Splunk Consultant

You will be involved in:

• Designing and architecting Splunk Enterprise and Splunk Cloud solutions
• Supporting both greenfield Splunk deployments and existing brownfield environments
• Leading Splunk platform administration, optimisation and development
• Supporting Splunk Enterprise Security deployments and maturity
• Developing detections, security use cases and threat management capability
• Supporting SOC maturity, detection engineering and security operations use cases
• Managing data onboarding and pipeline optimisation
• Working across Cribl Stream, Lake, Edge and/or Search where applicable
• Supporting SOAR activity, including playbook development
• Working closely with customers, delivery teams and senior stakeholders, Tektora are looking to speak with SC or DV Cleared Splunk Architects / Senior Splunk Consultants who are open to permanent opportunities supporting secure government programmes.

This role would suit someone with strong Splunk architecture, design and delivery experience who has worked across secure environments and understands both greenfield Splunk design and the evolution of brownfield Splunk estates., * UK National with active SC or DV Clearance

• Splunk Architect Certification preferred
• Splunk Enterprise Admin or Splunk Cloud Admin certification considered
• Splunk ES Admin certification preferred
• Strong experience in Splunk administration, design and architecture
• Experience across Splunk Enterprise and Splunk Cloud
• Experience with Splunk ES, including detection development
• Strong data onboarding and use-case development experience
• Experience supporting security operations, SOC use cases and threat management
• Understanding of Splunk ES deployment stages
• Experience with Cribl Stream, Lake, Edge and/or Search
• Baseline operating system experience, ideally Linux
• Public sector or central government experience preferred

Desirable Experience

• Experience working within a systems integrator delivering into central government
• SOAR exposure, including playbook development
• Experience evolving and improving existing Splunk environments
• Strong stakeholder management and consultancy experience