Tanium Patch Management Engineer

Role: Tanium Patch Management Engineer

Location: 100% Remote

Duration: Contract

Job Description:

Position Summary:

The Tanium Patch Management Engineer is responsible for administering, optimizing, and supporting the enterprise patch management program using the Tanium platform. This role focuses on maintaining endpoint security, compliance, and operational stability through the deployment of operating system patches, third-party application updates, and configuration remediation across Windows, Linux, and macOS environments.

The engineer works closely with Infrastructure, Security Operations, Vulnerability Management, Server Operations, and Application Support teams to ensure critical vulnerabilities are remediated within established service-level objectives while minimizing business disruption. The position also supports platform administration, reporting, troubleshooting, automation, and continuous process improvement initiatives.

Key Responsibilities

Patch Management Operations

Administer and support Tanium Patch and Tanium Comply modules.

Plan, schedule, deploy, and validate operating system and third-party application patches.

Execute emergency and zero-day patching activities in response to critical security vulnerabilities.

Monitor patch deployment success rates and remediation effectiveness.

Troubleshoot failed patch deployments and coordinate corrective actions.

Vulnerability Remediation

Partner with Vulnerability Management teams to prioritize remediation based on risk, exposure, and business impact.

Analyze vulnerability assessment data and develop remediation plans.

Support compliance initiatives and security audit requirements.

Track remediation progress and ensure adherence to organizational security standards.

Tanium Platform Administration

Configure and maintain Tanium clients, patch policies, maintenance windows, and deployment packages.

Support RBAC administration, endpoint grouping, content distribution, and module configuration.

Monitor platform health, endpoint connectivity, and client performance.

Assist with platform upgrades, testing, and troubleshooting.

Reporting & Compliance

Develop operational dashboards and executive reporting.

Produce patch compliance metrics, vulnerability remediation status, and SLA attainment reporting.

Identify compliance gaps and recommend remediation strategies.

Support audit requests and evidence collection activities.

Automation & Process Improvement

Develop automated patch deployment workflows.

Create and maintain operational runbooks and standard operating procedures.

Identify opportunities to reduce Mean Time to Patch (MTTP) and improve operational efficiency.

Integrate Tanium data with ServiceNow, CMDB, and security platforms where applicable.

Collaboration & Support

Coordinate patching activities with application owners and infrastructure teams.

Participate in change management reviews and CAB processes.

Provide Tier 3 support for complex patching and endpoint management issues.

Mentor junior engineers and share Tanium best practices across the organization.

Required Qualifications

Experience:

3+ years of experience in endpoint management or patch management.

2+ years of hands-on experience administering Tanium.

Experience supporting large enterprise environments (5,000+ endpoints preferred).

Experience with vulnerability management and remediation programs.

Technical Skills

Strong experience with:

Tanium Patch

Tanium Comply

Tanium Asset

Tanium Discover

Windows Server administration.

Linux administration (RHEL, CentOS, Ubuntu preferred).

macOS patching experience.

PowerShell and scripting automation.

Endpoint security and vulnerability management practices.

ServiceNow integration and ticketing workflows.

Software packaging and deployment methodologies.

Preferred Qualifications:

Tanium Certified Operator (TCO)

Tanium Certified Administrator (TCA)

Tanium Certified Analyst (TANCA)

Microsoft Endpoint Management experience

SCCM / MECM experience

Intune experience

CompTIA Security+

ITIL Foundation Certification

CISSP (preferred)