Tanium Patch Management Engineer

Role: Tanium Patch Management Engineer
Location: US Remote


Job Description: 

Position Summary
The Tanium Patch Management Engineer is responsible for administering, optimizing, and supporting the enterprise patch management program using the Tanium platform. This role focuses on maintaining endpoint security, compliance, and operational stability through the deployment of operating system patches, third-party application updates, and configuration remediation across Windows, Linux, and macOS environments.
The engineer works closely with Infrastructure, Security Operations, Vulnerability Management, Server Operations, and Application Support teams to ensure critical vulnerabilities are remediated within established service-level objectives while minimizing business disruption. The position also supports platform administration, reporting, troubleshooting, automation, and continuous process improvement initiatives. [Job Descri...Workplace | Word], [Tanium_Clo...Work_Draft | Word]
Key Responsibilities
Patch Management Operations
Administer and support Tanium Patch and Tanium Comply modules.
Plan, schedule, deploy, and validate operating system and third-party application patches.
Execute emergency and zero-day patching activities in response to critical security vulnerabilities.
Monitor patch deployment success rates and remediation effectiveness.
Troubleshoot failed patch deployments and coordinate corrective actions.
Vulnerability Remediation
Partner with Vulnerability Management teams to prioritize remediation based on risk, exposure, and business impact.
Analyze vulnerability assessment data and develop remediation plans.
Support compliance initiatives and security audit requirements.
Track remediation progress and ensure adherence to organizational security standards.
Tanium Platform Administration
Configure and maintain Tanium clients, patch policies, maintenance windows, and deployment packages.
Support RBAC administration, endpoint grouping, content distribution, and module configuration.
Monitor platform health, endpoint connectivity, and client performance.
Assist with platform upgrades, testing, and troubleshooting.
Reporting & Compliance
Develop operational dashboards and executive reporting.
Produce patch compliance metrics, vulnerability remediation status, and SLA attainment reporting.
Identify compliance gaps and recommend remediation strategies.
Support audit requests and evidence collection activities.
Automation & Process Improvement
Develop automated patch deployment workflows.
Create and maintain operational runbooks and standard operating procedures.
Identify opportunities to reduce Mean Time to Patch (MTTP) and improve operational efficiency.
Integrate Tanium data with ServiceNow, CMDB, and security platforms where applicable.
Collaboration & Support
Coordinate patching activities with application owners and infrastructure teams.
Participate in change management reviews and CAB processes.
Provide Tier 3 support for complex patching and endpoint management issues.
Mentor junior engineers and share Tanium best practices across the organization.
Required Qualifications
Experience
3+ years of experience in endpoint management or patch management.
2+ years of hands-on experience administering Tanium.
Experience supporting large enterprise environments (5,000+ endpoints preferred).
Experience with vulnerability management and remediation programs.
Technical Skills
Strong experience with:
Tanium Patch
Tanium Comply
Tanium Asset
Tanium Client
Windows Server administration.
Linux administration (RHEL, CentOS, Ubuntu preferred).
macOS patching experience.
PowerShell and scripting automation.
Endpoint security and vulnerability management practices.
ServiceNow integration and ticketing workflows.
Software packaging and deployment methodologies.
Preferred Qualifications
Tanium Certified Operator (TCO)
Tanium Certified Administrator (TCA)
Tanium Certified Analyst (TANCA)
Microsoft Endpoint Management experience
SCCM / MECM experience
Intune experience
CompTIA Security+
ITIL Foundation Certification
CISSP (preferred)