Certified Tanium Administration ​/ Service Lead

Certified Tanium Administration & Service Lead

At Foresite, we deliver managed cybersecurity, endpoint certainty, and cloud security operations to organizations worldwide. Through our Tanium as a Service (TANIUMaaS) offerings, we eliminate the endpoint visibility gap, giving our clients 15-second real-time asset discovery, automated hygiene, and scale remediation.

We are seeking a Certified Tanium Administration & Service Lead to champion our managed Tanium capabilities, drive technical operations for our client base, and articulate the value of real-time endpoint management to both technical teams and executive stakeholders.

As the Certified Tanium Administration / Service Lead, you will serve as Foresite's core subject matter expert (SME) and operational leader for the Tanium platform. You will lead platform architecture, administration, deployment tuning, and service delivery across multi-tenant and dedicated customer environments. You will bridge technical delivery and customer enablement—guiding clients through continuous IT hygiene, vulnerability reduction, and operational best practices.

• Act as the Tanium SME and thought leader:
  Serve as the primary technical point of contact and evangelist for Foresite's Tanium offerings, leading workshops, operational reviews, and strategic technical discussions with client leadership, security teams, and IT operators.
• Drive client enablement & use cases:
  Educate client teams on Tanium workflows, query construction, and platform best practices to maximize platform utilization and ROI. Translate complex Tanium modules (e.g., Asset, Discover, Patch, Deploy, Comply, Enforce) into actionable, high-value outcomes.
• Architect platform & multi-tenant environments:
  Design, deploy, and maintain high-availability Tanium server infrastructure across multi-tenant MSSP customer environments, ensuring complete client data isolation and scalable operational delivery across on-prem, cloud, and hybrid estates.
• Enforce RBAC governance:
  Architect and enforce strict RBAC policies, user roles, persona groups, and computer group boundaries to ensure granular operational control and adhere to strict multi-tenant access principles.
• Fine-tune bandwidth & network controls:
  Configure Tanium network parameters—including bandwidth throttling limits, peer-to-peer linear chain protocols, and WAN/LAN rate limiting—to guarantee high-speed, sub-minute telemetry without impacting network infrastructure.
• Manage custom sensors & package operations:
  Evaluate, test, and troubleshoot custom Tanium sensors, packages, action locks, saved queries, and scripts (Power Shell, Bash, Python) provided by developers or Tanium Content to safely meet tailored operational and security requirements.
• Oversee service operations & SLAs:
  Manage service performance, deployment health checks, unmanaged device discovery, and vulnerability remediation metrics for managed clients.
• Serve as Tier 3/4 escalation lead:
  Act as the final escalation point for complex Tanium client issues, agent troubleshooting, or service disruptions.
• Build standard operating procedures (SOPs):
  Build and maintain internal playbooks, client onboarding frameworks, and automated operational runbooks to standardize managed delivery.

Experience:

5+ years of direct, hands-on experience administering and operating Tanium at scale (20,000+ endpoints).

Mastery of Tanium Architecture:
Expert knowledge of Tanium Linear Chain architecture, peer-to-peer distribution, sensor mechanics, action locks, and role-based access controls (RBAC).

Comprehensive Module Knowledge:
Deep hands-on experience across Core & Operations (Asset, Discover, Direct Connect, Trends, Client Management), Endpoint Management (Patch, Deploy, Performance, Provision), and Risk & Security (Comply, Reveal, Threat Response, Benchmark, Enforce).

Strong technical & scripting skills:
Proficient in Power Shell, Bash, or Python for custom sensor and package development, with in-depth understanding of OS internals (Windows, macOS, Linux) and core networking concepts (TCP/IP, firewalls, subnets, proxies).

Strong client-facing communication:
Ability to demystify complex…