Senior Tanium Architect – Engineer

This is a fully remote position, open to applicants in Florida.

📋 Description

• Oversee the practical implementation and development of Tanium Core, Endpoint Management, and Exposure Management within the Tanium Cloud environment.

• Convert architectural guidance provided by vendors into a scalable enterprise solution.

• Assess architecture in relation to network segmentation, endpoint demographics, bandwidth needs, security protocols, change procedures, and existing tools.

• Identify technical shortcomings, risks, dependencies, and possible conflicts while suggesting effective solutions.

• Provide technical leadership to participating teams while remaining actively involved.

• Deploy, configure, and troubleshoot Tanium agents across Windows, Linux, and macOS platforms.

• Lead pilot and production deployment phases and assist with post-deployment stabilization and hypercare efforts.

• Monitor and address issues related to endpoint coverage, health, connectivity, and performance.

• Create automated and scalable processes for agent lifecycle management and dynamic endpoint grouping.

• Set up sensors, saved questions, packages, actions, computer groups, RBAC, Tanium Connect, and other platform components.

• Develop and test custom Tanium content utilizing PowerShell, Python, and/or Bash scripting.

• Generate reports on endpoint inventory, coverage, operations, security, compliance, vulnerabilities, and remediation efforts.

• Configure automated patching for operating systems and third-party applications, including maintenance windows, deployment rings, targeting, and approval workflows.

• Build, package, test, and deploy enterprise software and related update workflows.

• Set up vulnerability and compliance scanning in accordance with CIS, NIST, STIG, and internal standards.

• Link vulnerability findings with remediation workflows and automate remediation when applicable.

• Design, implement, and validate integrations between Tanium and ServiceNow, including CMDB-driven and two-way integration patterns.

• Connect patching and software deployment processes with ServiceNow change management protocols.

• Develop integrations with the Tanium API and automation framework.

• Utilize Ansible for the deployment of Tanium agents, lifecycle management, and automation of remediation tasks.

• Create actionable dashboards and support One Insights use cases.

• Produce runbooks, test plans, architecture documentation, troubleshooting guides, and as-built documentation.

• Train customer administrators and operators, facilitating knowledge transfer to enable the internal team to operate Tanium independently.

⛳️ Requirements

• Over 5 years of experience in endpoint management, infrastructure engineering, or security engineering.

• 2-5+ years of hands-on experience with Tanium in large enterprise settings.

• Proven track record of implementing and managing Tanium across tens of thousands of endpoints.

• Strong practical experience with Tanium Core and various Tanium capabilities including Patch, Deploy, Comply, Endpoint Management, and Exposure Management.

• Solid understanding of Tanium Cloud and the architecture of enterprise Tanium.

• Demonstrated ability to act as both a Tanium architect and a hands-on engineer.

• Significant experience integrating Tanium with ServiceNow, encompassing CMDB-driven integrations and data synchronization.

• Practical knowledge of ServiceNow CMDB and Change Management.

• Strong proficiency with Ansible, including playbooks, roles, automation, and inventory management.

• Experience in developing API-based integrations and automated workflows.

• Proficient scripting skills in PowerShell, Python, and/or Bash.

• Experience in creating Tanium sensors, packages, actions, targeting, and custom content.

• Strong background in Windows and Linux systems administration.

• Familiarity with Active Directory and enterprise networking concepts.

• Experience in designing dynamic endpoint groups, RBAC, and operational guardrails.

• Knowledge of enterprise software inventory and software/license management.

• Understanding of vulnerability management and compliance/security frameworks such as CIS, NIST, and STIG.

• Capability to independently troubleshoot complex implementation and production challenges.

• Excellent written and verbal communication skills, including technical documentation and knowledge sharing.

• Preferred Tanium certifications such as Tanium Certified Operator or Administrator.

• Extensive hands-on experience with Tanium Cloud is preferred.

• Experience with One Insights and enterprise Tanium dashboarding is preferred.

• Advanced experience in Tanium and ServiceNow integration, including CMDB synchronization and vulnerability management workflows is preferred.

• Experience with Ansible Automation Platform is preferred.

• ServiceNow or Red Hat certifications such as CSA or RHCE are preferred.

• Familiarity with migrating from SCCM/MECM, BigFix, or similar endpoint management platforms is preferred.

• Experience working in highly regulated enterprise environments is preferred.

• Previous collaboration with vendor professional services teams is preferred.

🏝️ Benefits

• Competitive salary and performance-based bonuses.

• Comprehensive health, dental, and vision insurance.

• Opportunities for professional development and training.

• Flexible working hours and remote work options.

• Collaborative and innovative work environment.