Senior Tanium Architect / Engineer - Remote
As a senior Tanium Architect / Engineer you are going to support the enterprise implementation and operationalization of the Tanium Autonomous IT Platform on Tanium Cloud, including Tanium Core, Endpoint Management, and Exposure Management.
This is a highly hands-on senior technical role requiring an individual who can provide architectural guidance while actively building, configuring, integrating, and troubleshooting the platform. The ideal candidate has successfully implemented Tanium at enterprise scale across tens of thousands of endpoints and can drive technical decisions, recommend best practices, identify risks, and translate architecture into a stable, scalable production environment.
The engineer will work closely with Tanium professional services and customer security, infrastructure, network, ITSM, endpoint engineering, and automation teams. This individual will serve as a technical leader within the team while remaining deeply involved in implementation.
The goal is to maintain a native, standards-based Tanium environment with minimal unnecessary customization, establish strong automation and operational guardrails, and enable the customer's internal team to become self-sufficient.
Responsibilities
Tanium Architecture & Implementation
- Lead the hands-on implementation and build-out of Tanium Core, Endpoint Management, and Exposure Management within Tanium Cloud.
- Translate vendor-provided architectural direction into a scalable enterprise implementation.
- Review architecture against network segmentation, endpoint populations, bandwidth requirements, security requirements, change processes, and existing tooling.
- Identify technical gaps, risks, dependencies, and potential conflicts and recommend appropriate solutions.
- Provide technical leadership and drive architecture and implementation discussions across participating teams.
- Apply Tanium architecture, agent communication, module dependency, content, and scaling knowledge to implementation decisions.
- Maintain a native and standardized Tanium architecture wherever possible, avoiding unnecessary customization.
Endpoint Deployment & Management
- Deploy, configure, and troubleshoot Tanium agents across Windows, Linux, and macOS environments.
- Support data center, cloud, server, workstation, and end-user endpoint populations.
- Drive pilot and production deployment waves.
- Monitor and remediate endpoint coverage, health, connectivity, and performance issues.
- Support post-deployment stabilization and hypercare activities.
- Establish automated and scalable agent lifecycle processes.
- Build dynamic endpoint groups rather than static groups to support scalable targeting and administration.
Tanium Core
- Configure and maintain sensors, saved questions, packages, actions, computer groups, RBAC, and related platform components.
- Develop and test custom Tanium content using PowerShell, Python, and/or Bash.
- Build endpoint inventory, coverage, and operational reporting.
- Establish role-based access controls and technical guardrails designed to reduce the risk of unintended large-scale endpoint actions.
- Configure Tanium Connect and other required platform integrations.
Endpoint Management
- Configure automated operating system and third-party application patching.
- Establish maintenance windows, deployment rings, endpoint targeting, and approval workflows.
- Build, package, test, and deploy enterprise software and update workflows.
- Troubleshoot patching, software deployment, and endpoint-management failures.
- Configure policy enforcement and endpoint performance functionality as applicable.
- Support initial inventory and software/license-management use cases, followed by expanded patch-management capabilities.
- Drive rapid platform adoption, including early agent deployment and patching proof-of-concept activities.
Exposure Management
- Configure vulnerability and compliance scanning against applicable security benchmarks, including CIS, NIST, STIG, and internal standards.
- Connect vulnerability findings with remediation workflows.
- Build security, compliance, operational, and remediation dashboards and reporting.
- Develop workflows connecting findings to automated remediation where appropriate.
ServiceNow Integration
- Design, implement, and validate robust Tanium and ServiceNow integrations.
- Integrate Tanium endpoint and asset information with the ServiceNow CMDB.
- Support CMDB-driven and two-way integration patterns between Tanium and ServiceNow.
- Enable CI and tag lifecycle changes to drive appropriate endpoint actions.
- Align business application, service, environment, ownership, and related endpoint tagging with ServiceNow data.
- Connect patching and software-deployment activities with ServiceNow change-management processes.
- Route vulnerability and incident information into appropriate ServiceNow workflows.
- Monitor and troubleshoot data synchronization and integration issues.
Automation & API Integration
- Develop integrations using Tanium APIs and automation frameworks.
- Use Ansible for Tanium agent deployment and lifecycle management across Linux and server environments.
- Develop Ansible playbooks and automation that complement Tanium-driven remediation.
- Define appropriate functional boundaries between Tanium and existing configuration-management and automation platforms to minimize duplication and conflicts.
- Document integration architecture, data flows, automation logic, and troubleshooting procedures.
Dashboards & Reporting
- Build actionable dashboards for endpoint operations, security, compliance, inventory, and management stakeholders.
- Support One Insights use cases and dashboard configuration.
- Develop appropriate dashboard segmentation for workstation and server populations and their respective ownership groups.
- Establish reporting for platform health, endpoint coverage, software inventory, vulnerabilities, compliance, and remediation.
Collaboration & Knowledge Transfer
- Work directly with Tanium professional services and customer security, infrastructure, networking, ITSM, endpoint, and automation teams.
- Serve as a senior technical resource who can drive architecture and implementation discussions.
- Participate in change-management, rollout planning, testing, and production-readiness activities.
- Produce technical runbooks, test plans, architecture documentation, troubleshooting guides, and as-built documentation.
- Train customer administrators and operators on the implementation and ongoing platform management.
- Drive knowledge transfer with the objective of enabling the internal team to operate the Tanium environment independently.
Required Qualifications
- 5+ years of experience in endpoint management, infrastructure engineering, or security engineering.
- 2-5+ years of hands-on Tanium experience within large enterprise environments.
- Demonstrated experience implementing and operating Tanium across tens of thousands of endpoints.
- Strong hands-on experience with Tanium Core and multiple Tanium capabilities such as Patch, Deploy, Comply, Endpoint Management, and Exposure Management.
- Strong working knowledge of Tanium Cloud and enterprise Tanium architecture.
- Demonstrated ability to function as both a Tanium architect and hands-on engineer.
- Strong experience integrating Tanium with ServiceNow, including CMDB-driven integrations and data synchronization.
- Hands-on experience with ServiceNow CMDB and Change Management.
- Strong Ansible experience, including playbooks, roles, automation, and inventory management.
- Experience building API-based integrations and automated workflows.
- Strong scripting skills using PowerShell and Python and/or Bash.
- Experience building Tanium sensors, packages, actions, targeting, and custom content.
- Strong Windows and Linux systems administration experience.
- Working knowledge of Active Directory and enterprise networking concepts.
- Experience designing dynamic endpoint groups, RBAC, and operational guardrails.
- Experience with enterprise software inventory and software/license management.
- Knowledge of vulnerability management and security/compliance frameworks such as CIS, NIST, and STIG.
- Ability to independently troubleshoot complex implementation and production issues.
- Strong written and verbal communication skills, including technical documentation and knowledge transfer.
Preferred Qualifications
- Tanium certifications such as Tanium Certified Operator or Administrator.
- Extensive hands-on experience with Tanium Cloud.
- Experience with One Insights and enterprise Tanium dashboarding.
- Advanced Tanium and ServiceNow integration experience, including CMDB synchronization and vulnerability-management workflows.
- Experience with Ansible Automation Platform.
- ServiceNow or Red Hat certifications such as CSA or RHCE.
- Experience migrating from SCCM/MECM, BigFix, or similar endpoint-management platforms.
- Experience working within highly regulated enterprise environments.
- Previous experience working alongside vendor professional services teams.
Tools and Technologies
- Tanium Cloud
- Tanium Core
- Tanium Endpoint Management
- Tanium Exposure Management
- Tanium Patch / Deploy / Comply
- Tanium Connect
- One Insights
- ServiceNow / CMDB / Change Management
- Ansible / Ansible Automation Platform
- PowerShell
- Python
- Bash
- REST APIs / Automation
- Windows
- Linux
- macOS
- Active Directory
- CIS / NIST / STIG frameworks