Splunk Consultant

Job Title: Splunk Infrastructure Engineer (Azure) – Contract Location: Remote / UK-based Rate: £750 per day (Outside IR35) Contract: 6 Months (Extension Likely) Clearance: Active Security Clearance required (SC minimum) About the Role Tektora is seeking a highly skilled Splunk Infrastructure Engineer to design, deploy, and configure Splunk supporting infrastructure in Azure. This role will be key in enabling secure and scalable log ingestion aligned with SOC best practices. Responsibilities • Produce high- and low-level designs for Splunk infrastructure in Azure. • Deploy and configure Azure VMs for Heavy Forwarders and Syslog collectors. • Implement Universal Forwarders on Windows/Linux and configure centralised syslog ingestion. • Ensure secure TLS log transport and correct index/sourcetype routing into Splunk Cloud. • Document and raise firewall rule requests (RFCs) for Splunk connectivity. • Provide testing, validation, as-built documentation, and knowledge transfer to SOC teams. Requirements • Active Security Clearance (SC minimum) • Strong experience with Splunk Enterprise/Splunk Cloud in enterprise environments. • Proven expertise in Azure infrastructure (VMs, networking, security hardening). • Hands-on with Heavy Forwarders, Universal Forwarders. • Understanding of SOC standards, log ingestion, and secure data transport. • Excellent documentation and knowledge transfer skills