Splunk Consultant

Splunk Architect / Senior Splunk Consultant

Location: Southern UK preferred, ideally below Birmingham

Working Pattern: Hybrid with travel to client sites as required

Type: Permanent

Clearance: UK National with active SC or DV Clearance

Tektora are supporting an established IT Consultancy who are looking to speak with experienced Splunk Architects / Senior Splunk Consultants for a permanent opportunity supporting secure public sector and central government programmes.

This role would suit someone with strong Splunk architecture, design and delivery experience who has worked across secure environments and understands both greenfield Splunk design and the evolution of brownfield Splunk estates.

• Designing and architecting Splunk Enterprise and Splunk Cloud solutions
• Supporting both greenfield Splunk deployments and existing brownfield environments
• Leading Splunk platform administration, optimisation and development
• Supporting Splunk Enterprise Security deployments and maturity
• Developing detections, security use cases and threat management capability
• Supporting SOC maturity, detection engineering and security operations use cases
• Managing data onboarding and pipeline optimisation
• Working across Cribl Stream, Lake, Edge and/or Search where applicable
• Supporting SOAR activity, including playbook development
• Working closely with customers, delivery teams and senior stakeholders

• UK National with active SC or DV Clearance
• Splunk Architect Certification preferred
• Splunk Enterprise Admin or Splunk Cloud Admin certification considered
• Strong experience in Splunk administration, design and architecture
• Experience across Splunk Enterprise and Splunk Cloud
• Strong data onboarding and use-case development experience
• Experience supporting security operations, SOC use cases and threat management
• Understanding of Splunk ES deployment stages
• Experience with Cribl Stream, Lake, Edge and/or Search
• Baseline operating system experience, ideally Linux
• Public sector or central government experience preferred
• Experience working within a systems integrator delivering into central government
• SOAR exposure, including playbook development
• Experience evolving and improving existing Splunk environments
• Strong stakeholder management and consultancy experience

Interested?

Tektora are looking to speak with SC or DV Cleared Splunk Architects / Senior Splunk Consultants who are open to permanent opportunities supporting secure government programmes.