NTT DATA strives to hire exceptional, innovative and passionate individuals who want to grow with us. If you want to be part of an inclusive, adaptable, and forward-thinking organization, apply now.
We are currently seeking a Systems Engineering Senior Specialist-Vulnerability Remediation & Tanium Support to join our team in Bangalore, Karnātaka (IN-KA), India (IN).
Job Title
Systems Engineering- Vulnerability Remediation & Tanium Support (Grade 9)
Experience
7–11 years of experience in enterprise endpoint management with hands-on specialization in Tanium platform deployment and support.
Role Overview
This role is responsible for deploying, configuring, and supporting the Tanium platform across enterprise endpoint environments including Vulnerability Remediation. The engineer will manage Tanium infrastructure components, onboard endpoints, configure and administer Tanium modules, and provide L2 support for platform and endpoint issues. Working under senior guidance, the role contributes to platform stability, endpoint visibility, and operational efficiency across the managed device fleet.
Key Responsibilities
Tanium Platform Deployment
- Deploy and configure Tanium Server, Tanium Module Server, Zone Proxies, and Tanium Client across enterprise environments.
- vulnerability remediation using Tanium Comply, Detect, Patch, and custom remediation packages.
- Collaborate with security teams (SOC, Threat Management, GRC) to align remediation with vulnerability SLAs and compliance frameworks
- Drive security hardening programs across endpoints using custom sensors, packages, and benchmarks.
- Execute Tanium platform deployments following defined architecture standards, deployment runbooks, and organizational guidelines.
- Manage Tanium Client deployment at scale across Windows, Linux, and macOS endpoints using GPO, SCCM, Intune, and script-based methods.
- Configure Tanium Zone Proxies for DMZ and remote site endpoint connectivity and visibility.
- Set up and configure Tanium modules post-deployment including Tanium Patch, Deploy, Interact, Inventory, Comply, and Connect.
- Manage Tanium platform SSL certificates, authentication configurations, and RBAC role assignments during and post-deployment.
- Execute Tanium platform upgrades, module updates, and hotfix deployments following change management procedures.
- Validate post-deployment platform health — server connectivity, client registration rates, module functionality, and data accuracy.
- Document deployment configurations, architecture decisions, and post-deployment validation results for knowledge transfer.
- Support proof-of-concept (POC) and pilot deployments for new Tanium modules or platform expansions.
Tanium Platform Administration & Support
- Administer day-to-day Tanium platform operations including server health monitoring, client connectivity, and module performance.
- Monitor Tanium Server and Module Server health, disk utilization, database performance, and service availability.
- Manage Tanium Client health across the endpoint fleet — identify and remediate non-reporting, unhealthy, or disconnected endpoints.
- Configure and maintain Tanium computer groups, management rights, and content set assignments for organized endpoint management.
- Develop and maintain Tanium saved questions, sensors, and packages for endpoint data collection and targeted actions.
- Manage Tanium action approvals, deployment targeting, and action history reviews for audit and governance compliance.
- Support Tanium RBAC configuration — user roles, permissions, computer group access, and content set boundaries.
- Troubleshoot Tanium Client registration failures, SSL errors, and connectivity issues between clients and Zone Proxies.
- Perform routine Tanium platform maintenance — database cleanup, log management, index optimization, and performance tuning.
- Handle L2 escalations for Tanium platform issues, documenting root cause findings and resolution steps.
Tanium Module Operations
- Operate and support Tanium Patch for enterprise patch deployment — configure patch lists, maintenance windows, and deployment targeting.
- Manage Tanium Deploy for software distribution — create software packages, define deployment configurations, and monitor rollout success.
- Use Tanium Interact for real-time endpoint querying, ad-hoc diagnostics, and targeted endpoint actions.
- Administer Tanium Inventory for software and hardware asset discovery, tracking, and reporting across managed endpoints.
- Support Tanium Comply operations — scan endpoints against CIS and STIG benchmarks and report compliance posture.
- Configure Tanium Connect for data export integration with SIEM, ITSM, and reporting platforms.
- Monitor module-specific dashboards and act on non-compliant or at-risk endpoint findings within defined SLA windows.
- Assist in developing Tanium Comply benchmark customizations and tailored compliance profiles under senior guidance.
Endpoint Onboarding & Client Management
- Manage end-to-end Tanium Client onboarding for new endpoints, sites, and organizational units.
- Coordinate endpoint onboarding activities with infrastructure, desktop, and server teams to ensure full platform coverage.
- Validate client registration, sensor data accuracy, and module functionality for newly onboarded endpoints.
- Manage client configuration files, tanium-init.dat distribution, and client version standardization across the fleet.
- Support decommissioning and offboarding of endpoints from the Tanium platform following defined procedures.
- Track onboarding progress and report endpoint coverage metrics to senior engineers and management.
Scripting & Automation
- Develop PowerShell and Batch scripts to automate Tanium Client deployment, health checks, and remediation tasks.
- Create Tanium packages and action scripts for remote automated fixes, software installations, and configuration changes.
- Write Tanium Relevance-based sensors for custom endpoint data collection and targeted group scoping.
- Assist in developing Tanium REST API integrations for reporting automation and ITSM ticket workflows under senior guidance.
- Maintain a library of tested Tanium packages, scripts, and deployment runbooks for team reuse.
Secondary Platform Support
- Working knowledge of SCCM / Microsoft Intune for hybrid endpoint environments where Tanium coexists with Microsoft tooling.
- Support Tanium Client deployment leveraging SCCM and Intune as distribution mechanisms for managed endpoints.
- Assist in troubleshooting endpoint management conflicts between Tanium and co-existing SCCM/Intune tooling.
Collaboration & Service Excellence
- Collaborate with infrastructure, security, desktop, and server teams to support Tanium deployment and operational activities.
- Participate in change management processes for all Tanium platform configuration changes and deployments.
- Contribute to Tanium knowledge base articles, deployment SOPs, and operational runbooks.
- Escalate complex platform issues to senior Tanium engineers with detailed diagnostic information and troubleshooting notes.
- Support audit and compliance activities by providing Tanium platform configuration documentation and endpoint coverage reports.
- Assist in mentoring lower Grade engineers on Tanium platform fundamentals and endpoint support best practices.
Required Skills
- HCL Tanium — Server, Module Server, Zone Proxy, and Client deployment and administration (intermediate to advanced level)
- Tanium Patch, Deploy, Interact, Inventory, Comply, Connect — module configuration and operations
- Tanium Client deployment via GPO, SCCM, Intune, and PowerShell scripting
- Tanium sensor, package, and saved question development
- Vulnerability Remediation
- Understanding of CVEs
- Tanium RBAC — user roles, computer groups, content set management
- Tanium Relevance Language for custom sensor and targeting development
- PowerShell and Batch scripting for Tanium automation and client management
- Tanium Connect integration with SIEM and ITSM platforms
- Windows, Linux, and macOS endpoint management fundamentals
- SCCM / Microsoft Intune — working knowledge for co-managed environments
- ITSM tools — ServiceNow or equivalent for incident and change management
- Good communication, documentation, and cross-team collaboration skills
- Ability to manage multiple concurrent deployment tasks and support activities
Preferred Qualifications
- Tanium Certified Administrator or equivalent hands-on certification
- Microsoft Endpoint Administrator (MD-102) or SCCM certification
- ITIL Foundation certification
- Experience supporting enterprise environments of 5,000+ endpoints
- Familiarity with CIS Benchmark and STIG compliance frameworks
- Experience with REST API integrations for endpoint management automation
Minimum Education
Graduation / Engineering degree
About NTT DATA
NTT DATA is a $30 billion business and technology services leader, serving 75% of the Fortune Global 100. We are committed to accelerating client success and positively impacting society through responsible innovation. We are one of the world's leading AI and digital infrastructure providers, with unmatched capabilities in enterprise-scale AI, cloud, security, connectivity, data centers and application services. our consulting and Industry solutions help organizations and society move confidently and sustainably into the digital future. As a Global Top Employer, we have experts in more than 50 countries. We also offer clients access to a robust ecosystem of innovation centers as well as established and start-up partners. NTT DATA is a part of NTT Group, which invests over $3 billion each year in R&D.
Whenever possible, we hire locally to NTT DATA offices or client sites. This ensures we can provide timely and effective support tailored to each client's needs. While many positions offer remote or hybrid work options, these arrangements are subject to change based on client requirements. For employees near an NTT DATA office or client site, in-office attendance may be required for meetings or events, depending on business needs. At NTT DATA, we are committed to staying flexible and meeting the evolving needs of both our clients and employees. NTT DATA recruiters will never ask for payment or banking information and will only use @nttdata.com and @talent.nttdataservices.com email addresses. If you are requested to provide payment or disclose banking information, please submit a contact us form, https://us.nttdata.com/en/contact-us.
NTT DATA endeavors to make https://us.nttdata.com accessible to any and all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please contact us at https://us.nttdata.com/en/contact-us. This contact information is for accommodation requests only and cannot be used to inquire about the status of applications. NTT DATA is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or protected veteran status. For our EEO Policy Statement, please click here. If you'd like more information on your EEO rights under the law, please click here. For Pay Transparency information, please click here.Skills Required
Batch Scripting, Powershell Scripting, Intune, Sccm
){kind=logo}
){kind=logo}
