Tanium Patch Management Engineer

Ampcus Inc. is a certified global provider of a broad range of Technology and Business consulting services. We are in search of a highly motivated candidate to join our talented Team.

Job Title: Tanium Patch Management Engineer

Location(s): Chicago, IL
(Remote)

Position Summary
The Tanium Patch Management Engineer is responsible for administering, optimizing, and supporting an enterprise patch management program using the Tanium platform. This role focuses on endpoint security, compliance, and operational stability through the deployment of operating system patches, third-party application updates, and configuration remediation across Windows, Linux, and macOS environments.

The engineer will collaborate closely with Infrastructure, Security Operations, Vulnerability Management, Server Operations, and Application Support teams to ensure critical vulnerabilities are remediated within established service-level objectives while minimizing business disruption.

The position also supports Tanium platform administration, reporting, troubleshooting, automation, and continuous process improvement.

Key Responsibilities
Patch Management Operations

• Administer and support Tanium Patch and Tanium Comply modules.
• Plan, schedule, deploy, and validate operating system and third-party application patches.
• Execute emergency and zero-day patching activities for critical security vulnerabilities.
• Monitor patch deployment success rates and remediation effectiveness.
• Troubleshoot failed patch deployments and coordinate corrective actions.

• Partner with Vulnerability Management teams to prioritize remediation based on risk, exposure, and business impact.
• Analyze vulnerability assessment data and develop remediation plans.
• Support security compliance initiatives and audit requirements.
• Track remediation progress and ensure adherence to organizational security standards.

• Configure and maintain Tanium clients, patch policies, maintenance windows, and deployment packages.
• Support RBAC administration, endpoint grouping, content distribution, and module configuration.
• Monitor platform health, endpoint connectivity, and client performance.
• Assist with Tanium platform upgrades, testing, and troubleshooting.

• Develop operational dashboards and executive-level reporting.
• Produce patch compliance metrics, vulnerability remediation status, and SLA attainment reports.
• Identify compliance gaps and recommend remediation strategies.
• Support audit requests and evidence collection activities.

• Develop automated patch deployment workflows.
• Create and maintain operational runbooks and standard operating procedures.
• Identify opportunities to reduce Mean Time to Patch (MTTP) and improve operational efficiency.
• Integrate Tanium data with ServiceNow, CMDB, and security platforms where applicable.

• Coordinate patching activities with application owners and infrastructure teams.
• Participate in change management reviews and CAB processes.
• Provide Tier 3 support for complex patching and endpoint management issues.
• Mentor junior engineers and share Tanium best practices across the organization.

• 3+ years of experience in endpoint management or patch management.
• 2+ years of hands-on experience administering Tanium.
• Experience supporting large enterprise environments; 5,000+ endpoints preferred.
• Experience with vulnerability management and remediation programs.

• Tanium Patch
• Tanium Comply
• Tanium Asset
• Tanium Client
• Windows Server administration
• Linux administration, including RHEL, CentOS, and/or Ubuntu
• macOS patching
• PowerShell and scripting automation
• Endpoint security and vulnerability management practices
• ServiceNow integration and ticketing workflows
• Software packaging and deployment methodologies

• Tanium Certified Operator (TCO)
• Tanium Certified Administrator (TCA)
• Tanium Certified Analyst (TANCA)
• Microsoft Endpoint Management experience
• SCCM / MECM experience
• Microsoft Intune experience
• CompTIA Security+ certification
• ITIL Foundation certification
• CISSP certification preferred

Ampcus is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.