Tanium Administrator

Primary Responsibilities

• Perform daily operational activities as a Tanium Administrator, including client health monitoring, platform health checks, and taking corrective actions as required.
• Manage Tanium RBAC configurations, including User Groups, Personas, Content Sets, Computer Groups, and Module Action Groups.
• Develop and maintain custom Tanium sensors and packages to meet operational and business requirements.
• Plan and execute client and platform upgrades, ensuring version consistency across deployed products and policies.
• Evaluate and validate new Tanium features in staging or test environments prior to production rollout.
• Handle complex business use cases and operationalize Tanium solutions accordingly.
• Administer and support Tanium modules including Core, Asset, Discover, Impact, Reveal, Comply, Patch, and Deploy.
• Coordinate with Tanium Technical Support and internal teams to resolve critical or escalated issues.
• Create and maintain comprehensive Tanium documentation, including configuration standards, SOPs, and operational guides.
• Conduct knowledge-sharing sessions for operations and functional teams to improve platform adoption and efficiency.
• Collaborate with functional teams to integrate Tanium with compatible tools and platforms.
• Administer, maintain, and operate CrowdStrike and Microsoft Defender for Endpoint platforms for assigned clients.
• Perform daily endpoint security checks, including sensor status, agent connectivity, and policy compliance.
• Coordinate containment actions such as device isolation, process termination, and file quarantine.
• Support SOC and Security Incident Response teams during incident response and escalation scenarios.
• Manage and maintain EDR policies, including Prevention and Detection policies, Real-Time Protection, Attack Surface Reduction rules, and behavioral detection tuning.
• Configure and manage exclusions, whitelisting, and false-positive handling.
• Create and maintain dashboards and reports for endpoint compliance and EDR metrics.
• Troubleshoot EDR agent issues, including sensor health problems, performance degradation, policy conflicts, and update failures.
• Work closely with Endpoint and Infrastructure teams to resolve conflicts.
• Develop and maintain EDR SOPs, runbooks, and operational documentation.
• Analyze, troubleshoot, and resolve platform-related issues across Tanium and EDR environments.
• Automate routine administrative tasks to improve operational efficiency.
• Support transformation initiatives and projects as required by the organization.

Required Qualifications

• At least 4 years of experience administering Tanium, Microsoft Defender for Endpoint, and CrowdStrike.
• At least 3 years of experience in IT Infrastructure Operations or a similar technical support role.
• Proven hands-on experience administering the Tanium platform, with strong expertise in the Tanium Patch module.
• Experience managing OS and application patching at scale using Tanium Patch or similar endpoint management solutions.
• Hands-on experience managing Microsoft Defender for Endpoint, including troubleshooting, exclusions management, and endpoint security tuning.
• Experience performing vulnerability assessments using Tanium Comply or equivalent vulnerability management solutions.
• Strong understanding of IT security best practices and endpoint security controls.
• Solid knowledge of vulnerability management methodologies and patch lifecycle management.
• Familiarity with ITIL processes and service management best practices.
• Proven troubleshooting experience with:
• Operating System and application issues
• Endpoint connectivity problems
• Performance-related incidents
• Excellent verbal and written communication skills with the ability to explain technical concepts to both technical and non-technical stakeholders.
• Strong analytical and problem-solving skills with a proactive approach to issue resolution.
• Willing to work on rotating shifts, including weekends and holidays when required.

Preferred Skills

• Experience supporting enterprise-scale endpoint environments.
• Knowledge of endpoint detection and response (EDR) technologies and security operations workflows.
• Experience working with Security Operations Center (SOC) teams and incident response processes.
• Exposure to automation and scripting for operational efficiency improvements.
• Experience with vulnerability remediation and compliance reporting.

WHAT WE OFFER

• Market Competitive Pay Levels
• Retirement Plan
• Medical Plan (HMO) from Day 1 of employment
• Dental, Medical, and Optical Reimbursements
• Life and Disability Insurance
• Paid Time-Off Benefits
• Sick Leave Conversion
• Tuition Fee Reimbursement
• Employee Assistance Program (EAP)
• Annual Performance Based Merit Increases
• Employee Recognition
• Training and Staff Development
• Employee Referral Program
• Employee Volunteerism Opportunity
• All Mandatory Statutory Benefits

WHO WE ARE

• Optum is the health care technology and innovation company of the UnitedHealth Group enterprise along with UnitedHealthcare.
• UnitedHealth Group is a health care and well-being company with a mission to help people live healthier lives and help make the health system work better for everyone.
• We're a leading health solution and care delivery organization. Our work is complex, but our mission is simple: create a healthier world, with you at the center.
• As part of a Fortune 5 enterprise, we are improving the health care experience of over 125 million people around the world.
• We're a diverse team with operations across North America, South America, Europe, Asia Pacific and the Middle East. This includes our over 25,000 employees in the Philippines.
• Elevate your career with a leading health care company while improving lives.