Splunk Consultant

Position: Splunk / Cribl Technology Consultant

Availability: Immediate

Employment Type: Full-Time, Permanent Contract

Preferred Security Clearance: SC

Sector: Diverse Public/Private Sectors

Compensation: Depending on Experience, plus travel expenses

Location: Remote Work; occasional client visits required across the UK.

Eligibility: Open to UK Nationals only.

Overview:

With the incredible expansion and surge in workload, On behalf of our client Osiris Recruitment is in need of a Splunk / Cribl Technology Consultant. This customer-facing role will involve providing consultancy and professional services to their Splunk and Cribl clients, while also collaborating with their commercial team to determine project scope and outcomes.

Primary Responsibilities:

• Collaborate with clients to develop strategic and practical solutions to their distinctive data and technology issues.
• Enable customers to take on future data & analytics problems by providing ongoing support throughout their journey.
• Assist in pre-sales initiatives, customer presentations, and other activities aimed at client acquisition.
• Foster the realization of business value and benefits for customers through effective implementation of partnered technologies.
• Liaise with the client organization to equip product and technical teams with solutions that foster innovation and meet customer needs.
• Provide advice on architectural best practices, keeping customer design authority in mind.
• Integrate technical and commercial aspects while applying a strategic mindset.
• Develop best practice procedures for monitoring on-premises and cloud applications, infrastructure, and security.
• Invest in self-development to keep pace with product and technological advancements.

Required Skills and Experience:

• Proven experience in designing and implementing distributed Splunk or Cribl systems, adhering to best practices for on-premises and Cloud-based deliveries.
• Proficiency in SPL, with the capacity to construct complex, efficient queries.
• Familiarity with regular expressions.
• Expertise in data onboarding activities including custom parsing rules, custom TAs, props, transforms, and adherence to the Common Information Model (CIM).
• Strong command of Operating Systems (Windows, Linux), comfortable with command-line operations.
• Experience in creating custom Splunk content including scheduled searches, reports, dashboards, and alerts.
• Awareness of automation technologies (Terraform, Ansible, and Puppet).

Preferred Skills and Certifications:

• Experience in designing and deploying distributed Cribl systems, following Cribl's best practice methodology for on-premises and Cloud-based deliveries.
• Splunk and/or Cribl certifications (User, Power User, Admin, Architect, ES Admin, Implementing ITSI, Observability Suite).
• Proficiency in scripting languages (bash, perl, python), application development (java, .NET), databases and analytical tools.
• Experience with containerized solutions (Docker, Openshift, Kubernetes) and Cloud-based services (AWS, Azure, GCP).
• Experience in maintaining and administering enterprise-scale implementations.
• Development and API experience (Python, REST, XML)
• Existing security clearance (SC/DV) or the ability to acquire it.

Required Certifications:

• Splunk Certified Architect

Desired Certifications:

• Splunk Core Certified Consultant
• Cribl Certified Observability Engineer User
• Cribl Certified Observability Engineer Administrator