Senior Tanium Architect / Engineer - Remote

Simple Solutions•Jacksonville, FL

3d•$75 - $95•Remote

About The Position

This is a highly hands-on senior technical role supporting the enterprise implementation and operationalization of the Tanium Autonomous IT Platform on Tanium Cloud, including Tanium Core, Endpoint Management, and Exposure Management. The role combines architectural guidance with active platform building, configuration, integration, and troubleshooting. The engineer translates architecture into a stable, scalable production environment and supports implementations across tens of thousands of endpoints. The engineer works closely with Tanium professional services and customer security, infrastructure, network, ITSM, endpoint engineering, and automation teams. The role provides technical leadership while remaining directly involved in implementation. The objective is to maintain a native, standards-based Tanium environment with minimal unnecessary customization, establish automation and operational guardrails, and enable the customer’s internal team to operate the platform independently.

Requirements

At least 5 years of experience in endpoint management, infrastructure engineering, or security engineering.
2–5+ years of hands-on Tanium experience in large enterprise environments.
Demonstrated experience implementing and operating Tanium across tens of thousands of endpoints.
Strong hands-on experience with Tanium Core and multiple Tanium capabilities, such as Patch, Deploy, Comply, Endpoint Management, and Exposure Management.
Strong working knowledge of Tanium Cloud and enterprise Tanium architecture.
Ability to function as both a Tanium architect and hands-on engineer.
Strong experience integrating Tanium with ServiceNow, including CMDB-driven integrations and data synchronization.
Hands-on experience with ServiceNow CMDB and Change Management.
Strong Ansible experience, including playbooks, roles, automation, and inventory management.
Experience building API-based integrations and automated workflows.
Strong scripting skills using PowerShell and Python and/or Bash.
Experience building Tanium sensors, packages, actions, targeting, and custom content.
Strong Windows and Linux systems administration experience.
Working knowledge of Active Directory and enterprise networking concepts.
Experience designing dynamic endpoint groups, RBAC, and operational guardrails.
Experience with enterprise software inventory and software/license management.
Knowledge of vulnerability management and security/compliance frameworks such as CIS, NIST, and STIG.
Ability to independently troubleshoot complex implementation and production issues.
Strong written and verbal communication skills, including technical documentation and knowledge transfer.

Nice To Haves

Tanium certifications such as Tanium Certified Operator or Administrator.
Extensive hands-on experience with Tanium Cloud.
Experience with One Insights and enterprise Tanium dashboarding.
Advanced Tanium and ServiceNow integration experience, including CMDB synchronization and vulnerability-management workflows.
Experience with Ansible Automation Platform.
ServiceNow or Red Hat certifications such as CSA or RHCE.
Experience migrating from SCCM/MECM, BigFix, or similar endpoint-management platforms.
Experience working within highly regulated enterprise environments.
Previous experience working alongside vendor professional services teams.

Responsibilities

Lead hands-on implementation and build-out of Tanium Core, Endpoint Management, and Exposure Management within Tanium Cloud.
Translate vendor-provided architectural direction into a scalable enterprise implementation and review architecture against network segmentation, endpoint populations, bandwidth, security requirements, change processes, and existing tooling.
Identify technical gaps, risks, dependencies, and conflicts; recommend solutions and drive architecture and implementation discussions.
Apply Tanium architecture, agent communication, module dependency, content, and scaling knowledge to implementation decisions, maintaining a native and standardized architecture wherever possible.
Deploy, configure, and troubleshoot Tanium agents across Windows, Linux, and macOS environments, supporting data center, cloud, server, workstation, and end-user populations.
Drive pilot and production deployment waves; monitor and remediate endpoint coverage, health, connectivity, and performance; support stabilization and hypercare; and establish scalable agent lifecycle processes.
Build dynamic endpoint groups for scalable targeting and administration.
Configure and maintain Tanium sensors, saved questions, packages, actions, computer groups, RBAC, and related platform components.
Develop and test custom Tanium content using PowerShell, Python, and/or Bash; build endpoint inventory, coverage, and operational reporting; and establish guardrails to reduce the risk of unintended large-scale actions.
Configure Tanium Connect and other required platform integrations.
Configure automated operating system and third-party application patching, maintenance windows, deployment rings, endpoint targeting, and approval workflows.
Build, package, test, and deploy enterprise software and update workflows; troubleshoot patching, software deployment, and endpoint-management failures; and configure policy enforcement and endpoint performance functionality as applicable.
Support initial inventory and software/license-management use cases followed by expanded patch-management capabilities, including rapid adoption and early agent deployment and patching proof-of-concept activities.
Configure vulnerability and compliance scanning against applicable CIS, NIST, STIG, and internal benchmarks; connect findings to remediation workflows; and build security, compliance, operational, and remediation dashboards and reporting.
Develop workflows connecting vulnerability findings to automated remediation where appropriate.
Design, implement, and validate Tanium and ServiceNow integrations, including endpoint and asset information integration with the ServiceNow CMDB and CMDB-driven or two-way integration patterns.
Enable CI and tag lifecycle changes to drive endpoint actions; align application, service, environment, ownership, and endpoint tagging with ServiceNow data; and connect patching and software deployment with ServiceNow change-management processes.
Route vulnerability and incident information into appropriate ServiceNow workflows and monitor and troubleshoot synchronization and integration issues.
Develop integrations using Tanium APIs and automation frameworks; use Ansible for agent deployment and lifecycle management across Linux and server environments; and develop Ansible playbooks and automation that complement Tanium-driven remediation.
Define functional boundaries between Tanium and existing configuration-management and automation platforms to minimize duplication and conflicts; document integration architecture, data flows, automation logic, and troubleshooting procedures.
Build actionable dashboards for endpoint operations, security, compliance, inventory, and management stakeholders; support One Insights use cases and dashboard configuration; and segment dashboards for workstation and server populations and ownership groups.
Establish reporting for platform health, endpoint coverage, software inventory, vulnerabilities, compliance, and remediation.
Work with Tanium professional services and customer security, infrastructure, networking, ITSM, endpoint, and automation teams; participate in change management, rollout planning, testing, and production-readiness activities.
Produce technical runbooks, test plans, architecture documentation, troubleshooting guides, and as-built documentation; train customer administrators and operators; and transfer knowledge so the internal team can operate the environment independently.