GovCIO
GovCIO

Cribl Engineer

• Posted 26 days ago • Updated 5 hours ago
Full Time
USD 60.00 per day
Company Branding Image
Fitment

Dice Job Match Score™

⭐ Evaluating experience...

Job Details

Skills

  • Recruiting
  • Data Centers
  • Data Collection
  • Change Control
  • Scalability
  • Routing
  • Workflow
  • Data Quality
  • Ansible
  • Continuous Integration
  • Continuous Delivery
  • GitLab
  • Jenkins
  • Terraform
  • Dashboard
  • Onboarding
  • Break/Fix
  • Clustering
  • Performance Tuning
  • SEO
  • Forecasting
  • Capacity Management
  • Root Cause Analysis
  • Documentation
  • Regulatory Compliance
  • TLS
  • Management
  • Google Cloud Platform
  • Google Cloud
  • Disaster Recovery
  • Testing
  • Replication
  • Failover
  • Collaboration
  • Data Retention
  • Privacy
  • Continuous Improvement
  • Knowledge Sharing
  • Security Clearance
  • Splunk
  • Cloud Computing

Summary

GovCIO is currently hiring for Cribl Engineer to support our Administrative Office of the US Courts NLS project. The NLS currently ingest an average of 18-20TB of logging data daily across 60 indexers distributed in 2 data centers. This position is located within the United States and is fully remote.

Responsibilities

  • Develop apply best practices and tools for data ingestion, indexing, and management to optimize data sources and refine data collection processes to capture only pertinent data.
  • Plan and perform Cribl platform upgrades (Leader, Worker, and Edge nodes) following defined change control procedures.
  • Manage and optimize the Cribl distributed infrastructure, ensuring scalability, stability, and efficient data routing.
  • Continuously monitor Cribl performance, including throughput, queue depth, and worker health metrics.
  • Develop and maintain Cribl pipelines for new data sources, implementing filtering, sampling, and enrichment logic.
  • Migrate existing Splunk forwarder-based data inputs to Cribl for improved control and flexibility.
  • Build and maintain Cribl Packs for standardized configurations across multiple environments.
  • Implement data reduction and enhancement workflows to minimize ingestion volume and improve data quality.
  • Maintain and enhance Ansible playbooks for automated deployments, configurations, and upgrades.
  • Integrate GitOps CI/CD pipelines (e.g., GitLab, Jenkins, Terraform) to manage configuration-as-code for both Splunk and Cribl.
  • Develop, test, and review merge requests related to dashboards, alerts, saved searches, and data onboarding pipelines.
  • Perform Splunk core upgrades (indexers, search heads, cluster masters, deployers) ensuring backward compatibility and minimal downtime.
  • Upgrade and validate Splunk Add-ons and Apps, maintaining functionality and CIM compliance.
  • Develop and maintain custom props, transforms, eventtypes, and lookups to normalize data consistently.
  • Ensure CIM compliance for all add-ons and sourcetypes used across the platform.
  • Handle escalations from Operations and perform deep-dive troubleshooting on ingestion, parsing, or performance issues.
  • Perform break/fix analysis on Splunk core services such as KVStore, clustering, deployment server, and scheduler.
  • Conduct performance tuning for search optimization, bucket management, and scheduler balancing across SHC.
  • Design and maintain retention, archival, and index management strategies to align with business and compliance goals.
  • Manage license allocation, volume forecasting, and capacity planning across indexer clusters.
  • Develop and maintain monitoring and alerting integrations for Cribl and Splunk infrastructure health.
  • Collaborate with Operations on incident triage, root cause analysis, and postmortem documentation.
  • Create and maintain runbooks and engineering guides for deployments, upgrades, and troubleshooting.
  • Participate in architecture and design discussions to ensure Splunk and Cribl meet enterprise scaling and reliability needs.
  • Implement security and compliance controls including token rotation, TLS configurations, and secret management via Vault or Google Cloud Platform Secret Manager.
  • Perform disaster recovery testing and validate replication and failover processes across clusters.
  • Collaborate with governance teams to align on data retention, anonymization, and privacy requirements.
  • Support continuous improvement by analyzing ingestion efficiency, performance benchmarks, and automation opportunities.
  • Lead knowledge-sharing sessions and technical handoffs with Operations for newly deployed features or pipelines.

Qualifications

Bachelor's with 8+ years (or commensurate experience)



Required Skills and Experience

  • 3 years of experience with Cribl data engine
  • Understanding of Data from a Security Perspective


Clearance Required: Must be able to attain and maintain AOPublic Trust

Preferred Skills and Experience
  • Cribl Admin Cert
  • Experience in a Splunk Environment
  • Cloud Experience

Posted Salary Range

USD $105,000.00 - USD $145,000.00 /Yr.
Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 10443217
  • Position Id: 8373
  • Posted 26 days ago

Company Info

About GovCIO

GovCIO is a rapidly growing provider of advanced technology solutions and digital services for the federal government. Combining our extensive federal experience with the latest innovations in IT and disruptive approaches, our experts develop comprehensive solutions to meet the most pressing demands of today’s government agencies. From the U.S. military to Health and Human Services, we have an impressive track record of helping our customers optimize how they operate.

We’re transforming government IT, empowering our federal customers to meet the challenges of today while building the government of tomorrow.

About_Company_One
Go to company profile
Create job alert
Set job alertNever miss an opportunity! Create an alert based on the job you applied for.

Similar Jobs

Senior Data Engineer

No location provided

•

Today

Full-time

USD 195,000.00 - 225,000.00 per year

Technical PM / Senior Technical Consultant

No location provided

•

Today

Full-time

USD 195,000.00 - 225,000.00 per year

Senior Solution Engineer

No location provided

•

Today

Full-time

USD 175,000.00 - 180,000.00 per year

ServiceNow / ENT Tools Lead

No location provided

•

Today

Full-time

USD 155,000.00 - 165,000.00 per year

Search all similar jobs