Senior Tanium Architect / Engineer

Simple Solutions•Jacksonville, FL

1d•Remote

About The Position

This is a highly hands-on senior technical role supporting the enterprise implementation and operationalization of the Tanium Autonomous IT Platform on Tanium Cloud, including Tanium Core, Endpoint Management, and Exposure Management. The role provides architectural guidance while actively building, configuring, integrating, and troubleshooting the platform. The engineer translates architectural direction into a stable, scalable production environment, drives technical decisions and best practices, identifies risks, and works closely with Tanium professional services and customer security, infrastructure, network, ITSM, endpoint engineering, and automation teams. A key objective is to maintain a native, standards-based Tanium environment with minimal unnecessary customization, establish automation and operational guardrails, and enable the customer's internal team to operate the platform independently. The role covers enterprise endpoint deployment and management across Windows, Linux, and macOS; Tanium Core configuration and custom content; automated patching and software deployment; exposure, vulnerability, and compliance management; ServiceNow and CMDB integrations; API and Ansible automation; dashboards and reporting; documentation, training, and knowledge transfer.

Requirements

5+ years of experience in endpoint management, infrastructure engineering, or security engineering.
2–5+ years of hands-on Tanium experience in large enterprise environments.
Demonstrated experience implementing and operating Tanium across tens of thousands of endpoints.
Strong hands-on experience with Tanium Core and multiple Tanium capabilities, such as Patch, Deploy, Comply, Endpoint Management, and Exposure Management.
Strong working knowledge of Tanium Cloud and enterprise Tanium architecture.
Demonstrated ability to work as both a Tanium architect and hands-on engineer.
Strong experience integrating Tanium with ServiceNow, including CMDB-driven integrations and data synchronization.
Hands-on experience with ServiceNow CMDB and Change Management.
Strong Ansible experience, including playbooks, roles, automation, and inventory management.
Experience building API-based integrations and automated workflows.
Strong scripting skills using PowerShell and Python and/or Bash.
Experience building Tanium sensors, packages, actions, targeting, and custom content.
Strong Windows and Linux systems administration experience.
Working knowledge of Active Directory and enterprise networking concepts.
Experience designing dynamic endpoint groups, RBAC, and operational guardrails.
Experience with enterprise software inventory and software/license management.
Knowledge of vulnerability management and security/compliance frameworks such as CIS, NIST, and STIG.
Ability to independently troubleshoot complex implementation and production issues.
Strong written and verbal communication skills, including technical documentation and knowledge transfer.

Nice To Haves

Tanium certifications such as Tanium Certified Operator or Administrator.
Extensive hands-on experience with Tanium Cloud.
Experience with One Insights and enterprise Tanium dashboarding.
Advanced Tanium and ServiceNow integration experience, including CMDB synchronization and vulnerability-management workflows.
Experience with Ansible Automation Platform.
ServiceNow or Red Hat certifications such as CSA or RHCE.
Experience migrating from SCCM/MECM, BigFix, or similar endpoint-management platforms.
Experience working within highly regulated enterprise environments.
Previous experience working alongside vendor professional services teams.

Responsibilities

Lead the hands-on implementation and build-out of Tanium Core, Endpoint Management, and Exposure Management within Tanium Cloud.
Translate architectural direction into a scalable enterprise implementation; review architecture against network segmentation, endpoint populations, bandwidth, security requirements, change processes, and existing tools.
Identify technical gaps, risks, dependencies, and conflicts, recommend solutions, and drive architecture and implementation discussions.
Apply knowledge of Tanium architecture, agent communication, module dependencies, content, and scaling to implementation decisions; maintain a native, standardized architecture and avoid unnecessary customization.
Deploy, configure, and troubleshoot Tanium agents across Windows, Linux, and macOS, supporting data center, cloud, server, workstation, and end-user endpoint populations.
Drive pilot and production deployment waves; monitor and remediate endpoint coverage, health, connectivity, and performance; support stabilization and hypercare; establish scalable automated agent lifecycle processes.
Build dynamic endpoint groups for scalable targeting and administration.
Configure and maintain Tanium sensors, saved questions, packages, actions, computer groups, RBAC, and related platform components.
Develop and test custom Tanium content using PowerShell, Python, and/or Bash; build endpoint inventory, coverage, and operational reporting; establish RBAC and technical guardrails to reduce unintended large-scale actions.
Configure Tanium Connect and other required platform integrations.
Configure automated operating-system and third-party application patching, maintenance windows, deployment rings, endpoint targeting, and approval workflows.
Build, package, test, and deploy enterprise software and update workflows; troubleshoot patching, software deployment, and endpoint-management failures.
Configure policy enforcement and endpoint performance functionality as applicable; support initial inventory and software/license-management use cases and expanded patch-management capabilities.
Drive rapid platform adoption, including early agent deployment and patching proof-of-concept activities.
Configure vulnerability and compliance scanning against applicable CIS, NIST, STIG, and internal standards; connect findings with remediation workflows.
Build security, compliance, operational, and remediation dashboards and reporting; develop workflows connecting findings to automated remediation where appropriate.
Design, implement, and validate Tanium and ServiceNow integrations, including integration of Tanium endpoint and asset information with the ServiceNow CMDB and support for CMDB-driven and two-way integration patterns.
Enable CI and tag lifecycle changes to drive appropriate endpoint actions; align application, service, environment, ownership, and endpoint tagging with ServiceNow data.
Connect patching and software-deployment activities with ServiceNow change-management processes; route vulnerability and incident information into appropriate ServiceNow workflows; monitor and troubleshoot synchronization and integration issues.
Develop integrations using Tanium APIs and automation frameworks; use Ansible for agent deployment and lifecycle management across Linux and server environments.
Develop Ansible playbooks and automation that complement Tanium-driven remediation; define functional boundaries between Tanium and existing configuration-management and automation platforms to minimize duplication and conflicts.
Document integration architecture, data flows, automation logic, and troubleshooting procedures.
Build actionable dashboards for endpoint operations, security, compliance, inventory, and management stakeholders; support One Insights use cases and dashboard configuration.
Develop dashboard segmentation for workstation and server populations and their ownership groups; establish reporting for platform health, endpoint coverage, software inventory, vulnerabilities, compliance, and remediation.
Work with Tanium professional services and customer security, infrastructure, networking, ITSM, endpoint, and automation teams; serve as a senior technical resource.
Participate in change management, rollout planning, testing, and production-readiness activities.
Produce technical runbooks, test plans, architecture documentation, troubleshooting guides, and as-built documentation.
Train customer administrators and operators and transfer knowledge so the internal team can independently manage the Tanium environment.