We're partnering with a consulting organisation delivering a high-profile observability and security program and are looking for an experienced Splunk Engineer to join on an initial short-term contract.

This role is ideal for someone who lives and breathes Splunk and has deep experience across Splunk Cloud, Splunk Enterprise, platform administration, onboarding, data ingestion, dashboards, alerting, and troubleshooting complex environments.

• Designing, configuring and optimising Splunk environments
• Supporting Splunk Cloud and/or Splunk Enterprise platforms
• Building dashboards, alerts, reports and operational monitoring solutions
• Integrating new data sources and managing data onboarding pipelines
• Working with infrastructure, platform, security and engineering teams to improve observability outcomes
• Troubleshooting performance, ingestion and platform-related issues
• Providing best-practice guidance across the broader Splunk ecosystem

• Strong commercial experience with Splunk Cloud and/or Splunk Enterprise
• Deep understanding of Splunk architecture, administration and platform management
• Experience with data onboarding, parsing, indexing and search optimisation
• Strong SPL (Search Processing Language) skills
• Exposure to observability, monitoring, SIEM or security operations environments
• Experience working in enterprise-scale environments
• Strong stakeholder engagement and consulting skills

• Splunk certifications
• Experience with ITSI, ES, SOAR, Observability Cloud or related Splunk products
• Cloud experience across AWS, Azure or GCP
• Infrastructure, Platform Engineering or DevOps background

This is a fast-moving contract opportunity with an organisation undertaking significant investment across observability and monitoring. If you're a genuine Splunk specialist and available to start in the coming weeks, I'd love to have a confidential discussion.