Technology Consultant – Splunk

Job Description

Providing Consultancy and Professional Services to our diverse Splunk and Cribl customer base. Working collaboratively with our commercial team and customers to help scope the activities, and outcomes of our engagements. 

Delivering the highest-quality professional services to our customers, implementing agreed solutions, providing knowledge transfer, and ultimately fulfilling our customer’s Cribl and Splunk needs. 

Duties & Responsibilities

• Engaging with customers, working side-by-side to develop tactical and strategic solutions to their unique technology and data problems. 
• Empower customers to take on their next set of data & analytics challenges, supporting them throughout their journey. 
• Support pre-sales engagements, customer presentations, and other duties as required to support client acquisition. 
• Drive customer business value and benefit realisation via effective implementation of Networkology-partnered technologies. 
• Collaborate with the customer organisation to enable product and technical teams with the right solution to drive innovation and address customer requirements. 
• Advise and consult on architectural good practise, whilst considering the customer’s design authority. 
• Bridge the void between technical and commercial elements and application of a strategic mindset. 
• Develop best practice monitoring of both on-premises, cloud applications, infrastructure, and security. 
• Learn new technologies and invest in self-development to enhance knowledge and skillset in synchronisation with product and technological evolution. 

Skills, Knowledge & Experience

Essential: We require a Technology Consultant with experience of the following:

• Experience in architecting, designing and implementing distributed Splunk implementations, following Splunk’s validated architectures for on-premises and Cloud based deliveries. 

• Strong understanding of SPL, ability to construct complex efficient queries. 

• Knowledge/experience with regular expressions. 

• Proficient at data on-boarding activities including custom parsing rules, custom TAs, props, transforms, and adhering to the Common Information Model (CIM). Strong Operating System experience (Windows, Linux), comfortable with command-line operations. 

• Experience developing custom Splunk content including scheduled searches, reports, dashboards, and alerts. 

• Awareness of automation technologies (Terraform, Ansible and Puppet)

Desirable: Knowledge & experience in one or more of the following:

• Experience in architecting and deploying distributed Cribl implementations, following Cribl’s best practice methodology for on-premises and Cloud based deliveries. 
• Splunk certification (User, Power User, Admin, Architect, ES Admin, Implementing ITSI) and/or equivalent experience in Splunk Enterprise, Enterprise Security, IT Service Intelligence, Observability Suite. 
• Cribl certifications (Cribl Certified Observability Engineer; Cribl Certified Observability Administrator). 
• Working knowledge or recent experience with scripting languages (bash, perl, python), application development (java, .NET), databases and analytical tools. 
• Experience with containerised solutions (Docker, Openshift, Kubernetes) and Cloud-based (AWS, Azure, GCP) services. 
• Experience maintaining and administering enterprise-scale implementations. 
• Development and API experience (Python, REST, XML) 
• Existing security clearance (SC/DV) or ability to achieve it. 

Certifications

Essential:

• Splunk Certified Architect

Desirable

• Splunk Core Certified Consultant