Information Security Engineering Consultant - Tanium

Optum is a global organization that delivers care, aided by technology to help millions of people live healthier lives. The work you do with our team will directly improve health outcomes by connecting people with the care, pharmacy benefits, data and resources they need to feel their best. Here, you will find a culture guided by inclusion, talented peers, comprehensive benefits and career development opportunities. Come make an impact on the communities we serve as you help us advance health optimization on a global scale. Join us to start Caring. Connecting. Growing together.

Primary Responsibilities

• Perform daily operational activities as a Tanium Administrator, including client health monitoring, platform health checks, and taking corrective actions as required
• Manage Tanium RBAC configurations, including User groups, Personas, Content sets, Computer groups, Module action groups
• Develop and maintain custom Tanium sensors and packages to meet operational and business requirements
• Plan and execute client and platform upgrades, ensuring version consistency across deployed products and policies
• Evaluate and validate new Tanium features in staging or test environments prior to production rollout
• Handle complex business use cases and operationalize Tanium solutions accordingly
• Administer and support Tanium modules including Core, Asset, Discover, Impact, Reveal, Comply, Patch, Deploy
• Coordinate with Tanium Technical Support and internal teams to resolve critical or escalated issues
• Create and maintain comprehensive Tanium documentation, including configuration standards, SOPs, and operational guides
• Conduct knowledge sharing sessions for operations and functional teams to improve platform adoption and efficiency
• Collaborate with functional teams to integrate Tanium with compatible tools and platforms
• Administer, maintain, and operate the CrowdStrike and Microsoft Defender for Endpoint platform for assigned clients
• Perform daily endpoint security checks, including sensor status, agent connectivity and policy compliance
• Coordinate containment actions such as device isolation, process termination and file quarantine
• Support SOC/SIR teams during incident response and escalation scenarios
• Manage and maintain EDR policies including - Prevention and Detection policies, Real-Time Protection, Attack Surface Reduction rules, Behavioral detection tuning
• Configure and manage exclusions, whitelisting and false-positive handling
• Create and maintain dashboards and reports for - Endpoint compliance, EDR metrics
• Troubleshoot EDR agent issues including - Sensor health problems, Performance degradation, Policy conflicts, Update failures
• Work closely with Endpoint and Infrastructure team to resolve conflicts
• Develop and maintain EDR SOPs, runbooks, and operational documentation
• Analyze, troubleshoot, and resolve platform related issues across Tanium and EDR environments
• Automate routine administrative tasks to improve operational efficiency
• Support transformation initiatives and projects as required by the organization
• Comply with the terms and conditions of the employment contract, company policies and procedures, and any and all directives (such as, but not limited to, transfer and/or re-assignment to different work locations, change in teams and/or work shifts, policies in regards to flexibility of work benefits and/or work environment, alternative work arrangements, and other decisions that may arise due to the changing business environment). The Company may adopt, vary or rescind these policies and directives in its absolute discretion and without any limitation (implied or otherwise) on its ability to do so
  
  

• 4+ years of experience with Tanium Administration, Microsoft Defender for Endpoint, Crowdstrike
• 3+ years of experience in IT infrastructure operations or a similar role
• Proven hands-on experience administering the Tanium platform, with solid expertise in the Patch module
• Hands-on experience with OS and application patching at scale using Tanium Patch or similar endpoint management tools
• Experience managing Microsoft Defender for Endpoint, including exclusions, troubleshooting, and fine tuning endpoint security configurations
• Experience performing vulnerability scans using Tanium Comply or equivalent solutions
• Knowledge of IT security best practices and experience implementing security controls on end user devices
• Solid understanding of vulnerability management and patch lifecycle best practices
• Familiarity with ITIL processes and best practices
• Proven ability to troubleshoot:
• OS and application errors
• Connectivity and performance issues
• Proven excellent communication and interpersonal skills, with the ability to explain technical concepts to non-technical stakeholders
• Demonstrated proactive approach to identifying and resolving technical issues
• Willingness to work in shifts, including weekends and holidays, as required