Infrastructure & Endpoint Engineer

Location: Alabang, Cebu, Davao, or Quezon City
Work Setup: Hybrid (5 days onsite per month)
Shift: Night Shift / Rotational Schedule

About the Role

We are looking for experienced Tanium Engineers to join a growing infrastructure and endpoint management team. In this role, you will be responsible for enterprise-wide patch management, vulnerability remediation, endpoint administration, and security compliance across large-scale Windows environments.

You will work closely with infrastructure, security, and application teams to ensure endpoints remain secure, compliant, and operational while supporting continuous improvement and automation initiatives.

Responsibilities

• Administer and manage the Tanium platform, including Patch, Deploy, Asset, and Threat Response modules
• Perform end-to-end patch management activities, including planning, testing, deployment, monitoring, and validation
• Conduct vulnerability assessments and remediation using Tanium and related security tools
• Monitor compliance dashboards and generate reports on patching and security posture
• Investigate and troubleshoot patch deployment failures, endpoint issues, and compliance gaps
• Manage endpoint configurations, software deployments, and Windows OS lifecycle activities
• Support Windows infrastructure and desktop engineering environments
• Collaborate with security, infrastructure, and application teams on remediation initiatives
• Develop and maintain technical documentation, SOPs, and knowledge base articles
• Perform root cause analysis and implement preventive measures to improve system stability and security

Required Skills & Experience

• At least 2 years' experience with Tanium administration and support

• Strong background in patch management and deployment

• Hands-on experience with vulnerability management and remediation

• Experience using endpoint management tools such as:

  • SCCM / MECM
  • Tanium
  • BigFix
  • PDQ
  • WSUS

• Strong Windows Server and Windows endpoint administration experience

• Knowledge of enterprise IT infrastructure, including servers, networks, and endpoint environments

• Experience troubleshooting deployment, compliance, and operating system issues

• Familiarity with Active Directory administration

• Understanding of cybersecurity best practices and endpoint security standards

• Experience using ITSM or ticketing platforms such as ServiceNow

Preferred Qualifications

• Experience with Tanium Patch, Deploy, Asset, Comply, Discover, Reveal, or Threat Response modules
• Hands-on experience with enterprise-scale endpoint patching and compliance management
• Exposure to Desktop Engineering and Windows platform management
• PowerShell, Python, or Bash scripting experience for automation
• Knowledge of Intune and modern endpoint management technologies
• Experience supporting regulated or highly secured enterprise environments