Tanium Patch Management Engineer

Job Title

Tanium Patch Management Engineer / Endpoint Management Engineer

Job Summary

We are seeking a skilled Tanium Patch Management Engineer responsible for managing enterprise-wide endpoint patching, vulnerability remediation, software deployment, and compliance reporting using the Tanium platform. The candidate will work closely with Infrastructure, Security, Server, and Application teams to ensure operating systems and third-party applications remain secure, compliant, and up to date.

Key Responsibilities

Tanium Administration & Operations

• Administer and support the Tanium platform in a large-scale enterprise environment.
• Manage Tanium modules including Patch, Deploy, Inventory, Asset, and Comply.
• Monitor Tanium infrastructure health and troubleshoot agent communication issues.
• Perform client deployment, upgrades, maintenance, and configuration of Tanium agents.

Patch Management

• Plan, schedule, and execute Windows and Linux server patching activities using Tanium.
• Deploy Microsoft OS patches, security updates, hotfixes, and third-party application patches.
• Coordinate maintenance windows with application and infrastructure teams.
• Validate patch deployment success and perform post-patching health checks.
• Address patch failures and remediate non-compliant systems.

Vulnerability Remediation

• Work closely with Cyber Security teams to remediate vulnerabilities identified through vulnerability scanners.
• Use Tanium to identify vulnerable endpoints and automate remediation activities.
• Track remediation progress and ensure SLA compliance.
• Support monthly and quarterly vulnerability management programs.

Compliance & Reporting

• Generate patch compliance and vulnerability remediation reports.
• Monitor endpoint compliance against organizational security standards.
• Provide dashboards and metrics to management and audit teams.
• Support internal and external audit requests related to endpoint patch management.

Endpoint Management

• Software deployment and upgrade management through Tanium.
• Endpoint inventory and asset tracking.
• Troubleshoot endpoint performance and configuration issues.
• Support endpoint security initiatives and operational improvements.

Automation & Process Improvement

• Develop automation scripts (PowerShell, Batch, or similar) to improve patching efficiency.
• Identify opportunities for operational improvements and automation.
• Create and maintain standard operating procedures (SOPs) and knowledge articles.

Required Skills

• 3+ years of experience in Endpoint Management and Patch Management.
• Strong hands-on experience with Tanium Patch Management .
• Experience managing Windows Server environments.
• Knowledge of Linux patching processes.
• Understanding of vulnerability management tools such as Qualys, Tenable, Rapid7, or CrowdStrike.
• Experience with Microsoft WSUS, SCCM/MECM, or Intune.
• Strong PowerShell scripting skills.
• Knowledge of Active Directory and Windows administration.
• Experience with ITSM tools such as ServiceNow.

Preferred Skills

• Tanium Certified Operator or Administrator certification.
• Experience in large enterprise environments.
• Familiarity with security compliance standards (CIS, NIST, HIPAA, SOX, PCI-DSS).
• Cloud environment exposure (Azure, AWS, GCP).
• Experience with automation and orchestration tools.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or related field.

3-7+ years of relevant IT Infrastructure or Endpoint Management experience.