Splunk Consultant

Osiris Recruitment; Remote; GBP 60,000 - 80,000; Full time

Job summary

A recruitment agency is seeking a Splunk / Cribl Technology Consultant to provide consultancy and professional services to clients. This role involves collaborating with customers to address data and technology challenges while assisting in pre-sales and client acquisition efforts. The ideal candidate will have proven experience in Splunk or Cribl systems, strong command of SPL, and familiarity with automation technologies. The position allows for remote work with occasional client visits across the UK.

Qualifications

• Proven experience in designing and implementing distributed Splunk or Cribl systems.
• Strong command of Operating Systems (Windows, Linux).
• Experience in creating custom Splunk content including scheduled searches, reports, and dashboards.

Responsibilities

• Collaborate with clients to develop strategic solutions to their data and technology issues.
• Enable customers to tackle future data & analytics problems.
• Assist in pre-sales initiatives and customer presentations.

Skills

Designing and implementing distributed Splunk or Cribl systems

Proficiency in SPL

Familiarity with regular expressions

Expertise in data onboarding activities

Command-line operations on Windows and Linux

Creating custom Splunk content

Automation technologies (Terraform, Ansible, Puppet)

Education

Splunk Certified Architect

Tools

Docker

Openshift

Kubernetes

AWS

Azure

GCP

Job description

Availability: Immediate

Employment Type: Full-Time, Permanent Contract

Preferred Security Clearance: SC

Sector: Diverse Public/Private Sectors

Location: Remote Work; occasional client visits required across the UK.

Eligibility: Open to UK Nationals only.

Overview:

With the incredible expansion and surge in workload, On behalf of our client Osiris Recruitment is in need of a Splunk / Cribl Technology Consultant. This customer-facing role will involve providing consultancy and professional services to their Splunk and Cribl clients, while also collaborating with their commercial team to determine project scope and outcomes.

Primary Responsibilities:

• Collaborate with clients to develop strategic and practical solutions to their distinctive data and technology issues.
• Enable customers to take on future data & analytics problems by providing ongoing support throughout their journey.
• Assist in pre-sales initiatives, customer presentations, and other activities aimed at client acquisition.
• Foster the realization of business value and benefits for customers through effective implementation of partnered technologies.
• Liaise with the client organization to equip product and technical teams with solutions that foster innovation and meet customer needs.
• Provide advice on architectural best practices, keeping customer design authority in mind.
• Integrate technical and commercial aspects while applying a strategic mindset.
• Develop best practice procedures for monitoring on‑premises and cloud applications, infrastructure, and security.
• Invest in self‑development to keep pace with product and technological advancements.

Required Skills and Experience:

• Proven experience in designing and implementing distributed Splunk or Cribl systems, adhering to best practices for on‑premises and Cloud‑based deliveries.
• Proficiency in SPL, with the capacity to construct complex, efficient queries.
• Familiarity with regular expressions.
• Expertise in data onboarding activities including custom parsing rules, custom TAs, props, transforms, and adherence to the Common Information Model (CIM).
• Strong command of Operating Systems (Windows, Linux), comfortable with command‑line operations.
• Experience in creating custom Splunk content including scheduled searches, reports, dashboards, and alerts.
• Awareness of automation technologies (Terraform, Ansible, and Puppet).

Preferred Skills and Certifications:

• Experience in designing and deploying distributed Cribl systems, following Cribl's best practice methodology for on‑premises and Cloud‑based deliveries.
• Splunk and/or Cribl certifications (User, Power User, Admin, Architect, ES Admin, Implementing ITSI, Observability Suite).
• Proficiency in scripting languages (bash, perl, python), application development (java, .NET), databases and analytical tools.
• Experience with containerized solutions (Docker, Openshift, Kubernetes) and Cloud‑based services (AWS, Azure, GCP).
• Experience in maintaining and administering enterprise‑scale implementations.
• Development and API experience (Python, REST, XML)
• Existing security clearance (SC/DV) or the ability to acquire it.

Required Certifications:

• Splunk Certified Architect

Desired Certifications:

• Splunk Core Certified Consultant
• Cribl Certified Observability Engineer User
• Cribl Certified Observability Engineer Administrator