Splunk Consultant

Availability:
Immediate

Employment Type:

Full-Time, Permanent Contract

Preferred Security Clearance: SC

Sector:
Diverse Public/Private Sectors

Location:

Remote Work; occasional client visits required across the UK.

Eligibility:
Open to UK Nationals only.

With the incredible expansion and surge in workload, On behalf of our client Osiris Recruitment is in need of a Splunk / Cribl Technology Consultant. This customer-facing role will involve providing consultancy and professional services to their Splunk and Cribl clients, while also collaborating with their commercial team to determine project scope and outcomes.

• Collaborate with clients to develop strategic and practical solutions to their distinctive data and technology issues.
• Enable customers to take on future data & analytics problems by providing ongoing support throughout their journey.
• Assist in pre-sales initiatives, customer presentations, and other activities aimed at client acquisition.
• Foster the realization of business value and benefits for customers through effective implementation of partnered technologies.
• Liaise with the client organization to equip product and technical teams with solutions that foster innovation and meet customer needs.
• Provide advice on architectural best practices, keeping customer design authority in mind.
• Integrate technical and commercial aspects while applying a strategic mindset.
• Develop best practice procedures for monitoring on‑premises and cloud applications, infrastructure, and security.
• Invest in self‑development to keep pace with product and technological advancements.

• Proven experience in designing and implementing distributed Splunk or Cribl systems, adhering to best practices for on‑premises and Cloud‑based deliveries.
• Proficiency in SPL, with the capacity to construct complex, efficient queries.
• Familiarity with regular expressions.
• Expertise in data onboarding activities including custom parsing rules, custom TAs, props, transforms, and adherence to the Common Information Model (CIM).
• Strong command of Operating Systems (Windows, Linux), comfortable with command‑line operations.
• Experience in creating custom Splunk content including scheduled searches, reports, dashboards, and alerts.
• Awareness of automation technologies (Terraform, Ansible, and Puppet).

• Experience in designing and deploying distributed Cribl systems, following Cribl's best practice methodology for on‑premises and Cloud‑based deliveries.
• Splunk and/or Cribl certifications (User, Power User, Admin, Architect, ES Admin, Implementing ITSI, Observability Suite).
• Proficiency in scripting languages (bash, perl, python), application development (java, .NET), databases and analytical tools.
• Experience with containerized solutions (Docker, Openshift, Kubernetes) and Cloud‑based services (AWS, Azure, GCP).
• Experience in maintaining and administering enterprise‑scale implementations.
• Development and API experience (Python, REST, XML)
• Existing security clearance (SC/DV) or the ability to acquire it.

• Splunk Certified Architect

• Splunk Core Certified Consultant
• Cribl Certified Observability Engineer User
• Cribl Certified Observability Engineer Administrator