Cribl Engineer – Cloud Telemetry Data Pipelines

About the role

The Cribl Engineer will design, deploy, and operate telemetry data pipelines using Cribl Stream in a cloud‑centric environment. You will enable reliable, scalable, and cost‑efficient log ingestion and routing to SIEM and observability platforms, supporting detection engineering and operational excellence.

Key responsibilities

• Design, build, and maintain Cribl Stream pipelines (routes, parsing, filtering, transformation).
• Manage log ingestion and routing to downstream platforms such as Google SecOps, Splunk, or other SIEMs.
• Optimize pipelines for performance, cost efficiency, and reliability.
• Troubleshoot and resolve data‑flow, ingestion, and pipeline issues in production.
• Implement automation using infrastructure‑as‑code tools (Terraform, CloudFormation) and CI/CD pipelines.
• Operate within AWS and/or multi‑cloud environments, integrating Cribl with cloud‑native services and enterprise systems.
• Collaborate with detection engineers, DREs, and platform teams to ensure data availability for detection and compliance use cases.
• Monitor pipeline health and ensure adherence to operational SLAs.

Required profile

• Hands‑on experience with Cribl Stream (pipelines, routes, packs, edge/workers).
• Experience with log management, observability, and telemetry pipelines.
• Strong knowledge of log formats and parsing (JSON, syslog, regex).
• Experience with cloud platforms (AWS preferred; Azure/GCP acceptable).
• Solid understanding of Linux/Unix environments.
• Scripting experience (Python, Bash).
• Proven ability to troubleshoot data ingestion and pipeline performance issues.

Required skills

• Cribl Stream
• AWS, Azure, GCP
• Linux/Unix
• Python, Bash
• Terraform, CloudFormation
• CI/CD pipelines
• Docker, Kubernetes
• SIEM platforms (Google SecOps, Splunk, Elastic)
• JSON, syslog, regex