineer (CCOE) or equivalent Cribl product expertise.
• Ability to obtain a DoD 8570 IAT Level III Certification (e.g., Security+ (formerly CASP+), CCNP Security, CISA, CISSP (or Associate), GCED, GCIH, CCSP) within 30 days of start date.
• Ability to obtain a DoD 8570 Cybersecurity Service Provider - Infrastructure Support Certification (CSSP-IS) (e.g., CEH, CySA+, GICSP, SSCP, CHFI, CFR, Cloud+, or CND) within 30 days of start date.

Nice To Haves

• Expertise creating and maintaining Cribl Packs and reusable pipelines.
• Experience with cloud telemetry (AWS, Azure, hybrid) and cross‑domain data movement patterns.
• Familiarity with NIST / CIS control frameworks and secure engineering practices.
• Experience building observability frameworks for large distributed systems.
• Vendor engagement experience (Cribl PS, product teams, troubleshooting escalations).

Responsibilities

• Architect enterprise-scale log/telemetry pipelines.
• Implement and manage Cribl Stream and Cribl Edge in production environments.
• Operate and scale pipelines at 5-10+ TB/day.
• Manage Splunk forwarding, ingestion, source type management, and indexing practices.
• Develop and maintain secure data flows, including encryption, RBAC, secrets management, and compliance controls.
• Mentor senior engineers and lead technical decision-making.
• Obtain required DoD 8570 certifications (IAT Level III and CSSP-IS) within 30 days of the start date.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed