Tanium Engineer

This role is focused on designing, implementing, and operating a continuous resiliency validation program for Active Directory, DNS, DHCP, and supporting infrastructure services. The candidate will use Tanium to build endpoint visibility, compliance monitoring, health validation checks, dashboards, and reporting, with automated remediation integrated via Ansible. This is a senior-level position - we need someone capable of independently architecting monitoring solutions, not just operating an existing Tanium environment., 1. Tanium Platform Engineering - Design and implement Tanium-based resiliency validation frameworks; develop and maintain custom sensors, packages, saved questions, and actions; build dashboards, compliance reporting, and real-time visibility into endpoint/infrastructure compliance; configure automated validation routines and scheduled health assessments.

1. Active Directory Resiliency Monitoring - Develop Tanium checks validating domain controller health, AD replication status, Global Catalog availability, FSMO role health, SYSVOL/NETLOGON functionality, time sync, and service record registration; build compliance reporting and exception management; support remediation automation for AD service failures and configuration drift.
2. DNS Validation and Compliance - Build sensors/monitoring for DNS server health, client DNS configuration, resolution performance, registration validation, and forward/reverse lookup functionality; identify non-standard, obsolete, or misconfigured DNS endpoints; drive remediation through automated workflows.
3. DHCP Monitoring and Resiliency - Implement monitoring for scope utilization, exhaustion risk, lease activity, failover state, and configuration consistency across failover partners; develop automated corrective actions for service disruptions.
4. Infrastructure Dependency Validation - Build monitoring/compliance assessments for supporting infrastructure dependencies, configuration alignment, and failure domain distribution; identify single points of failure and resiliency risks.
5. Automation Integration - Integrate Tanium findings with Ansible workflows; develop event-driven remediation processes; support self-healing infrastructure initiatives; participate in controlled failover testing and resiliency exercises.

• 5+ years of Tanium administration and engineering experience
• Experience developing custom Tanium sensors, packages, saved questions, and actions
• Experience with Tanium Interact, Comply, Impact, Reporting, and related modules (Tanium Automate preferred)
• Strong PowerShell scripting experience
• Strong understanding of Active Directory, DNS, DHCP, Windows Server, Group Policy, and domain controller operations (AD replication, Global Catalog, FSMO roles, DNS architecture, DHCP failover design)
• Experience integrating Tanium with automation/IT operations platforms; Ansible automation experience
• Experience supporting large-scale enterprise endpoint environments and validating high-availability solutions
• Familiarity with infrastructure-as-code concepts, * Tanium Certified Professional or equivalent certification
• Microsoft Windows Server certifications
• Experience with enterprise monitoring platforms and hybrid cloud environments
• Experience with resiliency testing, failover exercises, and disaster recovery validation
• Security and compliance monitoring experience