Tanium Patch Engineer – Enterprise Endpoint Security

Ampcus, Inc; Chicago (IL); On-site; USD 110,000 - 140,000; Full time

Job summary

Ampcus Inc. is seeking a Tanium Patch Management Engineer to administer and optimize an enterprise patch program across Windows, Linux, and macOS using Tanium.

You will collaborate with Infrastructure, Security Operations, Vulnerability Management, Server Operations, and Application Support teams to remediate vulnerabilities within SLAs while maintaining business continuity. Remote-friendly role in Chicago, IL with opportunities for automation and reporting.

Qualifications

• 3+ years of experience in endpoint management or patch management.
• 2+ years of hands-on experience administering Tanium.
• Experience supporting large enterprise environments; 5,000+ endpoints preferred.
• Experience with vulnerability management and remediation programs.

Responsibilities

• Administer and support Tanium Patch and Tanium Comply modules.
• Plan, schedule, deploy, and validate operating system and third-party patches.
• Execute emergency and zero-day patching activities for critical security vulnerabilities.
• Monitor patch deployment success rates and remediation effectiveness.
• Troubleshoot failed patch deployments and coordinate corrective actions.
• Partner with Vulnerability Management teams to prioritize remediation based on risk, exposure, and business impact.
• Analyze vulnerability assessment data and develop remediation plans.
• Support security compliance initiatives and audit requirements.
• Track remediation progress and ensure adherence to organizational security standards.
• Configure and maintain Tanium clients, patch policies, maintenance windows, and deployment packages.
• Support RBAC administration, endpoint grouping, content distribution, and module configuration.
• Monitor platform health, endpoint connectivity, and client performance.
• Assist with Tanium platform upgrades, testing, and troubleshooting.
• Develop operational dashboards and executive‑level reporting.
• Produce patch compliance metrics, vulnerability remediation status, and SLA attainment reports.
• Identify compliance gaps and recommend remediation strategies.
• Support audit requests and evidence collection activities.
• Develop automated patch deployment workflows.
• Create and maintain operational runbooks and standard operating procedures.
• Identify opportunities to reduce MTTP and improve operational efficiency.
• Integrate Tanium data with ServiceNow, CMDB, and security platforms where applicable.
• Coordinate patching activities with application owners and infrastructure teams.
• Participate in change management reviews and CAB processes.
• Provide Tier 3 support for complex patching and endpoint management issues.
• Mentor junior engineers and share Tanium best practices across the organization.

Skills

Endpoint management

Patch management

Scripting PowerShell

Automation

Tools

Tanium Patch

Tanium Comply

Tanium Asset

Tanium Client

ServiceNow

Windows Server administration

Linux administration

macOS patching

PowerShell scripting

Job description

Ampcus Inc. is seeking a Tanium Patch Management Engineer to administer and optimize an enterprise patch program across Windows, Linux, and macOS using Tanium.

You will collaborate with Infrastructure, Security Operations, Vulnerability Management, Server Operations, and Application Support teams to remediate vulnerabilities within SLAs while maintaining business continuity. Remote-friendly role in Chicago, IL with opportunities for automation and reporting.