Observability/Monitoring & Telemetry Consultant

Observability/Monitoring & Telemetry Consultant

Location: Bristol (Hybrid - 3 days in office)Employer: Specialist Data & Observability Consultancy

This consultancy helps organisations turn high-volume, noisy telemetry and log data into clear, decision-ready insight - feeding SIEM platforms, observability stacks, and data lakes. You'll sit at the intersection of discovery, design, delivery, and operational excellence, helping clients solve real problems around data quality, detection efficacy, and operational resilience.

What You'll Do

  1. Lead Discovery & Client Engagement

You'll be the front-facing consultant responsible for understanding what clients actually need. This includes running structured discovery workshops to map:

  • Data sources (platforms, agents, syslog, APIs, cloud-native feeds).
  • Event volumes, constraints, ownership, governance, and data lineage.
  • The real business question - e.g. reducing SIEM cost, improving detection, stabilising pipelines, or enhancing observability.

You then turn this into:

  • A clear view of current state & target state
  • A roadmap of recommended changes
  • A sprint backlog with a clear definition of done
  • Decision-grade outputs clients can act on immediately

  1. Translate Strategy into Technical Designs

You act as the bridge between leadership objectives and engineering realities. This includes mapping:

  • Cost vs detection fidelity
  • Operational overhead vs automation opportunities
  • Log/metric/tracing design choices
  • Risk, resilience & failure modes in data flows

  1. Design Full Telemetry Pipelines

You'll build end-to-end designs for telemetry pipelines across the stages:

  • Collection: agents, collectors, syslog, cloud-native logs, APIs
  • Routing: multi-destination delivery, buffering, retries, backpressure handling
  • Transformation: parsing, enrichment, filtering, PII masking/redaction
  • Standardisation: OpenTelemetry conventions; OCSF mapping where relevant
  • Quality: sampling, validation, acceptance criteria, rollback plans

This is a blend of observability engineering, security telemetry design, data engineering, and consultancy.

  1. Support Delivery & Deployment

You'll work closely with engineers who deploy the pipelines you design - ensuring what you create is practical, scalable, and resilient.

You help shape:

  • Reusable design patterns
  • Deployment artefacts (config packs, templates, patterns)
  • Standardised service definitions that the team can use across clients

  1. Contribute to the Managed Service

The consultancy operates an "Operate" service - you help shape:

  • Onboarding patterns
  • Runbooks, health checks, platform boundaries
  • Minimum viable operate checklists
  • Upgrade/patch and maintenance approaches

This is ideal for someone who likes production-grade operational thinking as well as design.

What You Need

Choose Your Primary Lens (you only need one)

A) Security / SIEM Lens

You may have experience with:

  • SIEM concepts and event pipelines
  • Telemetry-to-use-case mapping for security detections
  • Threat modelling and detection lifecycle management
  • Normalisation approaches including OCSF
  • Understanding how log quality impacts threat severity and efficacy

This role is great for:

  • Security engineers
  • Detection engineers
  • SIEM consultants
  • Cyber defence specialists

B) Observability / ITOps Lens

You might bring experience in:

  • Service decomposition and architecture thinking
  • Metrics, logs, tracing and correlation
  • SLIs/SLOs and reliability engineering principles
  • Incident/problem root-cause thinking
  • OpenTelemetry-first design approaches
  • Modern observability tools (APM, tracing, log pipelines, dashboards)

This is ideal for:

  • Observability engineers
  • SREs / Reliability engineers
  • Platform or ITOps engineers

Additional general skills

  • Ability to run workshops confidently and extract the right information
  • Strong documentation & communication skills
  • An interest in data quality, data flow design, and outcomes over technology
  • Ability to collaborate with engineers, architects, and leadership

Why Candidates Love This Role

  • Proper consulting: You lead real discovery, not just implement tickets.
  • Variety: Work across multiple platforms, environments, and client types.
  • High impact: Your designs directly reduce cost, risk, and operational headaches.
  • Modern tech: Heavy focus on OpenTelemetry, SIEM modernisation, cloud-native logs, and structured pipelines.
  • Intellectual challenge: This role blends strategy, design, engineering, and operational thinking - perfect for people who enjoy solving complex problems.
  • Career development: Exposure to both observability and security telemetry gives you long-term career flexibility.

Please reach out if you'd like to know more!

Reasonable Adjustments:

Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.

If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.

Job Details

Company
Sanderson
Location
Bristol, Avon, England, United Kingdom
Hybrid / Remote Options
Employment Type
Full-Time
Salary
Competitive salary
Posted