Job Title: Cribl Architect

Company Name: Scicom Infrastructure Services

Job Details: Be,an,Early,Applicant,Hiring,Remotely,in,Atlanta,,GA,In-Office,or,Remote,Senior,level

Job Url: https://builtin.com/job/cribl-architect/8017689

Job Description: The Cribl Architect is responsible for the end-to-end design, implementation, optimization, and operational support of Cribl Stream, Cribl Edge, and Cribl Search within enterprise logging, observability, and security ecosystems. This role serves as a technical authority and hands-on practitioner, ensuring scalable, secure, and cost-efficient telemetry pipelines while supporting business and operational objectives.The ideal candidate has deep experience across architecture design, platform implementation, and production operations, and acts as a trusted advisor to engineering, security, and business stakeholders.Key Responsibilities:Architecture & DesignDesign enterprise-grade Cribl architectures (on-prem, cloud, hybrid, and containerized environments)Define scalable, resilient, and secure data pipeline architectures for logs, metrics, and tracesDevelop routing strategies for multi-destination outputs (Splunk, Elastic, Datadog, OpenSearch, S3, SIEMs, etc.)Establish high availability, load balancing, and failover strategiesEnsure alignment with security, compliance, and data governance requirementsImplementation & EngineeringLead Cribl Stream, Edge, and Search implementations from design through productionBuild and maintain pipelines, packs, routing rules, and enrichment logicIntegrate Cribl with cloud services (AWS, Azure, GCP), Kubernetes, and enterprise platformsPerform data filtering, masking, transformation, and normalizationValidate architecture and implementations through testing and performance tuningOperations & SupportProvide production-level operational support for Cribl environmentsMonitor system health, throughput, latency, and data integrityTroubleshoot pipeline failures, ingestion issues, and performance bottlenecksEstablish operational runbooks, SOPs, and alertingSupport upgrades, patching, and platform lifecycle managementCost Optimization & GovernanceDrive observability and SIEM cost optimization strategiesImplement data reduction, sampling, and routing controlsProvide usage reporting and cost-impact analysisEnforce governance standards across telemetry ingestionCollaboration & LeadershipPartner with Security, SRE, Platform, DevOps, and Application teamsTranslate business requirements into technical solutionsProvide technical guidance and mentoring to engineers and administratorsCommunicate risks, readiness, and progress to stakeholders and leadershipRequired Qualifications:Experience5+ years in logging, observability, or telemetry platforms3+ years hands-on experience with Cribl Stream (Edge and Search strongly preferred)Proven experience with architecture design, implementation, and operationsExperience supporting large-scale, production environmentsStrong background in Linux, networking, and distributed systemsTechnical SkillsCribl Stream pipelines, packs, routes, and functionsSIEM and observability platforms (Splunk, Elastic, Datadog, OpenSearch, etc.)Cloud platforms: AWS, Azure, and/or GCPKubernetes and containerized workloadsInfrastructure as Code (Terraform, CloudFormation preferred)Scripting (Python, Bash, or similar)REST APIs and data formats (JSON, syslog, OpenTelemetry)Certifications (Required)Cribl Certified Administrator (CCA) – RequiredCribl Certified Architect (CCA-A) – RequiredPreferred / Additional CertificationsSplunk Enterprise Certified Architect or AdminAWS Certified Solutions Architect (Associate or Professional)Azure Solutions Architect ExpertKubernetes (CKA or CKAD)ITIL Foundation or higherSoft SkillsStrong analytical and troubleshooting skillsExcellent written and verbal communicationAbility to lead technical discussions with non-technical stakeholdersHighly organized with strong documentation habitsComfortable operating in fast-paced, high-impact environmentsNice-to-Have ExperienceSOC or Security Operations environmentsOpenTelemetry implementationsData privacy and compliance (HIPAA, PCI, SOX, GDPR)Consulting or MSP delivery models