Tanium Server Automation & Patching Engineer

Description
We are looking for a Tanium Server Automation & Patching Engineer to automate and improve server patching, software deployment, and asset discovery across an international enterprise environment.
You will use Tanium to maintain an accurate server inventory, improve security compliance, and ensure reliable, controlled, and auditable deployments, working closely with infrastructure, cybersecurity, and application teams.

Requirements

• 3–7 years of experience in server administration, patch management, and/or large-scale vulnerability management.
• Proven hands-on experience with Tanium, including Deploy, Patch, Discover, Asset, Comply, and Inventory.
• Experience managing and patching enterprise Windows Server environments, alongside advanced Linux experience.
• Strong understanding of operating system patching, software updates, server lifecycle management, and endpoint configuration.
• Knowledge of vulnerability management and security compliance.
• Experience planning maintenance windows, managing changes, and defining rollback procedures.
• Experience automating IT operations using PowerShell, Ansible, or similar tools.
• Ability to investigate deployment logs, patching failures, and endpoint issues to identify and resolve root causes.
• Familiarity with ITSM processes, including incident, problem, change, and configuration management.
• Strong analytical, organisational, and communication skills.
• Ability to manage competing priorities and collaborate across technical teams.

Responsibilities

• Administer and support Tanium capabilities, focusing on Deploy, Patch, and Discover.
• Ensure Tanium agents are correctly installed, connected, healthy, and reporting.
• Configure targeting groups, deployment packages, maintenance windows, and operational dashboards.
• Design and improve automated patching processes for Windows and Linux servers.
• Manage deployment campaigns for security patches, operating system updates, and approved third-party software.
• Define phased deployments, pilot groups, approval workflows, and rollback or remediation procedures.
• Validate deployment results, including installation success, reboot status, and service availability.
• Investigate failed deployments and coordinate corrective actions with infrastructure and application teams.
• Identify unmanaged or non-compliant assets and support their onboarding into management processes.
• Maintain accurate server inventory and align Tanium data with CMDB and asset-management records.
• Collaborate with cybersecurity teams to prioritise vulnerability remediation and critical security updates.
• Produce compliance dashboards, reports, and audit evidence.
• Maintain runbooks, technical documentation, and standard operating procedures.
• Identify opportunities to reduce manual work through automation.
• Support emergency patching, major incident investigations, and root cause analysis.

Nice to have

• Tanium certifications or formal Tanium administration training.
• Experience working in large, global, or highly regulated enterprise environments.

Working conditions

• Fully remote role, based in Portugal.
• International environment with collaboration across infrastructure, cloud, cybersecurity, application, and regional IT teams.
• Reporting to the IT Director – Regional Infrastructure and Hosting.
• Patching activities scheduled within defined maintenance windows.
• Participation in emergency patching and major incident support when required.