> Markdown version of [/jobs/ext/1163641-cribl-engineer-cloud-engineer](https://www.wearedevelopers.com/jobs/ext/1163641-cribl-engineer-cloud-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cribl Engineer \ Cloud Engineer - **Company:** UST - **Location:** Nottingham, UK - **Contract:** Permanent contract - **Skills:** Amazon Web Services, JIRA, Microsoft Azure, Bash Shell, Cloud Engineering, Cyber Security, Data Loss, Intrusion Detection and Prevention, JSON, Python (Programming Language), Parsing, Regular Expressions, Security Information and Event Management, Data Streaming, Syslog, Scripting, Enterprise Software Applications, Data Ingestion, System Availability, Multi-Cloud, Cloudformation, Containerization, Kubernetes, Deployment Automation, Cloud Migration, Terraform, Splunk, Serverless Computing, Docker, Servicenow - **Published:** July 3, 2026 - **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=2854468329-2 ## About the Role * Hands-on experience with Cribl Stream (pipelines, routes, packs, edge/workers). * Experience with log management / observability / telemetry pipelines. * Strong knowledge of log formats and parsing (e.g., JSON, syslog, regex). * Experience with cloud platforms (AWS preferred; Azure/GCP acceptable). * Solid understanding of Linux/Unix environments. * Scripting experience (e.g., Python, Bash). * Experience troubleshooting data ingestion and pipeline performance issues. Preferred Qualifications: * Experience with SIEM platforms (Google SecOps/Chronicle, Splunk, Elastic). * Familiarity with containerization/orchestration (Docker, Kubernetes). * Experience with infrastructure-as-code and deployment automation. * Exposure to high-volume telemetry environments and cost optimization strategies. * Understanding of security telemetry, detection engineering, or SOC workflows. Key Outcomes / Measures of Success: * Reliable and consistent log ingestion with minimal data loss. * Improved pipeline performance and reduced ingestion cost. * Timely resolution of data flow and onboarding issues. * Scalable and maintainable cloud-based telemetry architecture. * Alignment of telemetry pipelines to detection, audit, and compliance requirements. ## Description The Cribl Engineer is responsible for designing, deploying, and operating telemetry data pipelines using Cribl Stream in a cloud-centric environment. This role focuses on enabling reliable, scalable, and cost-efficient log ingestion and routing across SIEM and observability platforms, supporting detection engineering, audit, and operational excellence objectives., * Design, build, and maintain Cribl Stream pipelines (routes, parsing, filtering, transformation). * Manage log ingestion and routing to downstream platforms (e.g., Google SecOps, Splunk, or other SIEMs). * Optimize pipelines for performance, cost efficiency, and reliability. * Troubleshoot and resolve data flow, ingestion, and pipeline issues in production. * Implement automation using infrastructure-as-code (Terraform, CloudFormation) and CI/CD pipelines. * Operate within AWS and/or multi-cloud environments, supporting scalable telemetry processing. * Integrate Cribl with cloud-native services and enterprise systems. * Collaborate with Detection Engineers, DREs, and platform teams to ensure data availability aligns with detection and compliance use cases. * Monitor pipeline health and ensure adherence to operational SLAs and reliability standards. * Apply security and compliance best practices for log handling and transmission. * Experience supporting large-scale migrations highly desired (e.g., SIEM or log pipeline transformations), * Operates as part of a globally distributed engineering team (US, India, LATAM). * Participates in onboarding, migration, and optimization initiatives (e.g., Cribl upgrades, Cloud migrations). * Works within defined operational rhythms, ticketing (ServiceNow/Jira), and engineering standards. ## Related Videos - [Improving quality with Agentic AI with Rovo Dev and Xray](https://www.wearedevelopers.com/videos/2005-improving-quality-with-agentic-ai-with-rovo-dev-and-xray) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [Enabling automated 1-click customer deployments with built-in quality and security](https://www.wearedevelopers.com/videos/83-enabling-automated-1-click-customer-deployments-with-built-in-quality-and-security) - [Collaboration Quantified: Lessons from Open Source Developer Networks](https://www.wearedevelopers.com/videos/1422-collaboration-quantified-lessons-from-open-source-developer-networks) - [Flex your Energy: Building a Cloud-Native Platform for Renewable Energy Communities](https://www.wearedevelopers.com/videos/1990-flex-your-energy-building-a-cloud-native-platform-for-renewable-energy-communities) ## Related Articles - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london) - [Fullstack Developer Salary UK](https://www.wearedevelopers.com/magazine/251-fullstack-developer-salary-uk) - [Software Engineer Salary in The UK](https://www.wearedevelopers.com/magazine/231-software-engineer-salary-in-the-uk)