Tanium Architect

Match Point Solutions; Maryland Heights (MO); Remote; USD 103,000 - 110,000; Full time

Job summary

MatchPoint Solutions is seeking a Senior Tanium Architect to lead enterprise-scale Tanium deployment across endpoints and cloud. You will drive architectural decisions, implement Core, Endpoint Management, and Exposure Management, and collaborate with security, IT, and automation teams.

The role requires hands-on expertise with Tanium Cloud, Tanium Core, and ServiceNow integrations, plus strong scripting (PowerShell/Python) and automation (Ansible) capabilities. Remote work is supported.

Qualifications

• 5+ years of experience in endpoint management or security engineering.
• 2+ years of hands-on Tanium experience in large enterprise environments.
• Strong hands-on experience with Tanium Core and capabilities such as Patch, Deploy, Comply, Endpoint Management, and Exposure Management.
• Strong scripting skills with PowerShell and Python and/or Bash.
• Experience integrating Tanium with ServiceNow, including CMDB-driven integrations and data synchronization.

Responsibilities

• Lead hands-on implementation and build-out of Tanium Core, Endpoint Management, and Exposure Management within Tanium Cloud.
• Translate architectural direction into scalable enterprise implementation and review against network segmentation, endpoint populations, and security requirements.
• Provide technical leadership and drive architecture discussions across teams.
• Configure and deploy Tanium sensors, content, and RBAC to reduce risk of large-scale endpoint actions.
• Develop integrations using Tanium APIs and automation frameworks (Ansible).
• Build dashboards and reporting for operations, security, and compliance.

Skills

Architectural design

Technical leadership

Problem solving

Tools

Tanium Cloud

Tanium Core

Tanium Endpoint Management

Tanium Exposure Management

Tanium Connect

One Insights

ServiceNow

Ansible

PowerShell

Python

Bash

REST APIs

Windows

Linux

macOS

Active Directory

Job description

Job Title: Tanium Architect

Duration: 12 Month

Location: Remote

Pay: $75-$80

Job Description

Senior Tanium Architect / Engineer to support the enterprise implementation and operationalization of the Tanium Autonomous IT Platform on Tanium Cloud, including Tanium Core, Endpoint Management, and Exposure Management.

This is a highly hands-on senior technical role requiring an individual who can provide architectural guidance while actively building, configuring, integrating, and troubleshooting the platform. The ideal candidate has successfully implemented Tanium at enterprise scale across tens of thousands of endpoints and can drive technical decisions, recommend best practices, identify risks, and translate architecture into a stable, scalable production environment.

The engineer will work closely with Tanium professional services and customer security, infrastructure, network, ITSM, endpoint engineering, and automation teams. This individual will serve as a technical leader within the team while remaining deeply involved in implementation.

The goal is to maintain a native, standards-based Tanium environment with minimal unnecessary customization, establish strong automation and operational guardrails, and enable the customer's internal team to become self-sufficient.

Responsibilities

Tanium Architecture & Implementation

• Lead the hands-on implementation and build-out of Tanium Core, Endpoint Management, and Exposure Management within Tanium Cloud.
• Translate vendor-provided architectural direction into a scalable enterprise implementation.
• Review architecture against network segmentation, endpoint populations, bandwidth requirements, security requirements, change processes, and existing tooling.
• Identify technical gaps, risks, dependencies, and potential conflicts and recommend appropriate solutions.
• Provide technical leadership and drive architecture and implementation discussions across participating teams.
• Apply Tanium architecture, agent communication, module dependency, content, and scaling knowledge to implementation decisions.
• Maintain a native and standardized Tanium architecture wherever possible, avoiding unnecessary customization.

Endpoint Deployment & Management

• Deploy, configure, and troubleshoot Tanium agents across Windows, Linux, and macOS environments.
• Support data center, cloud, server, workstation, and end-user endpoint populations.
• Drive pilot and production deployment waves.
• Monitor and remediate endpoint coverage, health, connectivity, and performance issues.
• Support post-deployment stabilization and hypercare activities.
• Establish automated and scalable agent lifecycle processes.
• Build dynamic endpoint groups rather than static groups to support scalable targeting and administration.

Tanium Core

• Configure and maintain sensors, saved questions, packages, actions, computer groups, RBAC, and related platform components.
• Develop and test custom Tanium content using PowerShell, Python, and/or Bash.
• Build endpoint inventory, coverage, and operational reporting.
• Establish role-based access controls and technical guardrails designed to reduce the risk of unintended large-scale endpoint actions.
• Configure Tanium Connect and other required platform integrations.

Endpoint Management

• Configure automated operating system and third-party application patching.
• Establish maintenance windows, deployment rings, endpoint targeting, and approval workflows.
• Build, package, test, and deploy enterprise software and update workflows.
• Troubleshoot patching, software deployment, and endpoint-management failures.
• Configure policy enforcement and endpoint performance functionality as applicable.
• Support initial inventory and software/license-management use cases, followed by expanded patch-management capabilities.
• Drive rapid platform adoption, including early agent deployment and patching proof-of-concept activities.

Exposure Management

• Configure vulnerability and compliance scanning against applicable security benchmarks, including CIS, NIST, STIG, and internal standards.
• Connect vulnerability findings with remediation workflows.
• Build security, compliance, operational, and remediation dashboards and reporting.
• Develop workflows connecting findings to automated remediation where appropriate.

ServiceNow Integration

• Design, implement, and validate robust Tanium and ServiceNow integrations.
• Integrate Tanium endpoint and asset information with the ServiceNow CMDB.
• Support CMDB-driven and two-way integration patterns between Tanium and ServiceNow.
• Enable CI and tag lifecycle changes to drive appropriate endpoint actions.
• Align business application, service, environment, ownership, and related endpoint tagging with ServiceNow data.
• Connect patching and software-deployment activities with ServiceNow change-management processes.
• Route vulnerability and incident information into appropriate ServiceNow workflows.
• Monitor and troubleshoot data synchronization and integration issues.

Automation & API Integration

• Develop integrations using Tanium APIs and automation frameworks.
• Use Ansible for Tanium agent deployment and lifecycle management across Linux and server environments.
• Develop Ansible playbooks and automation that complement Tanium-driven remediation.
• Define appropriate functional boundaries between Tanium and existing configuration-management and automation platforms to minimize duplication and conflicts.
• Document integration architecture, data flows, automation logic, and troubleshooting procedures.

Dashboards & Reporting

• Build actionable dashboards for endpoint operations, security, compliance, inventory, and management stakeholders.
• Support One Insights use cases and dashboard configuration.
• Develop appropriate dashboard segmentation for workstation and server populations and their respective ownership groups.
• Establish reporting for platform health, endpoint coverage, software inventory, vulnerabilities, compliance, and remediation.

Collaboration & Knowledge Transfer

• Work directly with Tanium professional services and customer security, infrastructure, networking, ITSM, endpoint, and automation teams.
• Serve as a senior technical resource who can drive architecture and implementation discussions.
• Participate in change-management, rollout planning, testing, and production-readiness activities.
• Produce technical runbooks, test plans, architecture documentation, troubleshooting guides, and as-built documentation.
• Train customer administrators and operators on the implementation and ongoing platform management.
• Drive knowledge transfer with the objective of enabling the internal team to operate the Tanium environment independently.

Required Qualifications

• 5+ years of experience in endpoint management, infrastructure engineering, or security engineering.
• 2+ years of hands-on Tanium experience within large enterprise environments.
• Demonstrated experience implementing and operating Tanium across tens of thousands of endpoints.
• Strong hands-on experience with Tanium Core and multiple Tanium capabilities such as Patch, Deploy, Comply, Endpoint Management, and Exposure Management.
• Strong working knowledge of Tanium Cloud and enterprise Tanium architecture.
• Demonstrated ability to function as both a Tanium architect and hands-on engineer.
• Strong experience integrating Tanium with ServiceNow, including CMDB-driven integrations and data synchronization.
• Hands-on experience with ServiceNow CMDB and Change Management.
• Strong Ansible experience, including playbooks, roles, automation, and inventory management.
• Experience building API-based integrations and automated workflows.
• Strong scripting skills using PowerShell and Python and/or Bash.
• Experience building Tanium sensors, packages, actions, targeting, and custom content.
• Strong Windows and Linux systems administration experience.
• Working knowledge of Active Directory and enterprise networking concepts.
• Experience designing dynamic endpoint groups, RBAC, and operational guardrails.
• Experience with enterprise software inventory and software/license management.
• Knowledge of vulnerability management and security/compliance frameworks such as CIS, NIST, and STIG.
• Ability to independently troubleshoot complex implementation and production issues.
• Strong written and verbal communication skills, including technical documentation and knowledge transfer.

Preferred Qualifications

• Tanium certifications such as Tanium Certified Operator or Administrator.
• Extensive hands-on experience with Tanium Cloud.
• Experience with One Insights and enterprise Tanium dashboarding.
• Advanced Tanium and ServiceNow integration experience, including CMDB synchronization and vulnerability-management workflows.
• Experience with Ansible Automation Platform.
• ServiceNow or Red Hat certifications such as CSA or RHCE.
• Experience migrating from SCCM/MECM, BigFix, or similar endpoint-management platforms.
• Experience working within highly regulated enterprise environments.
• Previous experience working alongside vendor professional services teams.

Tools and Technologies

• Tanium Cloud
• Tanium Core
• Tanium Endpoint Management
• Tanium Exposure Management
• Tanium Patch / Deploy / Comply
• Tanium Connect
• One Insights
• ServiceNow / CMDB / Change Management
• Ansible / Ansible Automation Platform
• PowerShell
• Python
• Bash
• REST APIs / Automation
• Windows
• Linux
• macOS
• Active Directory
• CIS / NIST / STIG frameworks

MatchPoint Solutions provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.